GRC – Cybersecurity Regulatory Compliance Lead

We are currently seeking an experienced Cybersecurity Regulatory Compliance Lead to develop and oversee robust processes for managing regulatory compliance across State Street.

The ideal candidate will have over 10 years’ experience in regulatory compliance, a strong understanding of global regulatory environments, and a proven ability to design and implement effective frameworks and processes.

This role will work cross-functionally to ensure adherence to regulatory requirements, manage regulatory risks and issues and foster a culture of proactive compliance.

About the Cybersecurity GRC Team

The Governance Risk & Compliance team is an exciting and growing area of cybersecurity with unique insight into the whole spectrum of our cybersecurity activity at State Street.  The Governance Risk & Compliance team is involved in the identification and management of cyber risk and non-compliance across State Street,  suggesting improvements and anticipating future needs to respond quickly to changes to deliver incremental value to our business.  As a member of the Cybersecurity GRC Team, you will have a significant opportunity in making a difference on the team, within the cybersecurity organization, as well as across State Street overall.

What you will be responsible for

• Operating Model and RACI development
  • Define and implement an operating model for regulatory compliances processes.
  • Create and maintain a RACI matrix that clarifies roles and responsibilities across key functions, such as cybersecurity, legal, risk and compliance teams.

• Regulatory Request Intake Process
  • Design and implement a scalable intake process to facilitate and prioritize incoming regulatory requests.
  • Ensure the process includes clear timelines, ownership and criteria for prioritization
  • Establish tools and dashboards to track and manage the status of requests so that they can be reported to senior cybersecurity management

• Regulatory Change Management
  • Develop a process to track and manage regulatory changes
  • Conduct impact assessments to evaluate organizational readiness and identify potential risks.
  • Ensure timely communication of changes to stakeholders, with actionable steps for implementation

• Industry Change Management
  • Monitor updates to industry frameworks and methodologies (e.g., NIST, ISO, COBIT) to ensure alignment.
  • Establish a process to evaluate and integrate relevant changes into State Street policies.

• Regulatory Findings Management
  • Build a process to manage regulatory findings within Archer (State Streets Risk Management platform)
  • Ensure findings are tracked, remediated and closed in a timely manner with appropriate oversight
  • Provide regular reporting on findings status and trends to the GCS leadership team

What we value

• Strategic thinkers with attention to detail
• Ability to work in a fast paced, complex environment with cross functional teams
• Strong leadership and problem solving skills
• Effective communicators who excel at building alignment across teams
• Commitment to continuous improvement and compliance excellence.

Preferred Qualifications

• 10+ years' experience in financial services industry with knowledge/experience in compliance, regulatory matters
• Strong familiarity with global regulatory bodies, such as FED, FCA, MAS, HKMA, APRA and others
• Experience working with industry frameworks (E.g., NIST, CSF, COBIT)
• Strong attention to detail, organizational skills, program management skills, and a commitment to ensuring that information is consistently provided is accurate, complete and to the highest standard
• Excellent interpersonal, leadership, organizational, negotiation, and communication (verbal and written) skills.
• Client service skills -must demonstrate the judgment and ability to closely partner with and advise business and technology leaders (and other stakeholders) on regulatory interactions
• Ability to learn new products, services, businesses while supporting them.
• Ability to develop a mentoring, inclusive culture for both experienced team members and junior staff
• Strong analytical skills, solid judgment, and the ability to evaluate complex business issues.
• Ability to manage multiple workstreams involving different partners and groups.
• Ability to thrive in a fast-paced, deadline-driven environment, including by demonstrating excellent time management and planning skills.
• A relationship builder with the ability to establish, develop and maintain effective working relationships with regulators and with business and functional partners at the firm.
• Strong understanding of global digital commerce, technology and cyber risk management beneficial

About State Street

What we do.

State Street is one of the largest custodian banks, asset managers and asset intelligence companies in the world. From technology to product innovation, we’re making our mark on the financial services industry. For more than two centuries, we’ve been helping our clients safeguard and steward the investments of millions of people. We provide investment servicing, data & analytics, investment research & trading and investment management to institutional clients.

Work, Live and Grow. We make all efforts to create a great work environment. Our benefits packages are competitive and comprehensive. Details vary by location, but you may expect generous medical care, insurance and savings plans, among other perks. You’ll have access to flexible Work Programs to help you match your needs. And our wealth of development programs and educational support will help you reach your full potential.

Inclusion, Diversity and Social Responsibility. We truly believe our employees’ diverse backgrounds, experiences and perspectives are a powerful contributor to creating an inclusive environment where everyone can thrive and reach their maximum potential while adding value to both our organization and our clients. We warmly welcome candidates of diverse origin, background, ability, age, sexual orientation, gender identity and personality. Another fundamental value at State Street is active engagement with our communities around the world, both as a partner and a leader. You will have tools to help balance your professional and personal life, paid volunteer days, matching gift programs and access to employee networks that help you stay connected to what matters to you.

State Street is an equal opportunity and affirmative action employer.

Salary Range:

The range quoted above applies to the role in the primary location specified. If the candidate would ultimately work outside of the primary location above, the applicable range could differ.

Job Application Disclosure:

It is unlawful in Massachusetts to require or administer a lie detector test as a condition of employment or continued employment. An employer who violates this law shall be subject to criminal penalties and civil liability.

State Street's Speak Up Line