LogoFresh Jobs Ahead
S&P Global
S&P Global
Skilled Worker Visa SponsorConsultingLogisticsMarketing

S&P Global provides market intelligence, credit ratings, analytics, and benchmark indices for businesses, investors, governments, and other organizations worldwide. Its services cover finance, commodities, mobility, sustainability, energy transitions, and artificial intelligence, helping customers interpret market developments, assess credit risk, and make informed decisions.

The company delivers these insights through businesses including S&P Global Market Intelligence, S&P Global Ratings, and S&P Dow Jones Indices. Its data-driven products support research, risk analysis, benchmarking, and strategic planning across complex global markets.

LinkedIn
Company Jobs

Senior Director of Risk and Compliance

Lead client security negotiations and regulatory compliance risk for S&P Global Market Intelligence. Advise Sales, Legal, and technical teams on enterprise security commitments.

GBUnited KingdomHybridFull-timeSeniorEnglish RequiredCompliance
AWSAzureCloudCyber SecurityDockerGoogle Cloud PlatformKubernetesOpenShift

Description

  • Negotiate security and compliance terms in client contracts.
  • Advise Sales and Legal teams as the primary technical expert.
  • Build and maintain strategic customer relationships.
  • Assess proposed security commitments through risk-based decision making.
  • Evaluate compensating controls and possible roadmap investments.
  • Explain risk rationale clearly to stakeholders at every level.
  • Partner with Legal as the technical subject matter expert.
  • Ensure the organization can meet negotiated security commitments.
  • Suggest suitable contractual language.
  • Interpret complex regulatory requirements.
  • Assess compliance scope and organizational capabilities.
  • Create practical guidance for development and technical teams.
  • Find and address systemic gaps between client security demands and organizational capabilities.
  • Build cross-functional partnerships and advocate for strategic roadmaps.
  • Maintain a knowledge repository of approved security positions, standard contract language, and control framework mappings.

Requirements

  • 15+ years of progressive experience in security governance, risk management and compliance (GRC), security assurance, artificial intelligence, or third-party risk management.
  • Expertise in interpreting regulations and negotiating security terms in contracts.
  • Working knowledge of financial services and enterprise regulatory environments, including GDPR, DORA, NIS2, the EU AI Act, and related compliance regimes.
  • A record of making independent, defensible risk decisions in high-pressure deal environments with measurable business impact.
  • Experience building and implementing scalable processes, playbooks, and frameworks for enterprise security assurance functions.
  • Broad technical knowledge of infrastructure and application controls, modern cloud security controls across AWS, Azure, or GCP, Docker, Kubernetes, or OpenShift, identity and access management, encryption protocols, and security monitoring solutions.
  • Expert-level proficiency in COBIT, SOC 2, ISO 27001, the NIST Cybersecurity Framework, NIST 800-53, and ISO 42001.
  • Ability to map contractual requirements to specific security controls.
  • Exceptional written and verbal communication skills.
  • Ability to work with legal counsel, negotiate complex terms, and present technical concepts to executive leaders.
  • Bachelor’s degree in Computer Science, Information Security, Risk Management, Business Administration, or a related field, or equivalent professional experience.
  • Certifications such as CISSP, CISM, CISA, CCSP, CIPP, or CRISC are preferred.
  • Hands-on experience with contract management platforms, security questionnaire automation tools such as OneTrust or MetricStream, and GRC technology solutions is preferred.

Benefits

  • Health coverage supporting physical and mental well-being.
  • Generous paid time off.
  • Ongoing learning resources and career development opportunities.
  • Competitive pay.
  • Retirement planning.
  • Continuing education program.
  • Company-matched student loan contributions.
  • Financial wellness programs.
  • Benefits for employees’ partners and children.
  • Retail discounts.
  • Referral incentives.

Related Jobs

Benchmark Capital

Compliance Team Manager – Benchmark Capital (Hybrid, UK)

Benchmark Capital
201 – 500 Employees
B2CFinance
GBUnited KingdomHybridFull-timeMiddleSeniorEnglish RequiredCompliance

Lead compliance analysts and monitoring officers at Benchmark Capital, strengthening FCA oversight across wealth management services. Focus on controls, regulatory risk and positive client outcomes.

Open