About this opportunity
The Security Executive Council lists this Head of Cyber & Information Security Oversight (SVP) opportunity in clifton, New Jersey. Review the employer’s description below for duties, qualifications and application requirements.
Job description
Head of Cyber & Information Security Oversight (SVP)
Organization: State Street
Location: Clifton, NJ
Description
About the job
SVP, Head of Cyber & Information Security Oversight Why this role is important to us Enterprise Technology Risk Management (ETRM) is responsible for thought leadership, oversight, monitoring, and advisement around the discovery and remediation of Cyber and Technology Risks across the enterprise. ETRM plays an important role in the overall success of the organization, and our mission is to establish a world class Technology Risk Management program that aligns business and technology risk to enable effective decision making. The organization is going through a significant transformation, and you will lead key cyber risk assessments on material projects and ensure the identified risks are being prudently managed. This position will also include providing thought leadership and support to both your peers in ETRM and your stakeholders in the business and corporate areas. You will need to periodically participate in meetings with our key regulators and provide support and advice to your stakeholders during regulatory exams and regulatory finding validations.
What You Will Be Responsible For
Establish and Operate the global Cybersecurity Risk Oversight function in ETRM.
Be a risk advisor and challenge function to the State Street Global CISO function and program.
Establish State Street’s Cyber Risk Appetite, with corresponding policies and Metrics and thresholds, reporting breaches, escalating exceptions and challenging risk acceptances and provide guidance on improving the risk position to support the business
Be an acknowledged thought leader in the industry, with a strong understanding of attributes of an effective Cybersecurity program at peer organizations
Establish an analytics capability to provide cyber risk insights, leveraging AI for greater effectiveness
Develop risk reports customized to the business needs of legal entities and regions to drive risk reduction in a cost-effective way.
Lead or co-Chair various senior governance forums like the Cybersecurity Risk Committee and the Vulnerability Governance Forum that manage Cybersecurity risk to State Street
Communicate and drive effective implementation of ETRM risk management policies, framework, tools, guidelines and standards across the business ensuring cyber risks are identified and managed effectively.
Ensuring cyber risks and non-compliance with internal and external standards are proactively identified, prudently managed, and effectively challenged
Identifying/assessing/controlling/monitoring risks and supporting FLOD in planning/executing controls and additional compensating controls
Review and challenge the first line cyber controls assurance program and the constituent cyber processes
Provide challenge to the EVPs leading the Cyber Enterprise Processes and foster deeper and integrated FLOD/SLOD relationships and embedded, proactive risk management
Advise FLOD in prioritization of risks, risk initiatives, risk mitigation alternatives
Lead second line regulatory interaction for Cyber Risk with regulators, including the FCA/PRA, HKMA, MAS, APRA and ECB, including resolution of issues and concerns
Be a thought leader for managing emerging Cybersecurity risks to provide credible risk management guidance to the regulators
Collaborate with and support regional) and Business Unit Risk Management peers in matters related to cyber and information security risks
Develop and deliver the ETRM Cybersecurity annual Book of Work (risk assessments, continuous monitoring, issues management and reporting) through the established risk leads within the team while leveraging the ETRM India GCC.
Coordinate across multiple risk types in Operational Risk Management, like Data Risk, Fraud and Third-Party Risk programs. Utilize available Enterprise Risk and Operational risk management tools (NBPRA, MRI, RCSA, KRI’s, Incident data, Loss event data) in conjunction with other environmental changes to proactively monitor the control environment and identify and address potential weaknesses and/or gaps in a timely manner
Keep abreast of new products, services, technologies and applications as well as their respective impact on the organization’s risk profile
What We Value
Strong ability to collaborate effectively
This position requires interacting with “C” level suite, so superior communication, interpersonal, negotiation, presentation and intergroup skills are critical for success
The ability to translate technical issues into risk terms that business can understand is necessary
Experience with regulatory exams and responses is strongly desired
Being an effective mentor and coach
Ability to be a strong voice for review and challenge while continuing to maintain positive relationships with business stakeholders
An ability to be a leader within their team, as well as being a leader amongst your peers
Qualifications
Minimum 15 years of experience in the financial, and or technology industries, with at least 5 years in executive roles as a CISO, Deputy CISO or equivalent in a G-SIB
Advanced degree or undergraduate degree in technology / cyber disciple or equivalent
Experience in first line cybersecurity operations
CISSP or equivalent is required
Working knowledge of industry and regulatory risk and control standards and frameworks such as FFIEC, DORA, NIST-CSF, 800-53, COBIT, CCM, and MITRE ATT&CK is expected
Compensation
Our benefits packages are competitive and comprehensive. Details vary by location, but you may expect generous medical care, insurance and savings plans, among other perks. You’ll have access to flexible Work Programs to help you match your needs. And our wealth of development programs and educational support will help you reach your full potential.
Salary Range: $225,000 - $337,500 Annual
The range quoted above applies to the role in the primary location specified. If the candidate would ultimately work outside of the primary location above, the applicable range could differ.
Employees are eligible to participate in State Street’s comprehensive benefits program, which includes: our retirement savings plan (401K) with company match; insurance coverage including basic life, medical, dental, vision, long-term disability, and other optional additional coverages; paid-time off including vacation, sick leave, short term disability and family care responsibilities; access to our Employee Assistance Program; incentive compensation including eligibility for annual performance-based awards (excluding certain sales roles subject to sales incentive plans); and eligibility for certain tax advantaged savings plans. For a full overview, visit
Are you the right candidate? Yes!
#J-18808-Ljbffr
Worksite address
clifton, NJ, 07015, US
Who can apply
Review the original listing for work authorization, qualifications and employer requirements.