> Markdown version of [/jobs/ext/4690338-portfolio-governance-lead-vp](https://www.wearedevelopers.com/jobs/ext/4690338-portfolio-governance-lead-vp). Every page supports `.md` or `Accept: text/markdown`. Links point to the HTML versions so they work for humans too. Agent guide: [/agents.md](https://www.wearedevelopers.com/agents.md).

---

# Portfolio Governance Lead, VP

- **Company:** State Street
- **Location:** Boston, MA, United States
- **Experience:** Expert
- **Salary:** $120,000 - $217,500
- **Contract:** Permanent contract
- **Skills:** Microsoft Word, Agile Methodology, Cyber Security, RAID, Identity and Access Management, Microsoft PowerPoint, PRINCE2, Software Vulnerability Management, Enterprise Software Applications
- **Published:** November 12, 2026
- **Apply:** https://www.jofdav.com/jobs/60512492-portfolio-governance-lead-vp

## About the Role

* 7+ years of experience in technology risk, program/project management, cybersecurity, infrastructure, audit, controls, or technology governance.
 * Experience managing large technology portfolios in a regulated environment.
 * Strong understanding of risk remediation, IAM/PAM, vulnerability management, infrastructure risk, third-party risk, audit, and regulatory commitments.
 * Strong executive communication and presentation skills.
 * Demonstrated ability to drive accountability across teams without necessarily having direct management authority.
 * Strong experience with RAID management, portfolio reporting, governance forums, dependency management, and executive escalation.
 * PMP, PRINCE2, Agile, ITIL, risk, or related professional certification preferred.

## Description

The Portfolio Governance Lead provides centralized governance and execution oversight across a portfolio of Market applications, ensuring technology risk, control remediation, regulatory commitments, and strategic remediation initiatives are effectively managed and reported.

The role maintains the integrated portfolio view, drives governance cadence, manages RAID and escalation processes, and provides senior leadership with clear visibility into material risk exposure, remediation progress, emerging concerns, dependencies, and decisions required.

Key Responsibilities

Portfolio Governance

 * Maintain the integrated Risk & Control portfolio across 500+ applications.
 * Establish consistent governance standards, reporting requirements, milestones, and escalation criteria.
 * Coordinate activities across Risk Remediation Project Managers, application owners, cybersecurity, infrastructure, IAM, third-party risk, audit, and control teams.
 * Ensure priority risks have a clear accountable owner, path to green, target date, milestones, dependencies, and closure criteria. These fields align with the portfolio operating model already established in Application_Risk_and_Vulnerability_Operating_Model.docx. (Applicatio...ting_Model | Word)

Executive Reporting

 * Produce concise executive dashboards and portfolio-level reporting covering:
 + Material risk exposure
 + P1/P2 and overdue remediation
 + Aging risks and control gaps
 + Milestone slippage
 + Forecast confidence
 + Regulatory and audit commitments
 + Vendor/platform dependencies
 + Decisions and executive intervention required
 * Translate detailed remediation activity into clear senior-management reporting focused on exposure, trajectory, accountability, and required decisions.

RAID & Dependency Management

 * Maintain the portfolio-level Risks, Actions, Issues and Dependencies (RAID) framework.
 * Identify systemic or cross-application risks that cannot be resolved within individual workstreams.
 * Track dependencies involving shared infrastructure, cybersecurity, IAM, vendors, funding, resources, and technology platforms.
 * Drive accountability for overdue actions and unresolved blockers.

Escalation Management

 * Establish clear escalation thresholds for material exposure, missed commitments, regulatory deadlines, inadequate remediation plans, and unresolved dependencies.
 * Escalate issues through the appropriate risk and technology governance forums.
 * Ensure escalations clearly state business/risk impact, accountable owner, corrective action, target date, blocker, and decision required.

Governance Calendar

Own and coordinate the Risk & Control governance cadence, including:
*
Daily: Critical/P1 exception management
*
Weekly: Portfolio remediation and execution review
*
Biweekly: High-risk and control-domain reviews
*
Monthly: Risk & Control Remediation Council
*
Quarterly: Executive portfolio and operating-model review

This cadence is consistent with the governance structure established in Application_Risk_Vulnerability_Executive_Operating_Model.pptx. (Applicatio...ting_Model | PowerPoint)

Remediation & Closure Oversight

 * Challenge remediation plans that lack credible milestones, ownership, dependencies, or target dates.
 * Monitor delivery against agreed paths to green.
 * Coordinate with control owners to ensure remediation evidence supports closure.
 * Ensure items are not reported as closed until required evidence and validation are complete.

Key Deliverables

 * Enterprise application Risk & Control portfolio dashboard
 * Executive monthly reporting
 * Integrated RAID and dependency register
 * Governance calendar
 * Decision and escalation log
 * Remediation milestone reporting
 * Aging and overdue-risk reporting
 * Regulatory/audit commitment tracking
 * Portfolio-level risk heatmaps
 * Executive briefing materials