Technology & Cyber Risk - Wealth Services, VP

State Street Corp; Boston (MA); On-site; USD 120,000 - 203,000; Full time

Benefits offered by this job

401K with company match

Medical insurance

Paid time off

Volunteer days

Employee networks

Job summary

State Street is seeking a Cyber & Technology Risk Vice President for Wealth Services in Boston. This hands-on role coordinates and manages cyber and technology risk oversight, working with Risk Management, technology teams, and business leaders to identify, assess, monitor, and report risks.

The successful candidate will bring 10+ years of technology risk experience, with knowledge of regulatory frameworks and wealth management. Strong communication and independent delivery are essential.

Qualifications

• 10+ years of progressive experience in Technology Risk, Cybersecurity Risk, Technology Audit, or related risk function.
• Experience supporting Wealth Management businesses and understanding its products, platforms, operations, and risk.
• Strong experience identifying, assessing, monitoring, challenging, and reporting technology and cybersecurity risks.
• Knowledge of technology and operational resilience in regulated financial services.
• IT General Controls (ITGCs) and cybersecurity controls knowledge; testing not required.
• Experience applying frameworks such as NIST, ISO 27000, COBIT, CSA, ITIL.
• Experience presenting risk reporting to senior management and boards.
• Ability to operate independently as a hands-on risk professional and engage stakeholders.
• Ability to translate technical risk into business implications.
• Strong communication, negotiation, presentation, and stakeholder-management skills.
• Experience with regulatory examinations or remediation is a plus.
• Knowledge of AI governance or risk is a plus.
• Vendor risk assessments or M&A tech risk due diligence is a plus.
• GRC platforms, risk-data analytics, Tableau or Power BI is a plus.
• Certifications such as CISA, CISM, CISSP, CRISC, CGEIT, CCSP, COBIT, ITIL are a plus.

Responsibilities

• Serve as the primary ETRM point of contact for the Wealth Services business and its Risk Management team.
• Coordinate and manage technology and cybersecurity risk oversight activities across Wealth Services.
• Provide independent review and effective challenge of technology, cybersecurity, and resilience risks.
• Conduct or oversee technology risk assessments, material risk identification, real-time risk oversight, issue monitoring, and risk reporting.
• Evaluate technology and cybersecurity risks arising from control gaps, control weaknesses, technology changes, and evolving business activities.
• Assess the use and effectiveness of IT General Controls and cybersecurity controls without detailed testing.
• Monitor technology risk exposure and establish escalation/reporting channels.
• Prepare clear, timely technology and cybersecurity risk reporting for senior management and boards.
• Partner with first-line Technology Risk, Cybersecurity, and business teams to identify and manage risk.
• Collaborate with other ETRM and ERM professionals to align with enterprise risk programs.
• Monitor emerging tech, cybersecurity, resilience, and regulatory risks affecting Wealth Management.
• Support regulatory examinations, audits, client engagements, and remediation activities.
• Provide risk guidance on new products, technology initiatives, platforms, vendors, clients, or transactions.
• Promote a culture of risk awareness, constructive challenge, and accountability.

Education

Bachelor's degree in technology, information security, risk management, business, or a related discipline

Tools

Tableau

Power BI

Job description

Who We Are

Enterprise Technology Risk Management (ETRM) is part of State Street’s Enterprise Risk Management organization. As a Second Line of Defense function, ETRM provides independent oversight, monitoring, effective challenge, and guidance related to technology and cybersecurity risk.

Who We Are Looking For

We are seeking an experienced Cyber & Technology Risk Vice President to serve as the primary technology risk partner for State Street’s newly established Wealth Services business.

This is a hands‑on role responsible for coordinating and managing cyber and technology risk oversight activities for Wealth Services. The successful candidate will work closely with Wealth Services Risk Management, business leaders, technology teams, and other risk partners to identify, assess, monitor, challenge, elevate, and report technology and cybersecurity risks.

The ideal candidate will bring more than 10 years of experience in Technology and Cybersecurity Risk, including experience within Wealth Management. Strong knowledge of technology and operational resilience is also important. Candidates may come from first-line Technology Risk, second-line risk oversight, or Technology Audit, provided they have direct experience assessing and challenging technology and cybersecurity risks.

This role requires someone who can independently manage complex risk activities, communicate effectively with senior stakeholders, and translate technical issues into clear business and risk implications.

Why This Role Is Important to Us

Wealth Services is a new strategic business for State Street. This newly created role offers the opportunity to help establish and mature its cyber and technology risk oversight capabilities as the business, technology environment, and risk profile continue to develop.

As the primary ETRM contact for Wealth Services, the successful candidate will provide independent oversight and effective challenge while helping the business identify and manage technology, cybersecurity, and resilience risks. The role will also support clear risk reporting to senior management, governance committees, and other stakeholders.

What You Will Be Responsible For

As Cyber & Technology Risk, Vice President – Wealth Services, you will:

• Serve as the primary ETRM point of contact for the Wealth Services business and its Risk Management team.


• Coordinate and manage technology and cybersecurity risk oversight activities across Wealth Services.


• Provide independent review and effective challenge of technology, cybersecurity, and resilience risks.


• Conduct or oversee technology risk assessments, material risk identification, real‑time risk oversight, issue monitoring, and risk reporting.


• Evaluate technology and cybersecurity risks arising from control gaps, control weaknesses, technology changes, and evolving business activities.


• Assess the use and effectiveness of IT General Controls and cybersecurity controls without necessarily performing detailed control testing.


