Third Party Cyber Risk Analyst - Assistant Vice President

Responsibilities

• Perform thorough cyber and information security assessments of third-party service providers using established risk management frameworks.
• Review and analyze third-party attestation and certification artifacts, including SOC2, SIG, NIST, and ISO 27001/2.
• Document assessment results in alignment with TPCRM, Issue Management, and Enterprise Risk Management standards.
• Provide subject matter expertise and timely recommendations to mitigate identified information security risks.

Requirements

• 15 years of experience in Cyber/Information Security, Third Party Cyber Assessment, or Cyber Security Assessments.
• Deep knowledge of security and risk management frameworks and regulations, including ISO 27001/27002, NIST, GDPR, and DORA.
• Expertise in writing technical and risk management reports.
• Superior attention to detail with excellent written and verbal communication skills.
• Ability to communicate complex cyber security issues to both technical and non-technical audiences.

Preferred Qualifications

• Bachelor’s or Master’s degree in Cybersecurity, Law, Privacy, or Enterprise/Operational Risk Management.
• Professional certifications such as CISA, CISM, CISSP, or Security+.

About the Company

State Street is a leading global provider of financial services to institutional investors. We help our clients manage risk, respond to challenges, and drive performance. We are committed to fostering an inclusive environment where employees are empowered to reach their full potential through professional development and vibrant employee networks.