Associate Vice President, Controls Design & Development

Who we are looking for

The Controls Design & Development team within First Line Risk and Controls is building its team to enhance the cybersecurity and technology risk and control framework, develop and implement risk and control assessments, and collaborate with Controls Testing & Assurance in order to evaluate and improve controls and reduce cyber risk for new technology and processes. The Assistant Vice President will be engaged in efforts to create new controls or enhance existing controls, develop control tests to assess design effectiveness to measure and mitigate cyber and technology risk. This position will report to the Vice President of Control Design & Development.

What you will be responsible for

As the Controls Design & Development Assistant Vice President:

• Design and develop IT and/or cybersecurity controls across the global enterprise while collaborating closely with process and control owners and with the control design development team members.
• Author and execute test steps to evaluate control design effectiveness.
• Discuss and validate potential control gaps, control design and operating effectiveness with control owners.
• Ensure that the risk and control assurance activities are delivered accurately and timely, in line with the State Street framework and methodology.
• Assist in regular reporting on the status and outcomes of controls assessment activities.
• Build strong relationships with subject matter experts and other stakeholders to drive risk excellence.
• Work in conjunction across First Line Risk as well as business partners and external parties as needed to resolve issues and ensure accuracy of accountabilities, and adherence to all policies/regulations/guidelines.
• Maintain adequate records and evidence of controls design & development activities completed.

What we value

These skills will help you succeed in this role:

• Ability to interact with and communicate professionally with multiple levels of management in multiple regions.
• Excellent verbal and written communication skills, ability to express ideas and understand workflows.
• Strong time management skills, problem-solving and critical thinking skills
• Proven experience with a GRC tool such as Archer a plus
• Experienced with frameworks such as NIST CSF, NIST 800.53R5 and/or CSA CCMv4
• Experience in formulating, maintaining, and executing project plans
• Experience in creating process flows, identifying controls, creating management information in PowerPoint decks
• Must have the ability to operate in a timely in a deadline-oriented environment with simultaneous deliverables
• Must be detail-oriented
• Experience working in the Financial industry preferred, but not required

Education & Preferred Qualifications

• B.S. or equivalent experience.
• Minimum 5 years of experience working in Information Security or general IT areas related to risk management, controls assurance, compliance programs, cybersecurity and technology regulations, industry standards, and internal policies frameworks
• At least 5 years of prior experience in risk management/audit team with knowledge of Archer control inventory or other similar systems preferred
• Experience in assessing and/or designing Cloud controls
• Preference for working towards a professional certification: Certified Information Security Auditor (CISA), Certified Risk & Information Systems Controls (CRISC), etc.

Why this role is important to us

Our technology function, Global Technology Services (GTS), is vital to State Street and is the key enabler for our business to deliver data and insights to our clients. We’re driving the company’s digital transformation and expanding business capabilities using industry best practices and advanced technologies such as cloud, artificial intelligence and robotics process automation.

We offer a collaborative environment where technology skills and innovation are valued in a global organization. We’re looking for top technical talent to join our team and deliver creative technology solutions that help us become an end-to-end, next-generation financial services company.

Join us if you want to grow your technical skills, solve real problems and make your mark on our industry.

About State Street

What we do. State Street is one of the largest custodian banks, asset managers and asset intelligence companies in the world. From technology to product innovation we’re making our mark on the financial services industry. For more than two centuries, we’ve been helping our clients safeguard and steward the investments of millions of people. We provide investment servicing, data & analytics, investment research & trading and investment management to institutional clients.

Work, Live and Grow. We make all efforts to create a great work environment. Our benefits packages are competitive and comprehensive. Details vary in locations, but you may expect generous medical care, insurance and savings plans among other perks. You’ll have access to flexible Work Program to help you match your needs. And our wealth of development programs and educational support will help you reach your full potential.

Inclusion, Diversity and Social Responsibility. We truly believe our employees’ diverse backgrounds, experiences and perspective are a powerful contributor to creating an inclusive environment where everyone can thrive and reach their maximum potential while adding value to both our organization and our clients. We warmly welcome the candidates of diverse origin, background, ability, age, sexual orientation, gender identity and personality. Another fundamental value at State Street is active engagement with our communities around the world, both as a partner and a leader. You will have tools to help balance your professional and personal life, paid volunteer days, matching gift program and access to employee networks that help you stay connected to what matters to you.

State Street is an equal opportunity and affirmative action employer.

Discover more at StateStreet.com/careers

Salary Range:

The range quoted above applies to the role in the primary location specified. If the candidate would ultimately work outside of the primary location above, the applicable range could differ.

Job Application Disclosure:

It is unlawful in Massachusetts to require or administer a lie detector test as a condition of employment or continued employment. An employer who violates this law shall be subject to criminal penalties and civil liability.

State Street's Speak Up Line