Senior Director, Third-Party Risk & Cyber Resilience

S&P Global Inc.; New York (NY); On-site; USD 177,000 - 310,000; Full time

Benefits offered by this job

Health & Wellness

Flexible Downtime

Continuous Learning

Invest in Your Future

Family Friendly Perks

Beyond the Basics

Job summary

S&P Global Inc. in New York, NY, is seeking a Senior Director of Third-Party Risk within Technology Risk & Resilience to lead risk oversight of external dependencies and vendors.

The role focuses on third-party cyber, technology, and dependency risk, with governance strengthening and practical risk framework implementation across cloud, SaaS, and AI providers. The position requires 12+ years in risk leadership, the ability to advise executives, and a track record of partnering with business and

Qualifications

• Significant experience (12+ years) in third-party, technology or cyber risk leadership.
• Experience assessing risk from vendors/external services/dependencies including cyber risk and governance expectations.
• Familiarity with risk appetite, KRIs, issue management and regulatory expectations (e.g., DORA, IOSCO outsourcing).

Responsibilities

• Own and operationalize the enterprise third-party risk framework with tiering and risk tolerances.
• Provide senior risk oversight and advisory support on material third-party cyber and technology risks.
• Lead second-line oversight of risks from third parties and external dependencies, including subcontractors.

Skills

Vendor risk leadership

Cyber risk oversight

Executive risk reporting

Third-party governance

Tools

GRC platforms

Vendor monitoring tools

AI risk assessment tooling

Job description

S&P Global Inc. in New York, NY, is seeking a Senior Director of Third-Party Risk within Technology Risk & Resilience to lead risk oversight of external dependencies and vendors.

The role focuses on third-party cyber, technology, and dependency risk, with governance strengthening and practical risk framework implementation across cloud, SaaS, and AI providers. The position requires 12+ years in risk leadership, the ability to advise executives, and a track record of partnering with business and