Enterprise Risk Management Jobs in Massachusetts

Job Description

Who we are

Enterprise Technology Risk Management (ETRM) organization is part of Enterprise Risk Management organization in State Street Corporation (SSC). ETRM as Second Line of Defence (SLOD) is responsible for thought leadership, oversight, monitoring, and advisement around the discovery and remediation of Technology Risk and Cybersecurity Risk.

Who we are looking for

We seek a seasoned Technology Risk Management Leader with over 10 years of experience in the financial services or technology sectors. The role will report to the Global Head of Technology Risk Oversight. The ideal candidate will excel in identifying, managing, and monitoring technology risks through effective risk management processes, frameworks, and policies.

This role will involve communication with all levels of First Line teams, management, and senior executives in IT, Business Units, Enterprise Risk Management (ERM), and other corporate functions. Exceptional interpersonal and communication skills are essential, along with the ability to convey technology risks to non-technical audiences.

Candidates should demonstrate strong initiative, perform well under pressure, and manage multiple diverse assignments. Prior experience with regulators is desired. Experience in Technology and Resilience is required.

Why this role is important to us

The ETRM team is critical to our organization's success. Our mission is to establish a world-class Technology and Cyber Risk Management Oversight program that aligns business and technology strategies for effective decision-making. As we undergo significant transformations and risk reduction initiatives, you will provide thought leadership and support to both ETRM peers and first-line stakeholders (business and corporate areas).

What you will be responsible for

As the VP – Technology Risk & Processes:

• Technology Risk Management

• Lead and support functions within the ETRM Service Catalogue, including real-time risk oversight, technology targeted risk assessments, Material Risk Identification, Regulatory Audit and Client Engagements, Risk Reporting.

• Advise and/or support on technology risk and regulatory matters.
• Collaborate with ETRM Risk professionals to align with the broader Enterprise / Operational Risk Management Programs and mandates at global level. Develop and maintain relationships with Business and IT stakeholders. Partner with other second-line stakeholders within ERM team to assure the firm’s technology risks and non-compliance are proactively identified, prudently managed (monitored and effectively challenged).
• Develop effective communication channels for measuring and escalating technology risk exposure.
• Evaluate IT Security risks arising from control inefficiencies.
• Participate in due diligence for new clients, vendors and M&A activities.
• Monitor emerging technology risks and trends in financial services.
• Deliver assignments and projects independently and on time.

• Prepare presentations for Management, Risk committees and Board meetings.

• Governance and Oversight

• Oversee governance, policy and framework execution across technology processes, ensuring alignment with frameworks.

• Support the development of technology risk oversight and embed ETRM and practices.
• As needed, interact with regulators in alignment with the ETRM program.

• Support reporting for the committees/Boards with appropriate and timely information.

• Risk Excellence and Education/Awareness

• Foster a culture of effective challenge throughout the organization.

• Provide consulting on technology risk management and ongoing guidance aligned with ETRM strategy.
• Stay informed on regulatory developments and their impact on State Street.
• Conduct training in technology risk management.

What we value

• Collaborative approach to maximize positive impact and synergy.
• Exceptional communication and interpersonal skills.
• Ability to influence and implement decisions.
• Flexibility to accommodate business hours across EMEA and global teams.
• Strategic mindset to connect various aspects and initiatives for a holistic risk and control environment.
• Ability to be a strong voice for review and challenge while continuing to maintain positive relationships with stakeholders.
• Strong multitasking skills and ability to navigate competing priorities.
• Effective relationships management across diverse cultural groups.

Primary Skills (Must Have)

• Experience in IT audits or risk assessments, Information Technology General Controls (ITGC) and cybersecurity controls. Familiarity with Information Security Frameworks (e.g., NIST, ISO 27000, CSA Cloud Control Matrix) and ITIL practices.
• Experience with regulatory exams and responses is strongly desired.
• Experience in AI adoption and AI risk management.
• Ability to articulate technical issues to non-IT stakeholders and business perspective to IT stakeholders.
• Strong communication, negotiation, and presentation skills, with cross-cultural competencies.

Education & Preferred Qualifications

• Minimum 10 years of experience in the financial and/or technology industries.
• Strong project management, critical thinking, problem-solving, and decision-making abilities.
• Experience in IT risk management, compliance or audit, including control framework design & implementation.
• Professional IT certifications, e.g., CGEIT, CISA, CISM, CISSP, CCSP, COBIT, CRISC and ITIL would be advantageous.
• Experience with data analytics and GRC tools, including Tableau and Power BI, is a plus.
• Undergraduate or advanced degree in a technology discipline.

Salary Range:

$120,000 - $217,500 Annual
The range quoted above applies to the role in the primary location specified. If the candidate would ultimately work outside of the primary location above, the applicable range could differ.

Employees are eligible to participate in State Street’s comprehensive benefits program, which includes: our retirement savings plan (401K) with company match; insurance coverage including basic life, medical, dental, vision, long-term disability, and other optional additional coverages; paid-time off including vacation, sick leave, short term disability, and family care responsibilities; access to our Employee Assistance Program; incentive compensation including eligibility for annual performance-based awards (excluding certain sales roles subject to sales incentive plans); and, eligibility for certain tax advantaged savings plans.

About State Street

Across the globe, institutional investors rely on us to help them manage risk, respond to challenges, and drive performance and profitability. We keep our clients at the heart of everything we do, and smart, engaged employees are essential to our continued success.

We are committed to fostering an environment where every employee feels valued and empowered to reach their full potential. As an essential partner in our shared success, you’ll benefit from inclusive development opportunities, flexible work-life support, paid volunteer days, and vibrant employee networks that keep you connected to what matters most. Join us in shaping the future.

As an Equal Opportunity Employer, we consider all qualified applicants for all positions without regard to race, creed, color, religion, national origin, ancestry, ethnicity, age, disability, genetic information, sex, sexual orientation, gender identity or expression, citizenship, marital status, domestic partnership or civil union status, familial status, military and veteran status, and other characteristics protected by applicable law.

Job Application Disclosure:

It is unlawful in Massachusetts to require or administer a lie detector test as a condition of employment or continued employment. An employer who violates this law shall be subject to criminal penalties and civil liability.