• Monitor technology risk exposure and establish appropriate escalation and reporting channels.


• Prepare clear, timely technology and cybersecurity risk reporting for senior management, governance committees, and boards, as appropriate.


• Partner with first-line Technology Risk, Cybersecurity, business, and technology teams to support timely identification and management of risk.


• Collaborate with other ETRM and Enterprise Risk Management professionals to promote alignment with broader operational and enterprise risk programs.


• Monitor emerging technology, cybersecurity, resilience, and regulatory risks affecting Wealth Management businesses.


• Support regulatory examinations, audits, client engagements, and remediation activities, as needed.


• Provide risk guidance related to new products, technology initiatives, platforms, vendors, clients, or transactions.


• Promote a strong culture of risk awareness, constructive challenge, and accountability.

What We Value

• Strong practical knowledge of Technology Risk and Cybersecurity Risk within a regulated financial-services environment.


• The ability to work independently and take direct ownership of complex risk activities and deliverables.


• A clear understanding of the role of first- and second-line risk functions and the importance of independent, constructive challenge.


• Strong knowledge of technology and operational resilience.


• The ability to translate technical risks into clear business, operational, regulatory, and client implications.


• Strong judgment and the ability to prioritize and elevate significant risks appropriately.


• The credibility to influence senior business, technology, cybersecurity, and risk stakeholders.


• Strong communication, negotiation, presentation, and relationship-management skills.


• The ability to maintain productive stakeholder relationships while providing effective challenge.


• Experience working across global teams and diverse business environments.

Qualifications

• 10+ years of progressive experience in Technology Risk, Cybersecurity Risk, Technology Audit, or a related risk and control function, ideally within financial services or another highly regulated environment.


• Demonstrated experience supporting a Wealth Management business, with an understanding of its products, platforms, operations, technology environment, and risk considerations.


• Strong experience identifying, assessing, monitoring, challenging, and reporting technologyand cybersecurity risks.


• Strong knowledge of technology and operational resilience, including the ability to assess risks associated with technology environments and critical business services.


• Working knowledge of IT General Controls (ITGCs), cybersecurity controls, risk assessments, issue management, and control frameworks. Direct control‑testing experience is not required.


• Experience applying recognized technology and cybersecurity frameworks such as NIST, ISO 27000, COBIT, CSA Cloud Controls Matrix, ITIL, or comparable standards.


• Experience developing and presenting technology and cybersecurity risk reporting to senior management, governance committees, or boards.


• Demonstrated ability to operate independently as a hands‑on risk professional and serve as a primary point of contact for business, technology, cybersecurity, and risk stakeholders.


• Ability to translate complex technical risks into clear business, operational, and risk implications for non‑technical stakeholders.


• Strong communication, negotiation, presentation, judgment, and stakeholder‑management skills.


• Undergraduate degree in technology, information security, risk management, business, or a related discipline, or equivalent relevant professional experience.


• Experience supporting regulatory examinations, regulatory responses, internal audits, or remediation initiatives is a plus.


• Knowledge of AI adoption, AI governance, or AI risk management is a plus.


• Experience with third‑party/vendor risk assessments or M&A technology‑risk due diligence is a plus.


• Experience with GRC platforms, risk‑data analytics, Tableau, or Power BI is a plus.


• Professional certifications such as CISA, CISM, CISSP, CRISC, CGEIT, CCSP, COBIT, or ITIL are a plus.

Are You the Right Candidate?

We recognize that successful candidates bring different combinations of experience and expertise. If you have strong Technology and Cybersecurity Risk experience, understand the Wealth Management environment, and can provide credible, practical risk oversight and challenge, we encourage you to apply.

Salary Range:

$120,000 - $202,500 Annual

The range quoted above applies to the role in the primary location specified. If the candidate would ultimately work outside of the primary location above, the applicable range could differ.

Employees are eligible to participate in State Street’s comprehensive benefits program, which includes: our retirement savings plan (401K) with company match; insurance coverage including basic life, medical, dental, vision, long‑term disability, and other optional additional coverages; paid‑time off including vacation, sick leave, short term disability, and family care responsibilities; access to our Employee Assistance Program; incentive compensation including eligibility for annual performance‑based awards (excluding certain sales roles subject to sales incentive plans); and, eligibility for certain tax advantaged savings plans.

For a full overview, visit https://hrportal.ehr.com/statestreet/Home.

About State Street

Across the globe, institutional investors rely on us to help them manage risk, respond to challenges, and drive performance and profitability. We keep our clients at the heart of everything we do, and smart, engaged employees are essential to our continued success.

We are committed to fostering an environment where every employee feels valued and empowered to reach their full potential. As an essential partner in our shared success, you’ll benefit from inclusive development opportunities, flexible work‑life support, paid volunteer days, and vibrant employee networks that keep you connected to what matters most. Join us in shaping the future.

As an Equal Opportunity Employer, we consider all qualified applicants for all positions without regard to race, creed, color, religion, national origin, ancestry, ethnicity, age, disability, genetic information, sex, sexual orientation, gender identity or expression, citizenship, marital status, domestic partnership or civil union status, familial status, military and veteran status, and other characteristics protected by applicable law.

Discover more information on jobs at StateStreet.com/careers

Read our CEO Statement

Job Application Disclosure:

It is unlawful in Massachusetts to require or administer a lie detector test as a condition of employment or continued employment. An employer who violates this law shall be subject to criminal penalties and civil liability.