Technology Risk & Governance Leader

Socket.dev; New York (NY); Hybrid; USD 220,000 - 350,000; Full time

Benefits offered by this job

Health & Wellness

Flexible Downtime

Continuous Learning

Invest in Your Future

Family Friendly Perks

Beyond the Basics

Job summary

S&P Global is seeking a Head of Technology Risk, Governance, and Controls to own the strategy and execution of first-line risk across technology. You will partner with CIO, Internal Audit, and business units to drive control design, implementation, and remediation while ensuring regulatory compliance and resilience across critical systems.

The role requires deep expertise in risk frameworks, IT controls, and AI risk management, with leadership experience in a global, matrixed environment.

Qualifications

• Minimum 15 years in technology risk management and internal controls.
• Experience building and leading risk, control, and compliance functions.
• Strong ability to communicate risks to varied audiences.
• Familiar with NIST CSF, ISO 27001, COBIT, SOX ITGC.
• Experience with third-party, cloud, and data risk management.

Responsibilities

• Lead technology risk and governance strategy aligned to enterprise goals.
• Own SOX IT controls testing and remediation with Internal Audit.
• Scale first-line defense across technology and suppliers.
• Collaborate with Enterprise Risk, Compliance, and Security teams.
• Establish KPIs/KRIs and reporting for technology risk.
• Embed risk management into product development and operations.

Skills

Stakeholder management

Risk assessment

Communication to executives

Global remits

Analytical problem-solving

AI/ML risk awareness

Regulatory awareness

Education

MBA or Engineering (related discipline)

Tools

GRC platforms (ServiceNow GRC, Archer)

Job description

S&P Global is seeking a Head of Technology Risk, Governance, and Controls to own the strategy and execution of first-line risk across technology. You will partner with CIO, Internal Audit, and business units to drive control design, implementation, and remediation while ensuring regulatory compliance and resilience across critical systems.

The role requires deep expertise in risk frameworks, IT controls, and AI risk management, with leadership experience in a global, matrixed environment.