Chief Cyber Risk & Third-Party Risk Leader

State Street

Quincy (MA)

On-site

USD 170,000 - 283,000

Full time

6 days ago

Be an early applicant

Application generator

An application made for this job — a tailored resume and cover letter that speak straight to the posting.

Get past ATS filters

Benefits offered by this job

401K match

Comprehensive benefits package

Paid time off

Job summary

State Street is seeking a Managing Director for Cyber Risk & Third-Party Risk Management to lead enterprise cyber risk governance, metrics, and remediation programs. You will own the Cyber Risk Framework, CCAP, issue and audit management, plus risk reporting across first- and second-line functions.

You will influence risk quantification, regulatory alignment, and cross-functional risk visibility for executive and board oversight.

Qualifications

15+ years of experience in cybersecurity risk management, technology risk, operational risk, audit, assurance, or enterprise risk leadership.
Significant experience managing enterprise cyber risk and third-party risk programs.
Deep expertise in cyber risk frameworks, control assurance, issue management, control governance, and audit management.
Proven experience presenting aggregate risk themes and recommendations to executive leadership and Board committees.

Responsibilities

Lead Cyber Risk Framework and operationalize risk management across the enterprise.
Own Third-Party Cyber Risk Management framework and program.
Oversee risk aggregation, mitigation, and regulatory alignment across domains.
Drive governance of issue management, control governance, and audit management activities.
Coordinate TRAs, risk reporting, and executive-committee briefings.
Partner with ETRM to ensure TRA scoping reflects cyber risk.