MD GRC Risk Management – Governance

State Street

. Own and evolve the Cyber Risk Management Framework, ensuring alignment with the Enterprise Risk Framework and regulatory expectations.

Posted 5/3/2026full-timeQuincy • Massachusetts • 🇺🇸 United StatesSeniorLead💰 $170,000 - $282,500 per yearWebsite

Tech Stack

Tools & technologies

Cyber Security

About the role

Key responsibilities & impact

Own and evolve the Cyber Risk Management Framework, ensuring alignment with the Enterprise Risk Framework and regulatory expectations.
Govern cyber risk taxonomies, risk appetite statements, risk metrics, and assessment methodologies.
Support embedding cyber risk practices across the L3 Cyber risk methodology.
Provide oversight of control assurance and remediation execution and quality.
Ensure consistent linkage between assessment outcomes, risk appetite, and remediation priorities.
Enable and guide Enterprise Process Owner (EPO) / Metric Owners with challenges related to processes.
Support the second line of defense in defining, maintaining, and overseeing Cyber Key Risk Indicators (KRIs) and thresholds.
Coordinate cyber risk matters for management-level and executive Risk Committees.
Produce and oversee executive-level cyber risk reporting, including risk posture, trends, material issues, and emerging risks.
Serve as the primary cyber risk interface with Technology Risk Advisors (TRAs).

Requirements

What you’ll need

10+ years of experience in cybersecurity risk management, technology risk, or enterprise risk governance
Bachelor’s degree in information systems, computer science, data analytics, cybersecurity or related field (or equivalent experience)
Deep understanding of cyber risk frameworks, enterprise risk management, and regulatory expectations
Proven experience with risk governance, control assurance and assessments, KRIs, issue management, and executive reporting
Strong ability to build relationships across the three lines of defense and influence at executive and Board levels
Exceptional communication skills, with the ability to translate technical and risk concepts into executive-level insights
Experience leading highly successful teams in achieving objectives and key results

Benefits

Comp & perks

retirement savings plan (401K) with company match
insurance coverage including basic life, medical, dental, vision, long-term disability, and other optional additional coverages
paid-time off including vacation, sick leave, short term disability, and family care responsibilities
access to our Employee Assistance Program
incentive compensation including eligibility for annual performance-based awards
eligibility for certain tax advantaged savings plans

ATS Keywords

✓ Tailor your resume

Applicant Tracking System Keywords

Tip: use these terms in your resume and cover letter to boost ATS matches.

Hard Skills & Tools

cybersecurity risk managementtechnology riskenterprise risk governancerisk governancecontrol assurancerisk assessmentsCyber Key Risk Indicators (KRIs)executive reportingdata analyticscyber risk frameworks

Soft Skills

relationship buildinginfluencecommunicationteam leadershipexecutive-level insights