LogoFresh Jobs Ahead
S&P Global
S&P Global
Kvalifikuoto darbuotojo vizos rėmėjasKonsultavimasLogistikaRinkodara

S&P Global teikia rinkos informaciją, kredito reitingus, analizes ir lyginamuosius indeksus įmonėms, investuotojams, vyriausybėms ir kitoms organizacijoms visame pasaulyje. Jos paslaugos apima finansus, žaliavas, mobilumą, tvarumą, energetikos transformaciją ir dirbtinį intelektą, padėdamos klientams suprasti rinkos pokyčius, įvertinti kredito riziką ir priimti informacija pagrįstus sprendimus.

Bendrovė šias įžvalgas teikia per tokius padalinius kaip „S&P Global Market Intelligence“, „S&P Global Ratings“ ir „S&P Dow Jones Indices“. Jos duomenimis pagrįsti produktai padeda atlikti tyrimus, analizuoti riziką, vykdyti lyginamąją analizę ir strategiškai planuoti sudėtingose pasaulio rinkose.

LinkedIn
Darbai įmonėje

Senior Director of Risk and Compliance

Lead client security negotiations and regulatory compliance risk for S&P Global Market Intelligence. Advise Sales, Legal, and technical teams on enterprise security commitments.

GBJungtinė KaralystėHibridinisVisas etatasVyresnysis specialistasPrivaloma Kalba: anglųAtitiktis
AWSAzureDebesijaDockerGoogle Cloud PlatformKibernetinis saugumasKubernetesOpenShift

Aprašymas

  • Negotiate security and compliance terms in client contracts.
  • Advise Sales and Legal teams as the primary technical expert.
  • Build and maintain strategic customer relationships.
  • Assess proposed security commitments through risk-based decision making.
  • Evaluate compensating controls and possible roadmap investments.
  • Explain risk rationale clearly to stakeholders at every level.
  • Partner with Legal as the technical subject matter expert.
  • Ensure the organization can meet negotiated security commitments.
  • Suggest suitable contractual language.
  • Interpret complex regulatory requirements.
  • Assess compliance scope and organizational capabilities.
  • Create practical guidance for development and technical teams.
  • Find and address systemic gaps between client security demands and organizational capabilities.
  • Build cross-functional partnerships and advocate for strategic roadmaps.
  • Maintain a knowledge repository of approved security positions, standard contract language, and control framework mappings.

Reikalavimai

  • 15+ years of progressive experience in security governance, risk management and compliance (GRC), security assurance, artificial intelligence, or third-party risk management.
  • Expertise in interpreting regulations and negotiating security terms in contracts.
  • Working knowledge of financial services and enterprise regulatory environments, including GDPR, DORA, NIS2, the EU AI Act, and related compliance regimes.
  • A record of making independent, defensible risk decisions in high-pressure deal environments with measurable business impact.
  • Experience building and implementing scalable processes, playbooks, and frameworks for enterprise security assurance functions.
  • Broad technical knowledge of infrastructure and application controls, modern cloud security controls across AWS, Azure, or GCP, Docker, Kubernetes, or OpenShift, identity and access management, encryption protocols, and security monitoring solutions.
  • Expert-level proficiency in COBIT, SOC 2, ISO 27001, the NIST Cybersecurity Framework, NIST 800-53, and ISO 42001.
  • Ability to map contractual requirements to specific security controls.
  • Exceptional written and verbal communication skills.
  • Ability to work with legal counsel, negotiate complex terms, and present technical concepts to executive leaders.
  • Bachelor’s degree in Computer Science, Information Security, Risk Management, Business Administration, or a related field, or equivalent professional experience.
  • Certifications such as CISSP, CISM, CISA, CCSP, CIPP, or CRISC are preferred.
  • Hands-on experience with contract management platforms, security questionnaire automation tools such as OneTrust or MetricStream, and GRC technology solutions is preferred.

Privalumai

  • Health coverage supporting physical and mental well-being.
  • Generous paid time off.
  • Ongoing learning resources and career development opportunities.
  • Competitive pay.
  • Retirement planning.
  • Continuing education program.
  • Company-matched student loan contributions.
  • Financial wellness programs.
  • Benefits for employees’ partners and children.
  • Retail discounts.
  • Referral incentives.

Susiję darbai

Codasip

Senior Product Compliance and Assurance Manager, Semiconductor SoC

Codasip
201 – 500 Darbuotojai
Aparatinė įrangaAutomobilių pramonėKibernetinis saugumas
GBJungtinė KaralystėHibridinisVisas etatasVyresnysis specialistasVadovasPrivaloma Kalba: anglųAtitiktis
Kibernetinis saugumas

Lead product compliance and assurance for Codasip’s secure semiconductor and SoC designs, covering safety, security and certification evidence. Manage compliance engineers across the UK and German design centres.

Atidaryti