1

Vice President Technology Risk Management Jobs in Boston, MA

... case management and workflow automation initiatives in a complex, global financial services ... Lead cross-functional delivery efforts , collaborating with technology, operations, risk, and ...

Vice President Legal

Waltham, MA · On-site

$190K - $200K/yr

Develop legal strategies that support company objectives while appropriately managing risk ... Evaluate and implement emerging legal technologies, including AI-powered legal tools, to improve ...

Showing results 21-40

Vice President Technology Risk Management information

See Boston, MA salary details

$47.3K

$171.1K

$301.5K

How much do vice president technology risk management jobs pay per year?

As of Aug 18, 2026, the average yearly pay for vice president technology risk management in Boston, MA is $171,143.00, according to ZipRecruiter salary data. Most workers in this role earn between $124,900.00 and $206,400.00 per year, depending on experience, location, and employer.

What is a vice president technology risk management?

A Vice President of Technology Risk Management is a senior executive responsible for identifying, assessing, and mitigating technology-related risks within an organization. This role oversees the development and implementation of risk management policies, ensures regulatory compliance, and collaborates with IT, cybersecurity, and business units to protect the organization’s digital assets. The VP also leads teams in conducting risk assessments, managing incident responses, and reporting to senior leadership on risk exposure and mitigation strategies.

What are the key skills and qualifications needed to thrive as a vice president technology risk management?

To thrive as a Vice President Technology Risk Management, you need deep expertise in IT risk assessment, regulatory compliance, and cybersecurity frameworks, usually supported by a relevant degree and significant leadership experience. Familiarity with risk management tools (such as Archer or MetricStream), common control frameworks (like NIST, ISO 27001), and certifications (such as CISSP, CISM, or CRISC) is highly valuable. Strong leadership, strategic thinking, and effective communication are critical soft skills for managing teams and influencing stakeholders. These competencies are essential to mitigate technology risks, ensure regulatory compliance, and safeguard organizational assets in a constantly evolving threat landscape.

How does a vice president technology risk management typically collaborate with other departments to ensure comprehensive risk oversight?

A Vice President of Technology Risk Management works closely with various departments such as IT, compliance, legal, and business units to identify, assess, and mitigate technology-related risks. This collaboration often involves leading cross-functional risk committees, facilitating regular risk assessments, and ensuring that risk management frameworks align with organizational objectives. Effective communication and partnership with stakeholders help ensure that emerging risks are addressed proactively and that risk mitigation strategies are integrated into business processes. This role requires both strategic oversight and hands-on involvement to promote a strong risk-aware culture throughout the organization.

What is the difference between Vice President Technology Risk Management vs Chief Information Security Officer?

AspectVice President Technology Risk ManagementChief Information Security Officer
Primary FocusOverseeing technology risk policies, compliance, and mitigation strategies across IT systemsLeading cybersecurity strategy, threat management, and security operations
CertificationsRisk management, cybersecurity, or related certifications (e.g., CRISC, CISSP)CISSP, CISM, or equivalent security certifications
Work EnvironmentStrategic risk oversight within IT departments, collaborating with risk and compliance teamsSecurity operations centers, incident response teams, and executive security leadership
Industry UsageCommon in financial, healthcare, and technology sectors

The Vice President Technology Risk Management focuses on identifying and mitigating technology-related risks across the organization, while the Chief Information Security Officer primarily manages cybersecurity threats and security policies. Both roles require risk management certifications and work closely with executive teams, but their core responsibilities differ in scope and focus.

What are the most commonly searched types of Technology Risk Management jobs in Boston, MA?

The most popular types of Technology Risk Management jobs in Boston, MA are:

What are popular job titles related to Vice President Technology Risk Management jobs in Boston, MA?

For Vice President Technology Risk Management jobs in Boston, MA, the most frequently searched job titles are:

What job categories do people searching Vice President Technology Risk Management jobs in Boston, MA look for?

The top searched job categories for Vice President Technology Risk Management jobs in Boston, MA are:

What cities near Boston, MA are hiring for Vice President Technology Risk Management jobs?

Cities near Boston, MA with the most Vice President Technology Risk Management job openings:

Information Protection Specialist

State Street Corporation

Quincy, MA • On-site

Full-time

Medical, Dental, Vision, Life, Retirement, PTO

Posted 9 days ago


Job description

The Cyber Policy Enforcement Lead, VP is responsible for leading the enterprise capability that ensures Cyber Policies and Standards are consistently enforced across the organization.
This role drives accountability for cyber compliance through structured enforcement mechanisms, timely risk-based escalation, and managing the consequence management processes. The role serves as the central coordination point for cyber policy enforcement activities, enabling policy and standard requirements are embedded within business processes, ownership is clearly defined, risks are escalated appropriately, and corrective actions are effectively monitored through resolution.
The VP partners closely with cybersecurity SMEs, business stakeholders, and senior leadership to define enforceable requirements, monitor performance metrics, identify consequence considerations, and deliver clear reporting that enables informed management decision-making.
Key Responsibilities
  • Lead the enterprise Cyber Policy Enforcement and Consequence Management capability, enabling consistent application of Cyber Policy and Standard requirements across business units and functions.
  • Develop, implement, and continuously enhance policy enforcement, escalation, and consequence management frameworks, processes, and governance mechanisms.
  • Partner with SMEs from Global Cybersecurity, Technology, Risk, Compliance, and Business stakeholders to establish enforcement priorities, remediation expectations, and consequence management activities.
  • Drive integration of policy enforcement requirements into business processes, governance forums, and risk management practices.
  • Facilitate structured engagement forums to review compliance performance, residual risks, remediation progress, and enforcement actions as applicable.
  • Prepare and present compliance, enforcement, and risk insights to senior leadership, risk committees, and governance forums.
  • Monitor compliance performance and risk trends, identify systemic issues and root causes, and drive sustainable remediation and continuous improvement.
  • Define and track key performance indicators (KPIs) and leverage automation opportunities to enhance monitoring, reporting, and workflow efficiency.
  • Conduct periodic reviews and updates of enforceable requirements, monitoring expectations, consequence considerations to ensure continued relevance and effectiveness.

