Enterprise Risk Management, Vice President

About the role

We are looking for an Enterprise Risk Management, Vice President to provide leadership in executing Audit's assurance coverage over Non-Financial risks. Enterprise Risk Management provides independent risk oversight over State Street’s business activities. The Non-Financial Risks include Technology, Cyber Security, Data Management, Transaction Processing, Product, Resiliency, Non-Technology Change Management, Third-Party, Fraud, Reporting, Human Capital, Legal and Strategic risks.

Responsibilities

• Participate in the development of a risk-based global non-financial risk audit plan through the execution of detailed risk assessments, which consider existing and emerging risks, key strategic initiatives, regulatory requirements / expectations and effectiveness of the control environment.
• Support the execution of the risk-based global non-financial risk audit plan through the review and approval of audit work products; ensuring effective coverage and the timely escalation of issues and conclusions.
• Draft, review, finalize and communicate audit deliverables, including audit findings, memos and audit reports to senior and executive management.
• Ensure audit engagements properly align to all internal standards and performance metrics.
• Prepare and deliver periodic management reports to key stakeholders including executive management, governance committees, and regulatory bodies.
• Participate as a non-voting member of business / risk committees and management working groups, promoting balanced discussions and encouraging challenge and debate.
• Maintain effective partnerships with key senior leaders in the Non-Financial Risk organization by identifying potential control risks and gaps while development and implementation activities are underway.
• Influence effective and sustainable improvements to processes and controls.
• Manage, coach and develop staff, including participating in talent management, staff evaluation, and new hire processes.
• Provide insights on the evolving regulatory environment and interact with regulators.
• Stay abreast of industry matters and efficiently and effectively apply applicable new developments in audit projects.

Qualifications

• Strong knowledge and understanding of Non-Financial Risks, including Technology, Cyber Security, Data Management, Transaction Processing, Product, Resiliency, Non-Technology Change Management, Third-Party, Model, Fraud, Reporting, Human Capital, Legal and Strategic risks.
• Experience with enterprise risk programs (e.g., material risk identification, RCSA, BCBS 239, Technology, Cyber, Resiliency, and Artificial Intelligence Risk Frameworks).
• Strategic thinking that focuses on developing innovative solutions to optimize execution approaches while maintaining efficiency.
• Ability to manage complex global audit programs across multiple risk disciplines and programs and develop strong relationships in both first and second line of defense to allow for effective review and challenge.
• Strong communication, interpersonal and leadership abilities across all levels coupled with effective problem solving, conceptual thinking, quantitative and analytical skills.
• Ability to manage complexity, effectively prioritize multiple tasks and work independently in non-routine situations and in a fast-paced environment.
• Strong leadership skills that create an inclusive environment for building, cultivating and managing diverse teams.
• Fluency in English – Written and spoken.

Preferred Qualifications

• 12-15 years of experience in Internal Audit, Risk Management, or related functions within financial services, including custody bank.
• Bachelor’s degree, preferable in finance, accounting or related field.
• Advanced degree (e.g., JD) or certification (CPA, CRISC, CISA, CDPSE, CDPM, AAIA, AAIR, CGEIT) preferred.
• Deep expertise in executing or auditing Non-Financial risk programs, including RCSA, BCBS 239, Technology, Cyber, Resiliency, and Artificial Intelligence Risk Frameworks.
• Extensive experience leading global audit engagements and interacting with regulators.
• Strong understanding of global regulatory expectations and industry standards impacting non-financial risks.