Enterprise Resilience Office | 3rd Party & Supply Chain Resilience Assurance- VP Greater London, United Kingdom Area + 2 more

Role Purpose

The Vice President, Contracting, Validation & Reporting leads the ERO's resilience contracting, independent validation and management-information capability for third-party and supply chain arrangements. The role ensures resilience and recovery requirements are embedded in new agreements, renewals and contingency and exit arrangements; provides independent review and challenge of assessment findings, risks, remediation plans and risk acceptances; and delivers clear, decision-ready reporting to senior management, governance forums and regulators.

Acting as the principal ERO interface with Procurement and Legal, and working through Business Continuity Directors with project leads and Engagement Managers, the VP turns policy, risk appetite and supplier assurance outcomes into enforceable contractual obligations, a risk-based annual assurance and testing schedule, and practical management insight. The role acts as the "checker" alongside the VP – Assessments & Assurance: it validates assessment outputs, identifies concentration and systemic resilience risks, and keeps the programme aligned with regulatory policy.

Key Responsibilities

1. Stakeholder & Relationship Management

Own and manage the relationship between the ERO and Procurement and Legal, acting as the ERO's primary point of contact for resilience-related contracting matters.

Work through Business Continuity Directors (BCDs) to manage relationships with project leads and Engagement Managers (EMs) for all contracting activity, so resilience requirements are considered early and consistently.

Set clear service standards, intake routes and turnaround expectations for contracting support across the business.

1. Contracting, Contingency & Exit

Define, draft and maintain the ERO's operational resilience contract schedules, clauses and minimum requirements. These cover recovery commitments, incident notification, testing and audit rights, data recovery, subcontractor and fourth-party dependencies, remediation obligations, and contingency and exit provisions.

Support new contract agreements and renewals of existing contracts by giving risk-based advice, negotiating resilience positions with Procurement and Legal, recording exceptions and escalating unresolved gaps.

Support the production, review and testing of third-party contingency and exit plans, ensuring they are clear, executable and aligned to Critical and Important Business Service outcomes.

Keep contract schedules under review so they reflect changes in policy, regulation, lessons learned and emerging threats.

1. Change, Ad-Hoc, Risk, Control & Regulatory Requests

Support change, transformation and ad-hoc programme requests, giving timely, consistent and traceable ERO advice on third-party resilience requirements.

Coordinate responses to risk, control, internal audit, client and regulatory requests, keeping evidence defensible, ownership clear and actions tracked to completion.

Maintain a central log of requests, advice given and decisions made to support consistency and audit trail.

1. Management Information & Reporting

Collate and produce weekly, monthly and ad-hoc management information and reporting on contracting activity, assessment coverage, findings, risks, remediation status, risk acceptances, overdue actions and supplier risk themes.

Produce concise, insight-led reports for the Managing Director, the SVP Global Operational Resiliency, risk governance forums and regulatory engagement, highlighting decisions needed and areas for escalation or investment.

Maintain data quality, reporting controls and a single, reconciled source of truth for third-party resilience MI.

1. Independent Validation & Risk Oversight

Review and validate findings, risks, remediation plans and risk acceptances drafted by the Assessments & Assurance team, challenging evidence sufficiency, risk ratings, proportionality and alignment with methodology before approval or escalation.

Review concentration and systemic resilience risks across the supplier population, including shared providers, geographic and sector concentration, technology and data dependencies, and fourth-party exposure. Present material themes to senior governance.

Confirm that remediation closure evidence shows sustainable outcomes, not just completed activity, and escalate overdue, repeat or unresolved issues.

1. Annual Assurance & Testing Schedule

Identify, plan and schedule the annual programme of on-site visits and inspections, assessment workshops, joint third-party testing, and contingency and exit plan tests, prioritised by supplier criticality, service impact, concentration and prior findings.

Agree the schedule with the Assessments & Assurance team, Testing & Exercising, business service owners and suppliers, ensuring scenarios are severe but plausible and test objectives are outcome-based.

Track delivery against the plan and feed outcomes into contract refresh, remediation, risk acceptance and exit planning decisions.

1. Policy & Regulatory Compliance

Keep third-party resilience contracting, validation and reporting activity compliant with, and aligned to, internal policy, standards and applicable regulatory expectations across relevant jurisdictions on an ongoing basis.

Monitor regulatory developments and incorporate changes into contract schedules, validation criteria and reporting.

Maintain complete, defensible records to support second-line review, internal audit and supervisory examination.

1. Leadership, Innovation & Continuous Improvement

Recruit, coach and direct assigned analysts and matrix resources, building capability in resilience contracting, validation and reporting.

Promote responsible use of workflow tooling, analytics, automation and AI to improve request intake, contract requirement tracking, validation consistency and reporting quality.

Promote disciplined execution, professional scepticism, constructive challenge and lessons learned.

Experience, Skills & Qualifications

Substantial experience in third-party risk management, outsourcing, procurement, legal contracting, operational resilience, business continuity, issues management or a related risk and control discipline within a large, regulated organisation.

Demonstrated ability to translate resilience requirements into practical contract language, negotiate competing positions and manage exceptions through appropriate governance.

Experience independently reviewing and validating findings, risk ratings, remediation plans and risk acceptances with professional scepticism.

Strong understanding of contingency and exit planning, concentration and systemic risk, testing methodologies and regulatory evidence expectations.

Proven ability to produce concise executive MI and to coordinate complex, time-sensitive stakeholder and regulatory requests.

Excellent written communication, commercial judgement, analytical capability and senior stakeholder management skills.

Bachelor's degree or equivalent professional experience required; relevant qualifications in third-party risk, procurement, law, operational resilience, business continuity, audit or risk management preferred.

Leadership Expectations

Sets clear standards and builds trusted partnerships across ERO, Procurement, Legal, TPRM, BCDs and the business.

Maintains independence and high evidence standards when validating assessment outcomes, while enabling practical risk reduction.

Constructively challenges contractual weaknesses and escalates material exceptions, systemic risks and overdue remediation clearly and with sound judgement.

Drives continuous improvement, develops talent and represents the capability credibly with senior stakeholders, auditors and regulators.

About State Street

Across the globe, institutional investors rely on us to help them manage risk, respond to challenges, and drive performance and profitability. We keep our clients at the heart of everything we do, and smart, engaged employees are essential to our continued success.

We are committed to fostering an environment where every employee feels valued and empowered to reach their full potential. As an essential partner in our shared success, you’ll benefit from inclusive development opportunities, flexible work-life support, paid volunteer days, and vibrant employee networks that keep you connected to what matters most. Join us in shaping the future.

As an Equal Opportunity Employer, we consider all qualified applicants for all positions without regard to race, creed, color, religion, national origin, ancestry, ethnicity, age, disability, genetic information, sex, sexual orientation, gender identity or expression, citizenship, marital status, domestic partnership or civil union status, familial status, military and veteran status, and other characteristics protected by applicable law.

Discover more information on jobs at StateStreet.com/careers

Read our CEO Statement