Technology & Cyber Risk, VP

2001 SSB&T; Boston (MA); On-site; USD 120,000 - 203,000; Full time

Benefits offered by this job

401K with match

Insurance coverage

Paid time off

Employee Assistance Program

Incentive compensation

Tax-advantaged savings plans

Job summary

State Street Corp in Boston seeks a senior Cyber & Technology Risk Vice President to serve as the primary risk partner for Wealth Services. This is a high-visibility role requiring independent risk oversight across the technology environment and the ability to challenge and influence senior stakeholders.

The ideal candidate has 10+ years in Technology/Cyber Risk, with wealth-management experience, and a proven ability to translate complex technical risks into clear business implications for

Qualifications

• 10+ years in Technology/Cyber risk within regulated settings.
• Experience in Wealth Management preferred.
• Strong communication with senior stakeholders.

Responsibilities

• Serve as the primary ETRM point of contact for Wealth Services.
• Coordinate and manage technology and cybersecurity risk oversight activities.
• Provide independent review and effective challenge of technology, cybersecurity, and resilience risks.
• Conduct or oversee technology risk assessments and risk reporting.
• Evaluate risks arising from control gaps, technology changes, and evolving business activities.
• Monitor ITGCs and cybersecurity controls; escalate as needed.
• Prepare risk reporting for senior management and governance bodies.

Skills

Technology risk oversight

Cybersecurity risk management

Stakeholder management

Communication and presentation

Risk reporting

Regulatory risk knowledge

Education

Undergraduate degree in technology or related field

Tools

Tableau

Power BI

GRC platforms

Job description

Who We Are

Enterprise Technology Risk Management (ETRM) is part of State Street’s Enterprise Risk Management organization. As a Second Line of Defense function, ETRM provides independent oversight, monitoring, effective challenge, and guidance related to technology and cybersecurity risk.

Who We Are Looking For

We are seeking an experienced Cyber & Technology Risk Vice President to serve as the primary technology risk partner for State Street’s newly established Wealth Services business. This is a senior risk oversight and business-partnering role, rather than a cybersecurity engineering, security operations, or control-testing position. The VP will serve as the primary Technology and Cyber Risk partner to Wealth Services, providing independent risk oversight and effective challenge across its technology environment. The ideal candidate will bring more than 10 years of experience in Technology and Cybersecurity Risk, including experience within Wealth Management. Strong knowledge of technology and operational resilience is also important. Candidates may come from first-line Technology Risk, second-line risk oversight, or Technology Audit, provided they have direct experience assessing and challenging technology and cybersecurity risks. This role requires someone who can independently manage complex risk activities, communicate effectively with senior stakeholders, and translate technical issues into clear business and risk implications.

Why This Role Is Important to Us

Wealth Services is a new strategic business for State Street. This newly created role offers the opportunity to help establish and mature its cyber and technology risk oversight capabilities as the business, technology environment, and risk profile continue to develop. As the primary ETRM contact for Wealth Services, the successful candidate will provide independent oversight and effective challenge while helping the business identify and manage technology, cybersecurity, and resilience risks. The role will also support clear risk reporting to senior management, governance committees, and other stakeholders.

What You Will Be Responsible For

• Serve as the primary ETRM point of contact for the Wealth Services business and its Risk Management team.
• Coordinate and manage technology and cybersecurity risk oversight activities across Wealth Services.
• Provide independent review and effective challenge of technology, cybersecurity, and resilience risks.
• Conduct or oversee technology risk assessments, material risk identification, real-time risk oversight, issue monitoring, and risk reporting.
• Evaluate technology and cybersecurity risks arising from control gaps, control weaknesses, technology changes, and evolving business activities.
• Assess the use and effectiveness of IT General Controls and cybersecurity controls without necessarily performing detailed control testing.
• Monitor technology risk exposure and establish appropriate escalation and reporting channels.
• Prepare clear, timely technology and cybersecurity risk reporting for senior management, governance committees, and boards, as appropriate.
• Partner with first-line Technology Risk, Cybersecurity, business, and technology teams to support timely identification and management of risk.
• Collaborate with other ETRM and Enterprise Risk Management professionals to promote alignment with broader operational and enterprise risk programs.
• Monitor emerging technology, cybersecurity, resilience, and regulatory risks affecting Wealth Management businesses.
• Support regulatory examinations, audits, client engagements, and remediation activities, as needed.
• Provide risk guidance related to new products, technology initiatives, platforms, vendors, clients, or transactions.
• Promote a strong culture of risk awareness, constructive challenge, and accountability.

