Assistant Vice President, Privacy Engineering, Wealth Services

Who we are looking for

The State Street Global Privacy Office is seeking an Assistant Vice President, Privacy Engineering, to support Wealth Services and other consumer-facing activities. Reporting to the Vice President, Privacy Engineering, this United States-based role will embed Privacy by Design into products, systems, technology initiatives, third-party solutions, and business processes involving consumer and retail investor personal data.

This role can be performed in a hybrid model, where you can balance working from home and the office to match your needs and role requirements.

Why this role is important to us

As Wealth Services expands its consumer-facing activities, it is creating new privacy considerations involving retail investor data, digital products, data sharing, adviser and processor relationships, artificial intelligence, profiling, and emerging technologies. Wealth Privacy serves as the first point of contact for most privacy matters within the business unit, helping stakeholders identify applicable requirements, engage the appropriate Global Privacy Office specialists, and obtain coordinated, practical, and risk-based privacy advice.

This is a greenfield opportunity to help shape and advance Privacy Engineering as the Wealth model is further developed and rolled out globally. You will lead innovation in collaboration with the first line of defense, Global Cybersecurity, Technology, Data Governance, Legal, Compliance, and other governance functions, helping embed practical privacy requirements into new products, systems, and processes from the outset.

What you will be responsible for

As an Assistant Vice President within the Global Privacy Office, you will:

• Serve as a primary Privacy contact for Wealth Services, coordinating matters across the business and the Global Privacy Office and involving relevant specialists where required.
• Embed Privacy by Design into Wealth Services products, strategic programs, technology initiatives, third-party solutions, and business processes.
• Conduct Privacy Impact Assessments, Data Protection Impact Assessments, and other privacy risk assessments; document risks and recommend proportionate treatment.
• Analyze business processes, system architecture, data flows, data uses, sharing arrangements, and technical controls involving consumer and retail investor personal data.
• Assess privacy risks involving minimization, purpose limitation, retention, deletion, anonymization, access, logging, monitoring, cross-border transfers, and onward disclosures.
• Review artificial intelligence, machine learning, profiling, automated decision-making, advanced analytics, and other emerging technologies and provide risk-based recommendations and challenge.
• Assess vendor, processor, and third-party privacy risk, including complex data-sharing and adviser relationships.
• Evaluate privacy control design, operating effectiveness, remediation plans, and supporting evidence while preserving first-line accountability for implementing and operating controls.
• Develop and improve Privacy Engineering standards, methodologies, playbooks, templates, technology, workflow automation, and AI-enabled assessment capabilities.
• Partner with Business, Technology, Information Security, Legal, Compliance, Enterprise Technology Risk Management, Data Governance, DPO Services, and other stakeholders on coordinated privacy outcomes.
• Monitor regulatory and technology developments and prepare clear assessments, metrics, governance updates, executive summaries, and presentations.

What we value

These skills will help you succeed in this role:

• Strong Privacy Engineering, technology risk, data lifecycle, information security, or related experience.
• Practical knowledge of Privacy by Design, privacy assessments, data flows, system architecture, lifecycle controls, artificial intelligence, cloud services, and third-party risk.
• Sound judgment and the ability to provide practical, proportionate, and risk-based advice and challenge in a regulated environment.
• Ability to communicate complex privacy and technology concepts clearly to technical, business, and senior audiences.
• Strong analytical, problem-solving, organizational, and project-management skills, with close attention to detail.
• A collaborative, proactive approach and the ability to build trusted relationships across global, cross-functional teams.

Education & Preferred Qualifications

• Bachelor’s degree in Information Systems, Computer Science, Cybersecurity, Information Security, Data Governance, Business, Law, or a related discipline, or equivalent relevant professional experience.
• Approximately 5-8+ years of relevant experience in privacy, data protection, Privacy Engineering, information security, technology risk, data governance, compliance, or a related field, preferably in financial services or another regulated industry.
• Working knowledge of applicable US and global privacy requirements and experience conducting privacy assessments and supporting Privacy by Design programs.
• Experience with consumer data, digital products, data architecture, cloud technology, artificial intelligence, advanced analytics, third parties, or privacy technology is advantageous.
• A professional privacy certification such as CIPP/US, CIPP/E, CIPM, CIPT, or an equivalent qualification is preferred; a relevant technology, security, risk, data, audit, or financial-services certification is beneficial.

Are you the right candidate? Yes!

We truly believe in the power that comes from the diverse backgrounds and experiences our employees bring with them. Although each vacancy describes what we are looking for, you do not necessarily need to fulfill every requirement when applying. If you embrace change and innovation, seek to understand the bigger picture, make data-driven decisions, and work effectively as part of a team, you could be a great fit.

Salary Range:

The range quoted above applies to the role in the primary location specified. If the candidate would ultimately work outside of the primary location above, the applicable range could differ.

Employees are eligible to participate in State Street’s comprehensive benefits program, which includes: our retirement savings plan (401K) with company match; insurance coverage including basic life, medical, dental, vision, long-term disability, and other optional additional coverages; paid-time off including vacation, sick leave, short term disability, and family care responsibilities; access to our Employee Assistance Program; incentive compensation including eligibility for annual performance-based awards (excluding certain sales roles subject to sales incentive plans); and, eligibility for certain tax advantaged savings plans.

For a full overview, visit https://hrportal.ehr.com/statestreet/Home.

About State Street

Across the globe, institutional investors rely on us to help them manage risk, respond to challenges, and drive performance and profitability. We keep our clients at the heart of everything we do, and smart, engaged employees are essential to our continued success.

We are committed to fostering an environment where every employee feels valued and empowered to reach their full potential. As an essential partner in our shared success, you’ll benefit from inclusive development opportunities, flexible work-life support, paid volunteer days, and vibrant employee networks that keep you connected to what matters most. Join us in shaping the future.

As an Equal Opportunity Employer, we consider all qualified applicants for all positions without regard to race, creed, color, religion, national origin, ancestry, ethnicity, age, disability, genetic information, sex, sexual orientation, gender identity or expression, citizenship, marital status, domestic partnership or civil union status, familial status, military and veteran status, and other characteristics protected by applicable law.

Discover more information on jobs at StateStreet.com/careers

Read our CEO Statement

Job Application Disclosure:

It is unlawful in Massachusetts to require or administer a lie detector test as a condition of employment or continued employment. An employer who violates this law shall be subject to criminal penalties and civil liability.