Director, Cyber Governance & Compliance Strategy

S&P Global; Greater London; On-site; GBP 120,000 - 180,000; Full time

Job summary

S&P Global Market Intelligence is seeking an experienced leader in security governance, risk management and compliance to guide contractual security commitments for client engagements. The role focuses on translating complex regulatory requirements into actionable guidance for development, product and sales teams.

You will apply risk-based decision making, collaborate with Legal and Sales, and develop scalable playbooks for security assurance in enterprise environments.

Qualifications

• Experience in security governance, risk management and compliance (GRC).
• Ability to interpret regulations (GDPR, NIST, ISO) and map to controls.
• Proven track record negotiating security/privacy terms in client agreements.
• Experience developing scalable processes and playbooks for security assurance in enterprise environments.
• Strong written and verbal communication with legal counsel and executives.

Responsibilities

• Lead contract negotiations for security and compliance terms with Sales and Legal teams.
• Apply risk-based decision making to assess security commitments and communicate rationale to stakeholders.
• Partner with Legal as SME to ensure capability to deliver negotiated security commitments.
• Analyze regulatory requirements and translate into guidance for development and technical teams.
• Identify gaps between client demands and organizational capabilities and advocate strategic roadmaps.
• Maintain knowledge repository of pre-approved security positions and control mappings.

Skills

GRC expertise

Regulatory interpretation

Contract negotiation

Strategic stakeholder communication

Risk-based decision making

Education

Bachelor's degree in Computer Science / Information Security / Risk Management / Business Administration

Tools

OneTrust

MetricStream

GRC platforms

Job description

S&P Global Market Intelligence is seeking an experienced leader in security governance, risk management and compliance to guide contractual security commitments for client engagements. The role focuses on translating complex regulatory requirements into actionable guidance for development, product and sales teams.

You will apply risk-based decision making, collaborate with Legal and Sales, and develop scalable playbooks for security assurance in enterprise environments.