Head of Cyber & Information Security Oversight (SVP)

SVP, Head of Cyber & Information Security Oversight

Enterprise Technology Risk Management (ETRM) is responsible for thought leadership, oversight, monitoring, and advisement around the discovery and remediation of Cyber and Technology Risks across the enterprise.

ETRM plays an important role in the overall success of the organization, and our mission is to establish a world class Technology Risk Management program that aligns business and technology risk to enable effective decision making. The organization is going through a significant transformation, and you will lead key cyber risk assessments on material projects and ensure the identified risks are being prudently managed. This position will also include providing thought leadership and support to both your peers in ETRM and your stakeholders in the business and corporate areas. You will need to periodically participate in meetings with our key regulators and provide support and advice to your stakeholders during regulatory exams and regulatory finding validations.

We are looking for a proven Cyber and Information Security Risk Leader with more than 15 years of experience in the financial services and/or technology industry. The qualified candidate will have a combination of:

• Deep Technical Experience: Hands-on Cybersecurity leader in roles as a CISO or CTRO at comparable organizations with a global footprint or at a Deputy CISO level in a G-SIB. The candidate will be well versed in identifying, assessing, managing and monitoring cyber risks across several domains such as Identity and Access, Information Protection, Threat and Vulnerability Management, Cyber Incident and Response, Application security, Secure configuration, Security Architecture and Cyber Risks related to Third parties.
• Strong Business background: Proven capability for translating this technical understanding into business risk to be able to provide guidance to and challenge senior level IT executives such as the group level State Street CIO, CISO and CTO. The individual will also serve as an advisor to the Head of ORM, Group CRO, regional CROs and the State Street Board of Directors to manage Cyber Risk adequately.
• Strong Executive Presence: effectively communicate with senior executives at the EVP and C-level, the Board and with regulators globally to foster confidence in the Bank's risk management capabilities and to drive enhancements where needed. Candidates must demonstrate strong initiative, be able to perform well under pressure and be capable of managing multiple and diverse assignments.

The successful candidate will report into the Global Head of Technology and Cyber Risk, who reports to the Chief Operational and Technology Risk Officer within the Operational Risk Management second line function. They will lead, guide and mentor a team of seasoned ETRM Cyber risk professionals to provide Second Line of Defense (SLoD) oversight, review and challenge on Global Cybersecurity and Global Technology Services First Line Organization. The ETRM function is currently being enhanced, and the role is expected to provide significant expertise and experience to shape the Cybersecurity governance function, aligned to industry peers and leading practices.

What you will be responsible for:

• Establish and Operate the global Cybersecurity Risk Oversight function in ETRM.
• Analytics and Reporting
• Cyber Risk Governance
• Regulatory
• Consistent, Global Risk Management

What we value:

• Strong ability to collaborate effectively
• Superior communication, interpersonal, negotiation, presentation and intergroup skills
• The ability to translate technical issues into risk terms that business can understand
• Experience with regulatory exams and responses
• Being an effective mentor and coach
• Ability to be a strong voice for review and challenge while continuing to maintain positive relationships with business stakeholders
• An ability to be a leader within their team, as well as being a leader amongst your peers

Education & Preferred Qualifications:

• Minimum 15 years of experience in the financial, and or technology industries, with at least 5 years in executive roles as a CISO, Deputy CISO or equivalent in a G-SIB
• Advanced degree or undergraduate degree in technology / cyber discipline or equivalent
• Experience in first line cybersecurity operations
• CISSP or equivalent is required
• Working knowledge of industry and regulatory risk and control standards and frameworks such as FFIEC, DORA, NIST-CSF, 800-53, COBIT, CCM, and MITRE ATT&CK is expected

Are you the right candidate? Yes!

We truly believe in the power that comes from the diverse backgrounds and experiences our employees bring with them. Although each vacancy details what we are looking for, we don't necessarily need you to fulfil all of them when applying. If you like change and innovation, seek to see the bigger picture, make data driven decisions and are a good team player, you could be a great fit.