Assistant Vice President, Privacy Engineering, Wealth Services at State Street in Boston, MA

Job description

Assistant Vice President, Privacy Engineering, Wealth Services Who we are looking for The State Street Global Privacy Office is seeking an Assistant Vice President, Privacy Engineering, to support Wealth Services and other consumer-facing activities. Reporting to the Vice President, Privacy Engineering, this United States-based role will embed Privacy by Design into products, systems, technology initiatives, third-party solutions, and business processes involving consumer and retail investor personal data. This role can be performed in a hybrid model, where you can balance working from home and the office to match your needs and role requirements. Why this role is important to us As Wealth Services expands its consumer-facing activities, it is creating new privacy considerations involving retail investor data, digital products, data sharing, adviser and processor relationships, artificial intelligence, profiling, and emerging technologies. Wealth Privacy serves as the first point of contact for most privacy matters within the business unit, helping stakeholders identify applicable requirements, engage the appropriate Global Privacy Office specialists, and obtain coordinated, practical, and risk-based privacy advice. This is a greenfield opportunity to help shape and advance Privacy Engineering as the Wealth model is further developed and rolled out globally. You will lead innovation in collaboration with the first line of defense, Global Cybersecurity, Technology, Data Governance, Legal, Compliance, and other governance functions, helping embed practical privacy requirements into new products, systems, and processes from the outset. What you will be responsible for As an Assistant Vice President within the Global Privacy Office, you will: Serve as a primary Privacy contact for Wealth Services, coordinating matters across the business and the Global Privacy Office and involving relevant specialists where required. Embed Privacy by Design into Wealth Services products, strategic programs, technology initiatives, third-party solutions, and business processes. Conduct Privacy Impact Assessments, Data Protection Impact Assessments, and other privacy risk assessments; document risks and recommend proportionate treatment. Analyze business processes, system architecture, data flows, data uses, sharing arrangements, and technical controls involving consumer and retail investor personal data. Assess privacy risks involving minimization, purpose limitation, retention, deletion, anonymization, access, logging, monitoring, cross-border transfers, and onward disclosures. Review artificial intelligence, machine learning, profiling, automated decision-making, advanced analytics, and other emerging technologies and provide risk-based recommendations and challenge. Assess vendor, processor, and third-party privacy risk, including complex data-sharing and adviser relationships. Evaluate privacy control design, operating effectiveness, remediation plans, and supporting evidence while preserving first-line accountability for implementing and operating controls. Develop and improve Privacy Engineering standards, methodologies, playbooks, templates, technology, workflow automation, and AI-enabled assessment capabilities. Partner with Business, Technology, Information Security, Legal, Compliance, Enterprise Technology Risk Management, Data Governance, DPO Services, and other stakeholders on coordinated privacy outcomes. Monitor regulatory and technology developments and prepare clear assessments, metrics, governance updates, executive summaries, and presentations. What we value These skills will help you succeed in this role: Strong Privacy Engineering, technology risk, data lifecycle, information security, or related experience. Practical knowledge of Privacy by Design, privacy assessments, data flows, system architecture, lifecycle controls, artificial intelligence, cloud services, and third-party risk. Sound judgment and the ability to provide pra