Director, Cyber Governance & Compliance Strategy

S&P Global Inc.; New York (NY); In loco; USD 150.000 - 205.000; Tempo pieno

Vantaggi offerti da questo lavoro

Health care coverage

Retirement plan

Continuous Learning

Invest in Your Future

Family Friendly Perks

Flexible Downtime

Descrizione del lavoro

S&P Global Market Intelligence in New York, NY seeks a senior security governance and risk management leader to negotiate security terms, interpret complex regulations, and guide cross-functional teams. You will drive risk-based decision-making and shape contract language with Legal and Sales, ensuring regulatory alignment across engagements.

The role emphasizes collaboration with Legal, Security, and Engineering to deliver compliant, scalable security solutions while supporting business

Competenze

• 12+ years of progressive experience in security governance, risk management, and compliance (GRC), with expertise in regulatory interpretation and security contract negotiation
• Knowledge of financial services regulatory environments and GDPR, DORA, NIS2, EU AI Act
• Proven track record making independent risk decisions in high-pressure deal environments
• Experience developing scalable processes, playbooks, and frameworks for security assurance in enterprise environments
• Technical knowledge of cloud security controls (AWS, Azure, GCP), containerization (Docker, Kubernetes, OpenShift), IAM, encryption, and monitoring

Mansioni

• Lead contract negotiations for security and compliance terms, serving as primary technical advisor to Sales and Legal while maintaining client relationships
• Apply risk-based decisions to evaluate security commitments, communicating rationale to stakeholders
• Partner with Legal as technical SME, providing contractual language as needed
• Analyze regulatory requirements, assess scope and compliance capabilities, and guide development teams
• Identify gaps between client demands and organizational capabilities, advocating for strategic roadmaps
• Maintain knowledge repository of pre-approved security positions, standard language, and control mappings across engagements

Conoscenze

Security governance

Risk management

Compliance

Regulatory interpretation

Contract negotiation

Cloud security

Security controls

Executive communication

Formazione

Bachelor's degree in Computer Science, Information Security, Risk Management, Business Administration, or related field

Strumenti

OneTrust

MetricStream

Descrizione del lavoro

S&P Global Market Intelligence in New York, NY seeks a senior security governance and risk management leader to negotiate security terms, interpret complex regulations, and guide cross-functional teams. You will drive risk-based decision-making and shape contract language with Legal and Sales, ensuring regulatory alignment across engagements.

The role emphasizes collaboration with Legal, Security, and Engineering to deliver compliant, scalable security solutions while supporting business