AVP, ICT Risk Governance & Strategic Oversight

State Street; Województwo pomorskie; On-site; PLN 180,000 - 240,000; Full time

Job summary

State Street Bank International (SSBI) seeks an ICT Risk Governance & Oversight AVP to support the ICT Risk Manager in independent oversight, governance, and reporting of ICT risks across SSBI. You will operate in the Second Line of Defense and help develop the SSBI Risk Management Framework, ensuring alignment with DORA and related supervisory expectations.

You will collaborate with Enterprise Risk, Third Party Risk, Information Security, and Operational Resilience to identify, assess and

Qualifications

• 4-8 years of experience in ICT Risk/Operational Risk/Info Security/Resilience/Technology Controls or Audit.
• Bachelor’s or Master’s degree in Risk Management, IT, Info Security, Finance or related discipline.
• Certifications such as CRISC, CISA, CISM, CISSP or equivalent preferred.

Responsibilities

• Prepare materials for ICT governance committees and senior management reporting.
• Conduct independent review and challenge of ICT risk assessments and control evaluations.
• Escalate ICT risk concerns to the ICT Risk Manager and ORM leadership with recommendations.
• Support development and reporting of ICT risk appetite metrics and KRIs.
• Produce risk reporting, trend analysis and regulatory demonstrations of ICT risk governance.

Skills

Analytical skills

Regulatory knowledge

DORA awareness

Second-line challenge

Stakeholder management

Education

Bachelor in Risk/IT/Info Sec/Finance/Business

Master in Risk/IT/Info Sec/Finance/Business

CRISC/CISA/CISM/CISSP or equivalent

Job description

State Street Bank International (SSBI) seeks an ICT Risk Governance & Oversight AVP to support the ICT Risk Manager in independent oversight, governance, and reporting of ICT risks across SSBI. You will operate in the Second Line of Defense and help develop the SSBI Risk Management Framework, ensuring alignment with DORA and related supervisory expectations.

You will collaborate with Enterprise Risk, Third Party Risk, Information Security, and Operational Resilience to identify, assess and