APAC Enterprise Technology Risk Management, MD

Who we are Enterprise Technology Risk Management (ETRM) organization is part of Enterprise Risk Management organization in State Street Corporation (SSC). ETRM in its capacity as Second Line of Defence (SLOD) is responsible for thought leadership, oversight, monitoring, and advisement around the discovery and remediation of Technology Risk and Cybersecurity Risk. Who we are looking for We seek a seasoned Technology and Cyber Risk Management Leader with over 15 years of experience in the financial services or technology sectors. The role will report to the Global Head of Enterprise Technology Risk Management. The ideal candidate will excel in identifying, managing, and monitoring technology and cyber risks through effective risk management processes, frameworks, and policies for the APAC region. This role will involve communication with all levels of First Line teams, management, and senior executives in IT, Business Units, Enterprise Risk Management (ERM), and other corporate functions at both APAC and global levels. Exceptional interpersonal and communication skills are essential, along with the ability to convey technology risks to non-technical audiences. Proficiency in Mandarin is required. Candidates should demonstrate strong initiative, perform well under pressure, and manage multiple diverse assignments. Prior experience with APAC regulators (e.g., Australia, Japan, China, Hong Kong, Singapore) is highly desired. Experience in Cyber and Information Security, Cloud Risk Management (AWS, Azure), and Technology and Operational Resilience is required. Why this role is important to us The ETRM team is critical to our organization's success. Our mission is to establish a world-class Technology and Cyber Risk Management Oversight program that aligns business and technology strategies for effective decision-making. As we undergo significant transformations and risk reduction initiatives, you will provide thought leadership and support to both ETRM peers and APAC stakeholders (business and corporate areas) of the various jurisdictions. What you will be responsible for As the ETRM advisor for the APAC region, you will be responsible for: Technology Risk and Cyber Risk Management Lead and support functions within the ETRM Service Catalogue, including real-time risk oversight, technology targeted risk assessments, Material Risk Identification, Regulatory Audit and Client Engagements, Risk Reporting. Advise and/or support on technology risk and regulatory matters for the APAC community. Collaborate with ETRM Risk professionals to align with the broader Enterprise / Operational Risk Management Programs and mandates at global level. At regional level, develop and maintain APAC relationships with Business and IT stakeholders. Partner with APAC ERM team to assure the firm's technology risks and non-compliance are proactively identified, prudently managed (monitored and effectively challenged). Develop effective communication channels for measuring and escalating technology risk exposure. Evaluate IT Security risks arising from control inefficiencies in APAC Legal Entities (LE). Ensure reporting is properly balanced between perspectives of global ETRM opinion and the local Authorities. Participate in due diligence for new clients, vendors and M&A activities. Monitor emerging technology risks and trends in financial services. Deliver assignments and projects independently and on time. Prepare presentations for Management, Risk committees and Board meetings. Governance and Oversight Oversee governance, policy and framework execution across the APAC region, ensuring alignment with global frameworks. Support the development of technology risk oversight and embed the ETRM and practices. Oversee communication with APAC regulators in alignment with the ETRM program. Report with appropriate and timely information for the committees/Boards to effectively discharge their responsibilities Risk Excellence and Education/Awareness Foster a culture of effective challenge throughout the organization. Provide consulting on technology risk management and ongoing guidance aligned with ETRM strategy. Stayed informed on regulatory developments and their impacts on State Street in APAC. Conduct training on technology risk management What we value Collaborative approach to maximize positive impact and synergy Exceptional communication and interpersonal skills Ability to influence and implement decisions Flexibility to accommodate business hours across APAC (i.e., Australia, Japan/Korea). Strategic mindset to connect various aspects and initiatives for a holistic risk and control environment Ability to be a strong voice for review and challenge while continuing to maintain positive relationships with stakeholders Strong multitasking skills and ability to navigate competing priorities Effective relationships management across diverse cultural groups Primary Skills (Must Have) In-depth knowledge of APAC Technology Regulatory Requirements (e.g., APRA, HKMA, MAS); Experience with regulatory exams and responses is strongly desired. Experience in IT audits or risk assessments, Information Technology General Controls (ITGC) and cybersecurity controls. Familiarity with Information Security Frameworks (e.g., NIST, ISO 27000, CSA Cloud Control Matrix) and ITIL practices Extensive experience in IT & Cyber Security products and solutions. Ability to articulate technical issues to non-IT stakeholders and business perspective to IT stakeholders Strong communication, negotiation, and presentation skills, with cross-cultural competencies Proficient in Microsoft Suite, Adobe Acrobat Reader, Zoom, and Teams. Education & Preferred Qualifications Minimum 15 years of experience in the financial and/or technology industries. Strong project management, critical thinking, problem-solving, and decision-making abilities. Experience in IT risk management, compliance or audit, including control framework design & implementation. Ability to read and understand regulations of Chinese language as well as verbal fluency in Putonghua. Familiarity with Emerging Technologies (e.g., AI, Cloud, FinTech, Digital Assets) and professional IT certifications (e.g., CGEIT, CISA, CISM, CISSP, CCSP, COBIT, CRISC and ITIL) would be advantageous. Experience with data analytics and GRC tools, including Tableau and Power BI, is a plus. Undergraduate or advanced degree in a technology discipline Are you the right candidate? Yes We truly believe in the power that comes from the diverse backgrounds and experiences our employees bring with them. Although each vacancy details what we are looking for, we don't necessarily need you to fulfil all of them when applying. If you like change and innovation, seek to see the bigger picture, make data driven decisions and are a good team player, you could be a great fit. About State Street What we do. State Street is one of the largest custodian banks, asset managers and asset intelligence companies in the world. From technology to product innovation, we are making our mark on the financial services industry. For more than two centuries, we have been helping our clients safeguard and steward the investments of millions of people. We provide investment servicing, data & analytics, investment research & trading and investment management to institutional clients. Work, Live and Grow. We make all efforts to create a great work environment. Our benefits packages are competitive and comprehensive. Details vary by location, but you may expect generous medical care, insurance, and savings plans, among other perks. You will have access to flexible Work Programs to help you match your needs. And our wealth of development programs and educational support will help you reach your full potential. Inclusion, Diversity and Social Responsibility. We truly believe our employees' diverse backgrounds, experiences and perspectives are a powerful contributor to creating an inclusive environment where everyone can thrive and reach their maximum potential while adding value to both our organization and our clients. We warmly welcome candidates of diverse origin, background, ability, age, sexual orientation, gender identity and personality. Another fundamental value at State Street is active engagement with our communities around the world, both as a partner and a leader. You will have tools to help balance your professional and personal life, paid volunteer days, matching gift programs and access to employee networks that help you stay connected to what matters to you. State Street is an equal opportunity and affirmative action employer.