Technology Controls Testing & Assurance, Managing Director

Who we are looking for

The Managing Director of Technology Controls Testing & Assurance is part of the First Line Risk and Controls (FLRC) team, a First Line of Defense function responsible for driving effective technology risk management at State Street. The individual in this position will be responsible for establishing, directing, and executing the Global Technology Controls Testing & Assurance capability, including leading a global staff with the required skills and expertise to effectively assess technology risk and controls and mature the internal control function through recurring controls testing programs. As a direct report to the Head of Controls Design, Testing, and Automation, the Managing Director leads annual controls assurance planning and development, scoping, and execution of the full assurance agenda related to the technology processes and risks of State Street. This individual is also responsible for establishing and maintaining effective partnerships with first line technology leaders, enterprise risk, internal and external audit, and regulators.

Why this role is important to us 

Our technology function, Global Technology Services (GTS), is vital to State Street and is the key enabler for our business to deliver data and insights to our clients. We’re driving the company’s digital transformation and expanding business capabilities using industry best practices and advanced technologies such as cloud, artificial intelligence and robotics process automation.  

We offer a collaborative environment where technology skills and innovation are valued in a global organization. We’re looking for top technical talent to join our team and deliver creative technology solutions that help us become an end-to-end, next-generation financial services company.  

Join us if you want to grow your technical skills, solve real problems and make your mark on our industry. 

What you will be responsible for

As Managing Director of Technology Controls Testing & Assurance, you will:

• Develop annual controls testing and assurance plans for Global Technology Services, commensurate with the existing technology risks and challenges and in accordance with corporate controls assurance standards and methodology

• Oversee execution of a process and risk-focused assurance plan, review and approve control testing work products to ensure thorough coverage and timely and effective escalation of findings and conclusions

• Manage the performance of controls-based testing to support annual compliance attestations (e.g., SOX, SWIFT and CHAPs)

• Drive the execution of External Audit Assurance Programs (SOC 1, SOC 2 and the Integrated Financial Audit)

• Support annual and quarterly CFO Attestation Process for Global Technology controls in scope for the CCAR program

• Govern Global Technology policy and standard development, approval, communication, implementation, and maintenance

• Provide stewardship over and mature the Technology Process, Risk and Control Framework

• Demonstrate strong communication and relationship building skills in interactions with internal and external stakeholders including executive management, enterprise risk, internal and external audit, and regulators

• Build and maintain a global staff with required expertise and skills to effectively assess the technology risk and control environment in line with professional standards, industry practices, and regulatory expectations

• Demonstrate a risk excellence tone at the top and manage talent development

• Develop a strong understanding and subject matter expertise in State Street business and system processes.

• Deliver clear and meaningful findings, assessment reports, presentations, and other materials for Executive Management and Governance Boards.

What we value

These skills will help you succeed in this role

• Candidate should have expertise in Cyber Security and IT General Controls and a sound understanding of IT platforms, applications, and related technologies.

• Knowledge of industry Risk and Control frameworks (ITIL, COSO, COBIT, NIST, ISO, etc.)

• Experience with SOC 1, SOC 2, IT SOX, and SWIFT control testing programs

• Strong attention to detail with an analytical mind and solid problem-solving skills.

• Proven interpersonal, communication and project management skills (PMP)

• Risk or Audit certifications and related qualifications (e.g., CISA, CRISC, CISM, CISSP)

• Ability to drive change through collaboration and influence

• Ability to manage competing priorities effectively and efficiently

• Advanced MS Excel, Word, Power Point and Visio skills

• Desired experience in RSA Archer GRC solution

Education & Preferred Qualifications

• Bachelor’s degree in computer science / information technology, IT Security, Risk Management, or a related field; Master’s degree a plus

• Minimum of 15+ years of professional experience in technology risk, audit or compliance management

• Proven leadership experience in the oversight and execution of control assurance; Experience as a lead IT auditor or IT compliance manager

• Strong English language skills, both written and verbal

Are you the right candidate? Yes!

We truly believe in the power that comes from the diverse backgrounds and experiences our employees bring with them. Although each vacancy details what we are looking for, we don’t necessarily need you to fulfil all of them when applying. If you like change and innovation, seek to see the bigger picture, make data driven decisions and are a good team player, you could be a great fit.

About State Street

What we do. State Street is one of the largest custodian banks, asset managers and asset intelligence companies in the world. From technology to product innovation, we’re making our mark on the financial services industry. For more than two centuries, we’ve been helping our clients safeguard and steward the investments of millions of people. We provide investment servicing, data & analytics, investment research & trading and investment management to institutional clients.

Work, Live and Grow. We make all efforts to create a great work environment. Our benefits packages are competitive and comprehensive. Details vary by location, but you may expect generous medical care, insurance and savings plans, among other perks. You’ll have access to flexible Work Programs to help you match your needs. And our wealth of development programs and educational support will help you reach your full potential.

Inclusion, Diversity and Social Responsibility. We truly believe our employees’ diverse backgrounds, experiences and perspectives are a powerful contributor to creating an inclusive environment where everyone can thrive and reach their maximum potential while adding value to both our organization and our clients. We warmly welcome candidates of diverse origin, background, ability, age, sexual orientation, gender identity and personality. Another fundamental value at State Street is active engagement with our communities around the world, both as a partner and a leader. You will have tools to help balance your professional and personal life, paid volunteer days, matching gift programs and access to employee networks that help you stay connected to what matters to you.

State Street is an equal opportunity and affirmative action employer.

Salary Range:

The range quoted above applies to the role in the primary location specified. If the candidate would ultimately work outside of the primary location above, the applicable range could differ.

Job Application Disclosure:

It is unlawful in Massachusetts to require or administer a lie detector test as a condition of employment or continued employment. An employer who violates this law shall be subject to criminal penalties and civil liability.

State Street's Speak Up Line