Senior Director, Third-Party & Cyber Risk

S&P Global; New York (NY); On-site; USD 177,000 - 310,000; Full time

Benefits offered by this job

Health & Wellness

Flexible Downtime

Continuous Learning

Invest in Your Future

Family Friendly Perks

Beyond the Basics

Job summary

S&P Global in New York seeks a Senior Director of Third-Party Risk to lead governance and operationalize the enterprise third-party risk framework across external vendors, cloud platforms, and critical dependencies. The role emphasizes cyber risk, resilience, and strong cross-functional collaboration with business leadership and control functions.

You will guide risk identification, prioritization, and mitigation with measurable outcomes, supporting executive decision-making and risk reporting

Qualifications

• 12+ years of leadership experience in third-party, technology or cyber risk (second line, control, or audit).
• Ability to advise senior stakeholders and drive cross-team consistency.
• Knowledge of risk appetite, KRIs, issue management and risk acceptance.

Responsibilities

• Own and operationalize the enterprise third-party risk framework with tiering, due diligence standards and tolerances.
• Provide senior risk oversight on material third-party cyber and technology risks and document decision quality.
• Lead second-line oversight of risks from third parties and external dependencies, including subcontractors.
• Partner with TPRM to ensure practical risk requirements are integrated into onboarding, renewals, and major changes.
• Provide guidance on risk issues, remediation and risk acceptances with clear, time-bound decisions.
• Improve executive visibility into risk exposure through dependency mapping and KRIs.
• Drive continuous improvement of the framework to adapt to evolving risk.

Skills

Third-party risk leadership

Cyber risk

Regulatory awareness (DORA, IOSCO)

Vendor management

AI risk awareness

Executive risk reporting

Tools

GRC platforms

Continuous monitoring tools

Job description

S&P Global in New York seeks a Senior Director of Third-Party Risk to lead governance and operationalize the enterprise third-party risk framework across external vendors, cloud platforms, and critical dependencies. The role emphasizes cyber risk, resilience, and strong cross-functional collaboration with business leadership and control functions.

You will guide risk identification, prioritization, and mitigation with measurable outcomes, supporting executive decision-making and risk reporting