Who we are looking for

The Controls Design & Development department within Technology Risk and Controls is building its team to enhance State Street's cybersecurity and technology risk and control framework and collaborate with Control Testing & Assurance in order to identify control gaps, design new controls and evaluate and improve existing controls to reduce risk. The Vice President will report to the Head of Controls Design & Development.

What you will be responsible for

As the Controls Design & Development Vice President:

• Serve as Lead on controls design and and develop workstreams across Global Technology Services
• Maintain and improve methodology around monitoring and measuring threat risks that aligns to the standard industry frameworks.
• Collaborate with Risk Governance on design and implementation of a risk and control framework.
• Ensure that the risk and control assessment activities are delivered accurately and timely, in line with the State Street framework and methodology.
• Discuss and validate potential control gaps, redesign and enhance controls, and develop operating effectiveness tests with control owners.
• Assist in monthly and quarterly reporting on the status and outcomes of controls assessment activities.
• Reinforce an inherent culture of accountability and ownership for implementation and execution of controls across all levels and functions within Global Technology Services.
• Build strong relationships with subject matter experts and other stakeholders to drive risk excellence.
• Work in conjunction with other Technology Risk and Controls departments as well as business partners and external parties as needed to resolve issues and ensure accuracy of accountabilities, and adherence to all policies/regulations/guidelines.
• Maintain adequate records and evidence of risk and control assessments completed.

• Ability to interact with and communicate professionally with multiple levels of management in multiple regions.
• Excellent verbal and written communication skills, ability to express ideas and understand workflows.
• Strong time management skills, problem-solving and critical thinking skills.
• Prior knowledge of State Street control assessment framework a plus.
• Proven experience with a GTS tool such as Archer a plus.
• Experience in creating process flows, identifying controls, creating management information in power point decks.
• Must have the ability to operate in a timely in a deadline-oriented environment with simultaneous deliverables.
• Must be detail-oriented.
• Experience working in the Financial industry preferred, but not required.

• Bachelor's degree in Computer Science / Information Technology, IT Security, Risk Management, or a related field; Masters degree a plus
• Overall experience of 12 + years in Industry.
• Minimum 8 years of experience working in Information Security or general IT areas related to risk management, controls assurance, compliance programs, cybersecurity and information security regulations, industry standards, and internal policies frameworks.
• At least 8 years of prior experience in risk management/audit team with knowledge of Archer control inventory or other similar systems preferred.
• Preference for working towards a professional certification: Certified Information Security Auditor (CISA), Certified Risk & Information Systems Controls (CRISC), etc