ICT Risk Governance

Who We Are Looking For

We are looking for an ICT Risk Governance & Oversight Assistant Vice President (AVP) to support the SSBI ICT Risk Manager in the independent oversight, governance, challenge, monitoring and reporting of Information and Communication Technology (ICT) risks across State Street Bank International (SSBI). In this role, you will operate within the Second Line of Defense and contribute to the ongoing development and enhancement of the SSBI ICT Risk Management Framework, supporting compliance with the Digital Operational Resilience Act (DORA), related regulatory standards and applicable supervisory expectations.

Who We Are Looking For

We are looking for an ICT Risk Governance & Oversight Assistant Vice President (AVP) to support the SSBI ICT Risk Manager in the independent oversight, governance, challenge, monitoring and reporting of Information and Communication Technology (ICT) risks across State Street Bank International (SSBI). In this role, you will operate within the Second Line of Defense and contribute to the ongoing development and enhancement of the SSBI ICT Risk Management Framework, supporting compliance with the Digital Operational Resilience Act (DORA), related regulatory standards and applicable supervisory expectations.

You will work closely with Enterprise Technology Risk Management, Third Party Risk Management, Information Security, Operational Resilience, Technology, Outsourcing Governance and other control functions to ensure effective identification, assessment, monitoring and reporting of ICT risks across SSBI. The role does not own or operate ICT systems, ICT controls, information security operations or technology services. In addition to ICT risk responsibilities, you may also support broader Operational Risk Management activities across SSBI, including risk assessments, governance reporting, operational resilience, new business reviews, outsourcing oversight, regulatory engagement and other ORM initiatives, as required.

Why this role is important to us

The team you will be joining plays an important role in strengthening SSBI's ICT risk governance, operational resilience and regulatory compliance. Across the globe, institutional investors rely on State Street to help them manage risk, respond to challenges and drive performance. Regulators rely on us to demonstrate that the bank operates in a resilient, well-controlled and compliant manner. In this role, you will help provide independent oversight and challenge of ICT risk management activities, support effective governance and reporting, and contribute to the firm’s ability to manage technology and operational resilience risks. Join us if making your mark in financial services from day one is a challenge you are up for.

What You Will Be Responsible For

As an ICT Risk Governance & Oversight Assistant Vice President, you will:

• Prepare materials and analysis for ICT governance committees, management forums and senior management reporting.
• Perform independent review and challenge of ICT risk assessments, control evaluations, risk acceptance decisions and supporting first-line evidence.
• Escalate emerging ICT risk concerns, weaknesses and thematic observations to the ICT Risk Manager and ORM leadership, including proposed considerations where appropriate.
• Support the development, maintenance, monitoring and reporting of ICT risk appetite metrics, thresholds and Key Risk Indicators.
• Produce risk reporting, trend analysis and management information for senior stakeholders, including documentation supporting regulatory demonstrations of ICT risk governance effectiveness.
• Support oversight and challenge of ICT control testing, resilience testing, scenario testing and threat-led testing outputs from a risk governance perspective.
• Review management responses, remediation activities, root-cause analyses, lessons learned and corrective action plans arising from ICT incidents, testing exercises and technology-related operational events.
• Support second-line oversight activities relating to ICT third-party and outsourcing risk, including review of related risk assessments, governance artefacts and reporting.
• Assist in monitoring regulatory developments relating to DORA, ICT risk, cybersecurity and operational resilience, and support responses to regulatory reviews, audits and supervisory requests.
• Contribute to broader SSBI Operational Risk Management activities, including LERA, RCSA, SAOR, TRA, new business reviews, outsourcing oversight, operational resilience initiatives, regulatory and audit engagements, policy development and risk committee reporting.

What We Value

These skills will help you succeed in this role

• Strong analytical and risk assessment capabilities, with the ability to interpret regulatory requirements and translate