Controls Assurance Etrm

Job Description

Who we are

It is an exciting time to join State Street Corporation (SSC) in the Enterprise Technology Risk Management (ETRM) organization. ETRM in its capacity as Second Line of Defense (SLOD) is responsible for leadership, oversight, monitoring, and advisement around the technologies, architecture, operational processes, security, and resiliency.

Who we are looking for

As a representative of the ETRM group, you will be amid State Street’s multi-year technology transformation journey and regulatory requirements. You will be responsible for providing independent risk oversight, review and challenge on technology risk controls testing and assurance program. This will include, but is not limited to:

- ETRM controls testing and assurance SME to liaison with the technology controls assurance team
- Review, challenge, advise on controls testing and assurance program including, at a minimum, controls inventory, test procedures, testing process and outcomes
- Identify, communicate, and escalate all technology related risks

What you will be responsible for
- Oversight and continuous assessment of design and operational effectiveness of controls testing and assurance program
- Oversee and recommend improvements (if any) in controls design through awareness of technology and information security focused regulatory requirements and best practices
- Assist with the development of the controls testing and assurance oversight framework influencing Policy, Controls, Risk Appetite, Procedures, Guidelines, and all associated Reporting
- Identification of new and/or amendments in regulations relevant to Technology/Disaster Recovery
- Support in and/or lead technology risk assessment across technology risk areas of the bank
- Anticipate critical issues and risks; take responsibility for identifying or escalating key risks and impacts based on non-compliance with internal and external standards
- Develop a comprehensive risk view of the controls testing and assurance program
- Advise First Line of Defense (FLOD) on controls testing and assurance best practices and requirements
- Factor the entire technology risk taxonomy into all assessments engaging with other areas of expertise and regional risk teams, to develop comprehensive risk view for reports and memos
- Extract, analyze, synthesize, and report on information from various sources including Incident Management, Archer, change control, release plans, etc.
- Develop presentations for various technology and risk committees to highlight ETRM findings and recommendations

What we value

These skills will help you succeed in this role
- Effective communication, analytical, and project management skills
- Ability to multitask and navigate competing priorities
- Ability to effectively develop and manage relationships across core stakeholder groups

Primary Skills (Must Have)
- Technical knowledge and experience working within controls testing and assurance functions
- Working knowledge of controls design, test procedure development, and knowledge on regulatory requirements such as FFIEC, FRB, etc. and of best practices such as ISO, NIST and other standards
- Excellent communication, interpersonal, negotiation, presentation and intergroup skills are critical
- Management skills with the ability to implement and sustain governance to ensure all Policy, Risk Appetite, Taxonomy, Procedures, Guidelines are being adhered to; Escalate where there is any risk
- The ability to influence technology leaders about the need to embrace risk reduction initiatives and controls is key to success in this role
- Ability to understand State Street’s critical business services and how they are delivered via the underlying system architecture
- A strong understanding of Technology Risk Management
- Self-Starter, Navigating on your own

Education & Preferred Qualifications
- Graduate in Computer Engineering (preferably BE / B TECH / BCA / MCA)
- Minimum 12-15 years of experience in information technology with 8-10 years of relevant experience in controls testing and assurance function
- ITGC RCSA and SOC controls testing knowledge is a plus
- Experience with Risk Management and Technology Audits
- Strong critical thinking, problem solving, and decision-making skills
- Experience with Microsoft Tools/Data Analytics/Dashboards is a plus
- ISC2 (CISSP) or similar certification is preferred

**Job Description**:
Who we are

It is an exciting time to join State Street Corporation (SSC) in the Enterprise Technology Risk Management (ETRM) organization. ETRM in its capacity as Second Line of Defense (SLOD) is responsible for leadership, oversight, monitoring, and advisement around the technologies, architecture, operational processes, security, and resiliency.

Who we are looking for

As a representative of the ETRM group, you will be amid State Street’s multi-year technology transformation journey and regulatory requirements. You will be responsible for providing independent risk