Enterprise Technology Risk Analyst, Officer, Hybrid

Officer – Krakow, Poland

Enterprise Technology Risk Analyst

Enterprise Technology Risk Management (ETRM)

It is an exciting time to join State Street Corporation (SSC) as a member of the Risk organization. State Street is the industry leader in investment management, research & trading and servicing.

The Enterprise Risk Management team at State Street is responsible for the identification, analysis, measurement, reporting and management of risk at both the corporate-level and in partnership with the business units in support of their activities.

General Roles and Responsibilities

In this role, you will be acting as a trusted and influential liaison as part of our Cyber Risk team to State Street’s Global Cyber Security (GCS) business and First Line of Defense (FLoD) control function. You will focus specifically on matters relating to the Cyber Threat Detection risk posture of State Street as benchmarked against applicable laws and regulations, standards and codes of conduct, and best practices.

Primary Responsibilities

• Ensure Cyber Threat Detection regulatory based findings and remediation plans completely address associated underlying issues and validate closure documentation.
• Evaluate Cyber Threat Detection risks arising from control inefficiencies or lack thereof.
• Provide valuable input by supporting the implementation of effective technology risk management around Cyber Threat Detection by developing and establishing continuous risk Identification, measurement, management and reporting.
• Partner with key stakeholders and SMEs to ensure regulatory findings are managed from issuance until closure.

Job Qualification

• Foundational understanding of risk management tools (Material Risk Identification, Risk and Control Self Assessments, Key Risk Indicator Methodology and, Loss Event data).
• Good understanding of IT, Cybersecurity and Cyber Threat Detection products, services and technologies, as well as their respective impact on the organization’s risk profile.
• Ability to translate technical issues into risk terms that businesses can understand.
• Understanding and knowledge of IT infrastructure, systems, processes and emerging technologies for Cyber Threat Detection.

Other Qualifications:

• Minimum 3+ years of experience in the financial, consulting or technology industries.
• Undergraduate or higher degree in technology preferred.
• Prefer 3+ years of work experience in Cyber Threat Detection, Cyber Investigations, or Risk.