Director, Cyber Risk & Compliance Strategy

S&P Global Inc.; City Of London; On-site; GBP 150,000 - 190,000; Full time

Benefits offered by this job

Health & Wellness

Flexible Downtime

Continuous Learning

Invest in Your Future

Family Perks

Job summary

S&P Global Market Intelligence is seeking a senior security governance, risk, and compliance leader to drive contractual negotiations and regulatory interpretation for externally facing products. You will collaborate with Sales, Legal, and Development teams to ensure security commitments are achievable and well-documented.

This role requires deep expertise in enterprise security controls, compliance frameworks, and communication with executive stakeholders to balance risk and business goals.

Qualifications

• 12+ years of progressive experience in security governance, risk management, and compliance (GRC).
• Working knowledge of financial services regulatory environments, including GDPR, DORA, NIS2, EU AI Act and related regimes.
• Proven track record in risk-based decision making during high-pressure deals.
• Experience developing scalable processes, playbooks, and frameworks for security assurance.
• Strong technical knowledge of cloud platforms (AWS/Azure/GCP) and containerization (Docker/Kubernetes/OpenShift).
• Expert-level proficiency in compliance frameworks (COBIT, SOC 2, ISO 27001, NIST CSF, NIST 800-53, ISO 42001).
• Excellent written and verbal communication with legal teams and executive leadership.
• Bachelor-level or higher in a relevant field or equivalent experience.

Responsibilities

• Lead contract negotiations for security and compliance terms in client agreements.
• Evaluate security commitments using risk-based analysis and communicate rationale to stakeholders.
• Partner with Legal as the technical SME to ensure capability to meet negotiated commitments.
• Analyze and interpret complex regulatory requirements to guide development and compliance.
• Identify gaps between client demands and organizational capabilities and advocate roadmaps.
• Maintain a knowledge repository of pre-approved security positions and standard language.

Skills

GRC expertise

Regulatory interpretation

Contract negotiation

Cloud security controls

Executive communication

Education

Bachelor's degree in CS/InfoSec/Risk Mgmt or related

Tools

OneTrust

MetricStream

GRC platforms

Job description

S&P Global Market Intelligence is seeking a senior security governance, risk, and compliance leader to drive contractual negotiations and regulatory interpretation for externally facing products. You will collaborate with Sales, Legal, and Development teams to ensure security commitments are achievable and well-documented.

This role requires deep expertise in enterprise security controls, compliance frameworks, and communication with executive stakeholders to balance risk and business goals.