Senior Director, Risk & Compliance Strategy

S&P Global, Inc.; Greater London; Presencial; GBP 140 000 - 200 000; Tempo integral

Vantagens oferecidas por esta oferta de emprego

Health & Wellness benefits

Flexible downtime

Continuous learning

Financial planning programs

Family-friendly perks

Resumo da oferta

S&P Global Market Intelligence seeks a senior leader to drive security governance, risk management, and third-party risk across client engagements. You will negotiate security and compliance terms, translate regulatory requirements into actionable guidance, and build scalable playbooks across complex contracts.

Collaborate with Legal, Sales, and Development to ensure products and services meet evolving regulatory demands while delivering strategic customer value.

Qualificações

• 15+ years in security governance, risk management, and compliance (GRC).
• Experience interpreting regulatory regimes and negotiating security contracts.
• Proven ability to map contractual requirements to security controls.

Responsabilidades

• Lead contract negotiations for security and compliance terms in client agreements; advise Sales and Legal.
• Apply risk-based decision making to evaluate security commitments with compensating controls.
• Partner with Legal as the technical expert to deliver on negotiated security commitments.
• Provide potential contractual language for security terms.
• Analyze regulatory requirements and develop guidance for development and technical teams.
• Identify gaps between client demands and organizational capabilities; advocate roadmaps.
• Maintain a knowledge repository of pre-approved security positions and control mappings.

Conhecimentos

GRC expertise

Regulatory interpretation

Security contract negotiation

Technical controls knowledge

Frameworks mapping (COBIT, SOC 2, ISO

Formação académica

Bachelor's degree in CS/InfoSec/Risk Management/BA or related field

Ferramentas

OneTrust

MetricStream

GRC platforms

Descrição da oferta de emprego

S&P Global Market Intelligence seeks a senior leader to drive security governance, risk management, and third-party risk across client engagements. You will negotiate security and compliance terms, translate regulatory requirements into actionable guidance, and build scalable playbooks across complex contracts.

Collaborate with Legal, Sales, and Development to ensure products and services meet evolving regulatory demands while delivering strategic customer value.