Third-Party Risk Management Officer

Role Summary

State Street uses third parties to support internal processes and the delivery of products and services to clients。 These relationships are evaluated and risk-assessed through the Third-Party Risk Management (TPRM ) Program.

The Third-Party Risk Management Officer will support the effective execution of activities across one or more TPRM lifecycle pillars. Depending on business requirements, the role may include reviewing TPRM cases and engagement records, reviewing and challenging inherent risk assessments, coordinating supplier due diligence outreach, monitoring and reviewing due diligence submissions, preparing executive summaries, and managing relationships with internal and external stakeholders.

The successful candidate will apply sound risk judgement, identify and resolve data or process inconsistencies, maintain complete and accurate records, and communicate TPRM requirements and assessment outcomes clearly. The role requires close collaboration with Engagement Managers, third-party suppliers, risk-domain subject matter experts, Business Advisors, Procurement, Legal, and TPRM teams to support timely, consistent, policy-aligned, and audit-ready outcomes。

Job Duties and Responsibilities

·          Develop and maintain a strong understanding of State Street’s business lines, products and services, third-party operating model, and TPRM lifecycle requirements。

·          Review and evaluate TPRM SNOW cases, Archer engagement records, assessment records, and supporting documentation for completeness, accuracy, consistency, and compliance with applicable policies, standards and procedures

·          Manage assigned case queues, review and effectively challenge TPRM cases and support business lines in faster onboarding of third party suppliers.

·          Review inherent risk assessments for reasonableness and accuracy, including engagement scope, service description, data access, technology dependencies, regulatory considerations, and other relevant risk factors.

·          Identify inconsistencies or gaps in inherent risk questionnaire responses and work with Engagement Managers and relevant stakeholders to resolve issues before approval.

·          Apply knowledge of inherent risk questionnaire logic, scoring, question interdependencies, and due diligence triggers to confirm that the resulting inherent risk rating and due diligence requirements are appropriate.

·          Prepare and distribute due diligence questionnaires and supporting requirements to third-party suppliers or internal service providers within established timelines.

·          Monitor due diligence progress, perform follow-ups and escalations, and maintain clear records of outreach, responses, decisions, and outstanding actions.

·          Perform completeness and quality reviews of returned due diligence questionnaires and supporting artifacts before routing the assessment to the appropriate risk-domain subject matter experts.

·          Coordinate follow-up questions, clarification discussions, and supplier meetings; track responses and facilitate resolution of outstanding items.

·          Review and analyse due diligence results, assessment conclusions, control-effectiveness ratings, and identified findings to confirm that outcomes are sufficiently supported and accurately documented.

·          Prepare clear, concise, and audit-ready executive summaries that communicate the engagement scope, inherent risk profile, due diligence results, control effectiveness, findings, residual concerns, and required acknowledgement or next steps.

·          Coordinate executive-summary review and issuance with Engagement Managers, Executive Sponsors, Business Advisors, risk-domain subject matter experts, and other relevant stakeholders.

·          Build and maintain effective working relationships with third-party suppliers, Engagement Managers, business stakeholders, Procurement, Legal, risk-domain subject matter experts, and TPRM partner teams.

·          Explain TPRM requirements, risk-analysis conclusions, findings, and remediation expectations clearly and professionally, and guide stakeholders toward timely resolution.

·          Ensure that TPRM decisions, approvals, exceptions, and supporting evidence are accurately captured in Archer and relevant repositories to support governance, audit, and regulatory review.

·          Support the preparation of management information, metrics, trend analysis, and status reporting for TPRM leadership and governance forums.

·          Maintain and enhance procedures, checklists, templates, job aids, frequently asked questions, and other process documentation.

·          Identify opportunities to improve process efficiency, data quality, control effectiveness, stakeholder experience, and consistency of TPRM outcomes.

·          Participate in system testing, process-change initiatives, remediation programmes, quality-assurance reviews, audits, and regulatory inspections.

·          Maintain flexibility to work across TPRM pillars and support emerging programme priorities arising from business, regulatory, policy, technology, or operating-model changes.

