Head of DORA Office, Vice President at State Street · Kraków

Head of DORA Office, Vice President Location: Krakow, Poland For the Operational Resilience department in State Street Bank International GmbH, we are looking for a Head of DORA Office. The Head of DORA Office is accountable for the establishment, execution, and continuous enhancement of the bank’s digital operational resilience framework for State Street Bank International (SSBI). The role is responsible for translating regulatory requirements under the Digital Operational Resilience Act (DORA) into practical, enforced, and auditable capabilities, ensuring the organization can prevent, withstand, respond to, and recover from ICT-related disruptions. The role acts as a central governance and implementation function for digital operational resilience and ensures consistent implementation of controls, processes, and governance across relevant domains. The role reports to SSBI Head of Resilience. Preferred Location: Poland/Italy. What you will be responsible for You will be accountable for overseeing the implementation and ongoing operation of the firm’s digital operational resilience strategy and  relevant frameworks underpinned by DORA requirements, including policies, procedures, systems, and controls that ensure SSBI’s compliance with DORA and related European regulatory requirements, as well as the organization’s overall operational resilience posture. Specifically, you will Drive the implementation and continuous enhancement of the digital operational resilience strategy and DORA-governed frameworks across SSBI, ensuring compliance. Act as the central governance and integration function across ICT risk management, third-party risk, cyber security, business continuity, and resilience functions, ensuring consistent application of DORA requirements. Provide operational guidance, standard methodologies, and enablement support across the organization. Own the DORA business incident management and regulatory reporting framework, ensuring timely, accurate, and consistent regulatory notifications and escalation of ICT-related incidents. Oversee digital operational resilience testing governance, including Threat-Led Penetration Testing (TLPT), scenario testing, and validation of recovery capabilities and exit strategies Drive and coordinate business continuity and resilience frameworks, ensuring coverage of critical or important functions and alignment with impact tolerances and recovery requirements. Own the execution and operational processes supporting the Register of Information (RoI), ensuring completeness, accuracy, and regulatory readiness of ICT third-party data. Define, implement, and maintain standard operating procedures (SOPs) - e.g. ICT classification, incident handling, resilience controls. Provide expert guidance to business, technology, and control functions on DORA requirements and operational resilience expectations. Drive audit readiness, regulatory inspection preparedness, and remediation activities, including coordination of responses to ECB, BaFin, and other supervisory authorities. Implement and operate DORA control tollgates within strategic initiatives and transformation programs, ensuring resilience considerations are embedded upfront. Develop and maintain KRI/KPI frameworks and executive reporting, providing transparent insight into SSBI’s digital operational resilience posture. Deliver regular reporting to governance committees ensuring effective escalation, visibility, and decision-making support Promote a culture of resilience and accountability, driving awareness and consistent implementation across the organization What we value These skills will help you succeed in this role: Strong leadership and stakeholder management skills, with the ability to influence across business, technology, and control functions. Deep understanding of digital operational resilience, ICT risk management, and DORA regulatory requirements. Strong execution mindset with the ability to translate regulatory requirements into operationally effective frameworks. Ability to operate as a central integrator across multiple functions, balancing strategic leadership with hands-on implementation. Proven capability to manage complex regulatory programs and deliver outcomes under supervisory scrutiny. Strong communication skills with experience engaging senior management, regulators, and governance forums. Education, Experience and Skills Educated to degree level or equivalent professional qualification. Extensive experience in operational resilience, ICT risk management, or regulatory implementation within financial services. Strong knowledge of DORA, ICT risk management frameworks, and European regulatory expectations. Demonstrated experience in incident management, resilience testing, business continuity, and control frameworks. Solid understanding of governance models, including the three lines of defense and cross-functional execution structures. Experience managing regulatory inspections, audits, and remediation programs. Proven ability to lead cross-functional teams and drive enterprise-wide initiatives. Strategic mindset with the ability to connect resilience, regulatory compliance, and business objectives. Confident and decisive, with the ability to operate autonomously while ensuring appropriate escalation. Ability to collaborate across regions and functions in a dynamic, fast-paced, and internationally diverse environment. Minimum Salary:​ zł282,000 Annual The minimum salary quoted above applies to the role in the primary location specified. If the candidate ultimately works outside of this primary location, the applicable minimum salary may differ.​ Salary will be determined based on factors such as the position, type of work performed, individual skills, job description, working hours, diligence, initiative, self-management, length of employment, availability, and the quantity and quality of work delivered, as well as other objective and non-discriminatory criteria relevant to State Street employees.​ In addition to salary, employees are eligible to be considered for discretionary annual performance-based awards.​ ​ We Offer:​ Permanent contract from day one​ Additional holidays (Birthday Day Off, 3rd and 5th year anniversary Day Off)​ Gold Medical Package for employees and their families (partner and children)​ Premium life insurance package and private pension plan​ Wide range of soft skills training, technical workshops, language classes and development programs​ Opportunities to volunteer your time to company-driven initiatives, employee networks or organizations of your choice​ Variety of well-being programs​ Additional benefits available depending on the seniority of the role About State Street Across the globe, institutional investors rely on us to help them manage risk, respond to challenges, and drive performance and profitability. We keep our clients at the heart of everything we do, and smart, engaged employees are essential to our continued success. We are committed to fostering an environment where every employee feels valued and empowered to reach their full potential. As an essential partner in our shared success, you’ll benefit from inclusive development opportunities, flexible work-life support, paid volunteer days, and vibrant employee networks that keep you connected to what matters most. Join us in shaping the future. As an Equal Opportunity Employer, we consider all qualified applicants for all positions without regard to race, creed, color, religion, national origin, ancestry, ethnicity, age, disability, genetic information, sex, sexual orientation, gender identity or expression, citizenship, marital status, domestic partnership or civil union status, familial status, military and veteran status, and other characteristics protected by applicable law. Discover more information on jobs at StateStreet.com/careers Read our CEO Statement State Street's Speak Up Line Załącznik do standardu Whistleblowing i Speak Up SSBI GmbH dla Oddziału w Polsce Additional Locations: Gdansk, Poland