What We Value

• Strong practical knowledge of Technology Risk and Cybersecurity Risk within a regulated financial-services environment.
• The ability to work independently and take direct ownership of complex risk activities and deliverables.
• A clear understanding of the role of first- and second-line risk functions and the importance of independent, constructive challenge.
• Strong knowledge of technology and operational resilience.
• The ability to translate technical risks into clear business, operational, regulatory, and client implications.
• Strong judgment and the ability to prioritize and escalating significant risks appropriately.
• The credibility to influence senior business, technology, cybersecurity, and risk stakeholders.
• Strong communication, negotiation, presentation, and relationship-management skills.
• The ability to maintain productive stakeholder relationships while providing effective challenge.
• Experience working across global teams and diverse business environments.

Qualifications

• 10+ years of progressive experience in Technology Risk, Cybersecurity Risk, Technology Audit, or a related risk and control function, ideally within financial services or another highly regulated environment.
• Experience supporting Wealth Management is preferred.
• Candidates with significant Technology/Cyber Risk experience supporting other complex financial-services businesses also considered.
• Strong experience identifying, assessing, monitoring, challenging, and reporting technology and cybersecurity risks.
• Strong knowledge of technology and operational resilience, including the ability to assess risks associated with technology environments and critical business services.
• Working knowledge of IT General Controls (ITGCs), cybersecurity controls, risk assessments, issue management, and control frameworks.
• Direct control-testing experience is not required.
• Experience applying recognized technology and cybersecurity frameworks such as NIST, ISO 27000, COBIT, CSA Cloud Controls Matrix, ITIL, or comparable standards.
• Experience developing and presenting technology and cybersecurity risk reporting to senior management, governance committees, or boards.
• Demonstrated ability to operate independently as a hands‑on risk professional and serve as a primary point of contact for business, technology, cybersecurity, and risk stakeholders.
• Ability to translate complex technical risks into clear business, operational, and risk implications for nontechnical stakeholders.
• Strong communication, negotiation, presentation, judgment, and stakeholder-management skills.
• Undergraduate degree in technology, information security, risk management, business, or a related discipline, or equivalent relevant professional experience.
• Experience supporting regulatory examinations, regulatory responses, internal audits, or remediation initiatives is a plus.
• Knowledge of AI adoption, AI governance, or AI risk management is a plus.
• Experience with third-party/vendor risk assessments or M&A technology-risk due diligence is a plus.
• Experience with GRC platforms, risk-data analytics, Tableau, or Power BI is a plus.
• Professional certifications such as CISA, CISM, CISSP, CRISC, CGEIT, CCSP, COBIT, or ITIL are a plus.

Are You the Right Candidate?

We recognize that successful candidates bring different combinations of experience and expertise.

Salary Range

Salary Range: $120,000 - $202,500 Annual The range quoted above applies to the role in the primary location specified. If the candidate would ultimately work outside of the primary location above, the applicable range could differ.

Benefits

• our retirement savings plan (401K) with company match;
• insurance coverage including basic life, medical, dental, vision, long-term disability, and other optional additional coverages;
• paid-time off including vacation, sick leave, short term disability, and family care responsibilities;
• access to our Employee Assistance Program;
• incentive compensation including eligibility for annual performance-based awards (excluding certain sales roles subject to sales incentive plans);
• and, eligibility for certain tax advantaged savings plans.

About State Street

Across the globe, institutional investors rely on us to help them manage risk, respond to challenges, and drive performance and profitability. We keep our clients at the heart of everything we do, and smart, engaged employees are essential to our continued success. We are committed to fostering an environment where every employee feels valued and empowered to reach their full potential. As an essential partner in our shared success, you’ll benefit from inclusive development opportunities, flexible work‑life support, paid volunteer days, and vibrant employee networks that keep you connected to what matters most. Join us in shaping the future.

Equal Opportunity Employer

As an Equal Opportunity Employer, we consider all qualified applicants for all positions without regard to race, creed, color, religion, national origin, ancestry, ethnicity, age, disability, genetic information, sex, sexual orientation, gender identity or expression, citizenship, marital status, domestic partnership or civil union status, familial status, military and veteran status, and other characteristics protected by applicable law.

Discover more information on jobs at StateStreet.com/careers Read our CEO Statement