·          Perform all responsibilities in accordance with State Street’s risk appetite, policies, standards, ethical requirements, and control expectations.

Skills

·          Strong knowledge of third-party risk management principles, lifecycle activities, and governance requirements within a regulated financial-services environment.

·          Sound risk judgement and the ability to assess the reasonableness, completeness, and consistency of information and supporting evidence.

·          Strong analytical and critical-thinking skills, with the ability to identify gaps, challenge assumptions, and develop practical resolution paths.

·          Excellent written and verbal communication skills, including the ability to prepare concise executive-level summaries and explain risk conclusions to stakeholders at all levels.

·          Strong stakeholder and relationship-management skills, with the ability to influence outcomes while maintaining professional and constructive working relationships.

·          Ability to manage multiple cases, competing priorities, and tight deadlines in a high-volume, control-focused environment.

·          Strong organizational, documentation, and time-management skills, with close attention to detail.

·          Ability to work independently, exercise appropriate judgement, and escalate matters based on risk, urgency, and programmed requirements.

·          Strong customer-centric mindset and commitment to providing clear guidance and responsive support to business and supplier stakeholders.

·          Demonstrated ability to identify issues, follow through on actions, and achieve timely and sustainable resolution.

·          Ability to interpret and apply policies, standards, procedures, trigger logic, risk-rating methodologies, and service-level requirements consistently.

·          Ability to collaborate effectively with cross-functional and geographically dispersed teams.

·          Strong proficiency in Microsoft Word, PowerPoint, Excel, and related reporting tools.

·          Working knowledge of Archer or a comparable governance, risk, and compliance platform is preferred.

·          Self-motivated, adaptable, and comfortable supporting change, process improvement, and evolving TPRM programme requirements.

·          High ethical standards, professional integrity, and commitment to maintaining appropriate confidentiality.

Qualifications

·         Overall professional experience of 10 or more years, preferably within banking, financial services, risk management, compliance, procurement, audit, controls, or a related field.

·         Relevant experience in Third-Party Risk Management, operational risk, supplier risk, vendor management, due diligence, or another risk-and-control function.

·         Practical experience in one or more of the following areas is preferred: TPRM case review, inherent risk assessment, due diligence outreach and completeness review, risk assessment coordination, findings management, executive-summary preparation, or stakeholder relationship management.

·         General knowledge of third-party risk domains, including Operational Resiliency, Operational Risk, Cybersecurity, Information Sensitivity and Access, Privacy, Physical Security, Reputational Risk, Compliance, Anti-Money Laundering, Anti-Bribery and Corruption, Financial Viability, and Tax Evasion.

·         Experience working with internal stakeholders, third-party suppliers, and subject matter experts in a matrixed and globally distributed organisation.

·         Experience preparing management reporting, governance materials, executive communications, audit evidence, or regulatory-response documentation is preferred.

·         Bachelor’s degree in business, finance, risk management, technology, law, or a related discipline; a postgraduate management qualification is preferred.

·         Relevant professional certification such as CRVPM, CRISC, CISM, CISA, CBCI, or an equivalent risk-management qualification is advantageous.

·         Prior experience with Archer or a comparable governance, risk, and compliance platform is preferred.

*Please note: The role is required to support internal clients during the first half of US working hours.

About State Street

Across the globe, institutional investors rely on us to help them manage risk, respond to challenges, and drive performance and profitability. We keep our clients at the heart of everything we do, and smart, engaged employees are essential to our continued success.

We are committed to fostering an environment where every employee feels valued and empowered to reach their full potential. As an essential partner in our shared success, you’ll benefit from inclusive development opportunities, flexible work-life support, paid volunteer days, and vibrant employee networks that keep you connected to what matters most. Join us in shaping the future.

As an Equal Opportunity Employer, we consider all qualified applicants for all positions without regard to race, creed, color, religion, national origin, ancestry, ethnicity, age, disability, genetic information, sex, sexual orientation, gender identity or expression, citizenship, marital status, domestic partnership or civil union status, familial status, military and veteran status, and other characteristics protected by applicable law.

Discover more information on jobs at StateStreet.com/careers

Read our CEO Statement