Portfolio Governance Lead, VP

Technology Risk & ControlRole SummaryThe Portfolio Governance Lead provides centralized governance and execution oversight across a portfolio of Market applications, ensuring technology risk, control remediation, regulatory commitments, and strategic remediation initiatives are effectively managed and reported.The role maintains the integrated portfolio view, drives governance cadence, manages RAID and escalation processes, and provides senior leadership with clear visibility into material risk exposure, remediation progress, emerging concerns, dependencies, and decisions required.Key ResponsibilitiesPortfolio GovernanceMaintain the integrated Risk & Control portfolio across 500+ applications.Establish consistent governance standards, reporting requirements, milestones, and escalation criteria.Coordinate activities across Risk Remediation Project Managers, application owners, cybersecurity, infrastructure, IAM, third-party risk, audit, and control teams.Ensure priority risks have a clear accountable owner, path to green, target date, milestones, dependencies, and closure criteria. These fields align with the portfolio operating model already established in Application_Risk_and_Vulnerability_Operating_Model.docx. [Applicatio...ting_Model | Word]Executive ReportingProduce concise executive dashboards and portfolio-level reporting covering:Material risk exposureP1/P2 and overdue remediationAging risks and control gapsMilestone slippageForecast confidenceRegulatory and audit commitmentsVendor/platform dependenciesDecisions and executive intervention requiredTranslate detailed remediation activity into clear senior-management reporting focused on exposure, trajectory, accountability, and required decisions.RAID & Dependency ManagementMaintain the portfolio-level Risks, Actions, Issues and Dependencies (RAID) framework.Identify systemic or cross-application risks that cannot be resolved within individual workstreams.Track dependencies involving shared infrastructure, cybersecurity, IAM, vendors, funding, resources, and technology platforms.Drive accountability for overdue actions and unresolved blockers.Escalation ManagementEstablish clear escalation thresholds for material exposure, missed commitments, regulatory deadlines, inadequate remediation plans, and unresolved dependencies.Escalate issues through the appropriate risk and technology governance forums.Ensure escalations clearly state business/risk impact, accountable owner, corrective action, target date, blocker, and decision required.Governance CalendarOwn and coordinate the Risk & Control governance cadence, including:Daily: Critical/P1 exception managementWeekly: Portfolio remediation and execution reviewBiweekly: High-risk and control-domain reviewsMonthly: Risk & Control Remediation CouncilQuarterly: Executive portfolio and operating-model reviewThis cadence is consistent with the governance structure established in Application_Risk_Vulnerability_Executive_Operating_Model.pptx. [Applicatio...ting_Model | PowerPoint]Remediation & Closure OversightChallenge remediation plans that lack credible milestones, ownership, dependencies, or target dates.Monitor delivery against agreed paths to green.Coordinate with control owners to ensure remediation evidence supports closure.Ensure items are not reported as closed until required evidence and validation are complete.Key DeliverablesEnterprise application Risk & Control portfolio dashboardExecutive monthly reportingIntegrated RAID and dependency registerGovernance calendarDecision and escalation logRemediation milestone reportingAging and overdue-risk reportingRegulatory/audit commitment trackingPortfolio-level risk heatmapsExecutive briefing materialsExperience & Skills7+ years of experience in technology risk, program/project management, cybersecurity, infrastructure, audit, controls, or technology governance.Experience managing large technology portfolios in a regulated environment.Strong understanding of risk remediation, IAM/PAM, vulnerability management, infrastructure risk, third-party risk, audit, and regulatory commitments.Strong executive communication and presentation skills.Demonstrated ability to drive accountability across teams without necessarily having direct management authority.Strong experience with RAID management, portfolio reporting, governance forums, dependency management, and executive escalation.PMP, PRINCE2, Agile, ITIL, risk, or related professional certification preferred.Success MeasuresSuccess should be measured by risk outcomes rather than number of applications administered, including:Reduction in aged and overdue risksPercentage of priority issues with credible paths to greenReduction in missed remediation commitmentsTimeliness of escalationsClosure evidence qualityForecast accuracyReduction in risks without accountable ownersTimely resolution of cross-team dependenciesQuality and accuracy of executive reportingSalary Range: $120,000 - $217,500 AnnualThe range quoted above applies to the role in the primary location specified. If the candidate would ultimately work outside of the primary location above, the applicable range could differ.Employees are eligible to participate in State Street’s comprehensive benefits program, which includes: our retirement savings plan (401K) with company match; insurance coverage including basic life, medical, dental, vision, long-term disability, and other optional additional coverages; paid-time off including vacation, sick leave, short term disability, and family care responsibilities; access to our Employee Assistance Program; incentive compensation including eligibility for annual performance-based awards (excluding certain sales roles subject to sales incentive plans); and, eligibility for certain tax advantaged savings plans.For a full overview, visit .About State StreetAcross the globe, institutional investors rely on us to help them manage risk, respond to challenges, and drive performance and profitability. We keep our clients at the heart of everything we do, and smart, engaged employees are essential to our continued success.We are committed to fostering an environment where every employee feels valued and empowered to reach their full potential. As an essential partner in our shared success, you’ll benefit from inclusive development opportunities, flexible work-life support, paid volunteer days, and vibrant employee networks that keep you connected to what matters most. Join us in shaping the future.As an Equal Opportunity Employer, we consider all qualified applicants for all positions without regard to race, creed, color, religion, national origin, ancestry, ethnicity, age, disability, genetic information, sex, sexual orientation, gender identity or expression, citizenship, marital status, domestic partnership or civil union status, familial status, military and veteran status, and other characteristics protected by applicable law.Discover more information on jobs at StateStreet.com/careersRead our CEO StatementJob Application Disclosure:It is unlawful in Massachusetts to require or administer a lie detector test as a condition of employment or continued employment. An employer who violates this law shall be subject to criminal penalties and civil liability.SummaryLocation: Boston, MassachusettsType: Full time