Qualifications & Experience
Education
  • Bachelor's degree in Cybersecurity, Information Technology, Risk Management, Business Administration, or a related field required.
  • Master's degree preferred.
  • Relevant industry certifications strongly preferred, such as:
    • CISSP (Certified Information Systems Security Professional)
    • CISM (Certified Information Security Manager)
    • CRISC (Certified in Risk and Information Systems Control)
    • CGEIT (Certified in the Governance of Enterprise IT)
    • CISA (Certified Information Systems Auditor)

Experience
  • 10+ years of progressive experience in cybersecurity, technology risk, operational risk, governance, risk and compliance (GRC), or related disciplines.
  • Demonstrated experience designing and implementing policy enforcement, issue management, escalation, and/or consequence management frameworks within a large, complex organization.
  • Strong understanding of cybersecurity governance, risk management, control frameworks, and regulatory expectations within highly regulated industries.
  • Experience leading cross-functional initiatives involving cybersecurity SMEs, technology teams, and business partners to achieve risk reduction and compliance objectives.
  • Experience managing enterprise-scale stakeholder relationships across business, technology, risk, audit, and executive leadership functions.
  • Proven track record of driving accountability and influencing senior stakeholders to address non-compliance, remediate risks, and improve control effectiveness.
  • Experience developing and presenting executive-level reporting, risk assessments, metrics, and recommendations to senior management, risk committees, and governance forums.

Knowledge & Skills
  • Deep understanding of cybersecurity governance, policy management, standards management, control monitoring, and risk oversight practices.
  • Strong knowledge of industry frameworks and regulations, including NIST, ISO 27001, COBIT, FFIEC, SEC, and other relevant regulatory requirements.
  • Strong analytical and problem-solving skills with the ability to assess complex risks and recommend practical, risk-based solutions.
  • Ability to influence without direct authority and effectively challenge stakeholders while maintaining strong working relationships.
  • Strong executive reporting skills, including the ability to translate complex cyber risk, compliance, and enforcement insights into clear, actionable messaging for senior management and governance forums.

Ideal Candidate Profile
The ideal candidate is a strategic, execution-focused cyber governance leader with experience driving enterprise policy enforcement, escalation, and consequence management. They can translate cyber requirements into enforceable actions, measurable outcomes, and clear accountability, while partnering effectively across cyber, technology, business, risk, audit, and leadership teams. They use metrics and executive reporting to surface risks, support decisions, and reinforce a culture of cyber risk ownership.
Salary Range:
$120,000 - $202,500 Annual
The range quoted above applies to the role in the primary location specified. If the candidate would ultimately work outside of the primary location above, the applicable range could differ.
Employees are eligible to participate in State Street's comprehensive benefits program, which includes: our retirement savings plan (401K) with company match; insurance coverage including basic life, medical, dental, vision, long-term disability, and other optional additional coverages; paid-time off including vacation, sick leave, short term disability, and family care responsibilities; access to our Employee Assistance Program; incentive compensation including eligibility for annual performance-based awards (excluding certain sales roles subject to sales incentive plans); and, eligibility for certain tax advantaged savings plans.
For a full overview, visit https://hrportal.ehr.com/statestreet/Home.
About State Street
Across the globe, institutional investors rely on us to help them manage risk, respond to challenges, and drive performance and profitability. We keep our clients at the heart of everything we do, and smart, engaged employees are essential to our continued success.
We are committed to fostering an environment where every employee feels valued and empowered to reach their full potential. As an essential partner in our shared success, you'll benefit from inclusive development opportunities, flexible work-life support, paid volunteer days, and vibrant employee networks that keep you connected to what matters most. Join us in shaping the future.
As an Equal Opportunity Employer, we consider all qualified applicants for all positions without regard to race, creed, color, religion, national origin, ancestry, ethnicity, age, disability, genetic information, sex, sexual orientation, gender identity or expression, citizenship, marital status, domestic partnership or civil union status, familial status, military and veteran status, and other characteristics protected by applicable law.
Discover more information on jobs at StateStreet.com/careers
Read our CEO Statement
Job Application Disclosure:
It is unlawful in Massachusetts to require or administer a lie detector test as a condition of employment or continued employment. An employer who violates this law shall be subject to criminal penalties and civil liability.

State Street logo

About State Street

Sourced by ZipRecruiter

State Street is one of the largest custodian banks, asset managers and asset intelligence companies in the world. From technology to product innovation, we're making our mark on the financial services industry. For more than two centuries, we've been helping our clients safeguard and steward the investments of millions of people. We provide investment servicing, data & analytics, investment research & trading and investment management to institutional clients.

Industry

Finance and insurance

Company size

10,000+ Employees

Headquarters location

Boston, MA, US

Year founded

1792

Social media