Senior Cyber GRC & Compliance Leader

S&P Global; Amsterdam; Sur place; EUR 144 000 - 216 000; Plein temps

Avantages offerts par ce poste

Health & Wellness

Flexible Downtime

Continuous Learning

Retirement planning

Family perks

Diversity & Inclusion programs

Résumé du poste

S&P Global Market Intelligence in London seeks a senior leader to drive security governance, risk, and compliance, including negotiating security terms in client agreements and translating regulatory requirements into actionable controls.

Role requires collaboration with Sales, Legal, and Engineering to map GDPR/DORA/NIS2/EU AI Act to contractual safeguards and scalable playbooks. Strong communication to executives is essential.

Qualifications

• 12+ years of progressive experience in security governance, risk management, and compliance (GRC), security assurance, AI or third‑party risk management.
• Working knowledge of financial services regulatory environments, including GDPR, DORA, NIS2, EU AI Act and related regimes.
• Proven track record making independent, defensible risk decisions in high‑pressure deal environments with measurable business impact.
• Proven experience developing scalable processes, playbooks, and frameworks for security assurance in enterprise settings.
• Technical knowledge of infrastructure and application controls, cloud security, IAM, encryption, and monitoring.
• Expert-level proficiency in COBIT, SOC 2, ISO 27001, NIST CSF, NIST 800‑53, ISO 42001 with mapping to contractual requirements.
• Excellent written and verbal communication with ability to engage legal counsel and present complex concepts to executives.
• Bachelor's degree in CS/InfoSec/ Risk Mgmt/Business or equivalent experience.

Responsabilités

• Lead contract negotiations for security and compliance terms in client agreements with Sales and Legal.
• Apply risk-based evaluation to assess proposed security commitments and communicate rationale to stakeholders.
• Partner with Legal as the technical SME, providing potential contract language.
• Analyze regulatory requirements and develop guidance for development and technical teams.
• Identify gaps between client demands and capabilities, steering cross‑functional roadmap advocacy.
• Establish a knowledge repository of pre-approved security positions and control mappings.

Connaissances

Security governance

Risk management

Contract negotiation

Regulatory interpretation

Communication skills

Strategic decision making

Cross-functional collaboration

Cloud security controls

GRC frameworks

Formation

Bachelor's degree in Computer Science or related field

Outils

OneTrust or similar GRC tools

Contract management platforms

Security questionnaire automation tools

Description du poste

S&P Global Market Intelligence in London seeks a senior leader to drive security governance, risk, and compliance, including negotiating security terms in client agreements and translating regulatory requirements into actionable controls.

Role requires collaboration with Sales, Legal, and Engineering to map GDPR/DORA/NIS2/EU AI Act to contractual safeguards and scalable playbooks. Strong communication to executives is essential.