Strategic Cyber Governance & Compliance Director

S&P Global Inc.; Greater London; On-site; GBP 90,000 - 140,000; Full time

Benefits offered by this job

Health & Wellness

Flexible downtime

Continuous learning

Financial planning & family perks

Job summary

S&P Global Market Intelligence seeks a senior GRC professional to chair security and compliance terms in client contracts, translating complex regulatory landscapes into actionable guidance for development, security, and legal teams.

You will drive risk-based decisions, map requirements to control frameworks, and lead cross-functional efforts to close gaps between client demands and capabilities across cloud, data and product environments.

Qualifications

• Experience interpreting GDPR, DORA, NIS2, EU AI Act and related regimes.
• Ability to negotiate complex security terms with legal teams and clients.
• Proven track record delivering scalable security assurance processes in enterprise environments.

Responsibilities

• Lead contract negotiations for security and compliance terms in client agreements.
• Provide technical guidance to Sales and Legal teams with strategic customer relationships.
• Develop guidance to ensure adherence to regulatory requirements across development and security teams.
• Map contractual requirements to specific security controls across frameworks.
• Establish a knowledge repository of pre-approved security positions and standardized language.

Skills

GRC leadership

Security contract negotiation

Regulatory interpretation

Cloud security controls

Framework mapping (NIST/ISO/COBIT)

Security risk assessment

Stakeholder communication

Education

Bachelor's degree in CS/InfoSec/related field

Tools

OneTrust

MetricStream

Job description

S&P Global Market Intelligence seeks a senior GRC professional to chair security and compliance terms in client contracts, translating complex regulatory landscapes into actionable guidance for development, security, and legal teams.

You will drive risk-based decisions, map requirements to control frameworks, and lead cross-functional efforts to close gaps between client demands and capabilities across cloud, data and product environments.