Senior Director, Cyber Governance & Compliance Strategy

S&P Global; Princeton (NJ); In loco; USD 150.000 - 205.000; Tempo pieno

Vantaggi offerti da questo lavoro

Health & Wellness

Flexible Downtime

Continuous Learning

Invest in Your Future

Family Friendly Perks

Beyond the Basics

Descrizione del lavoro

S&P Global Market Intelligence is seeking a senior security governance and risk leader to negotiate security terms in client contracts, assess risk-based commitments, and drive regulatory alignment across development and legal teams.

The role requires deep GRC expertise, strong communication with executives, and the ability to translate complex regulations into actionable security guidance for external products and services.

Competenze

• 12+ years of progressive experience in security governance, risk management, and compliance (GRC).
• Experience negotiating security terms in client agreements.
• Working knowledge of financial services regulatory environments (GDPR, DORA, NIS2, EU AI Act).

Mansioni

• Lead contract negotiations for security and compliance terms with Sales and Legal teams.
• Assess security commitments using risk-based analysis and communicate rationale to stakeholders.
• Collaborate with Legal to map contractual requirements to security controls.
• Interpret complex regulatory requirements and guide development and technical teams for compliance.
• Identify gaps between client demands and organizational capabilities through cross-functional work.

Conoscenze

GRC

Risk management

Contract negotiation

Regulatory interpretation

Security governance

Executive communication

Formazione

Bachelor's degree in Computer Science, Information Security, Risk Management, Business Administration, or related field

Strumenti

OneTrust

MetricStream

GRC platforms

Descrizione del lavoro

S&P Global Market Intelligence is seeking a senior security governance and risk leader to negotiate security terms in client contracts, assess risk-based commitments, and drive regulatory alignment across development and legal teams.

The role requires deep GRC expertise, strong communication with executives, and the ability to translate complex regulations into actionable security guidance for external products and services.