LogoFresh Jobs Ahead
S&P Global
S&P Global
Malakali ishchi vizasi homiysiKonsaltingLogistikaMarketing

S&P Global butun dunyo bo‘ylab bizneslar, investorlar, hukumatlar va boshqa tashkilotlarga bozor ma’lumotlari, kredit reytinglari, tahliliy yechimlar va benchmark indekslarini taqdim etadi. Uning xizmatlari moliya, xomashyo bozorlari, mobillik, barqarorlik, energetikaga o‘tish va sun’iy intellekt sohalarini qamrab oladi hamda mijozlarga bozor o‘zgarishlarini tushunish, kredit xavfini baholash va asoslangan qarorlar qabul qilishda yordam beradi.

Kompaniya bu ma’lumot va tahlillarni S&P Global Market Intelligence, S&P Global Ratings va S&P Dow Jones Indices kabi biznes yo‘nalishlari orqali taqdim etadi. Uning ma’lumotlarga asoslangan mahsulotlari murakkab global bozorlarda tadqiqot, xavf tahlili, benchmarklash va strategik rejalashtirishni qo‘llab-quvvatlaydi.

LinkedIn
Kompaniyadagi ish o‘rinlari

Senior Director of Risk and Compliance

Lead client security negotiations and regulatory compliance risk for S&P Global Market Intelligence. Advise Sales, Legal, and technical teams on enterprise security commitments.

GBBuyuk BritaniyaGibridTo‘liq stavkaSeniorTalab Qilinadigan Til: inglizchaMuvofiqlik
AWSAzureBulutDockerGoogle Cloud PlatformKiberxavfsizlikKubernetesOpenShift

Tavsif

  • Negotiate security and compliance terms in client contracts.
  • Advise Sales and Legal teams as the primary technical expert.
  • Build and maintain strategic customer relationships.
  • Assess proposed security commitments through risk-based decision making.
  • Evaluate compensating controls and possible roadmap investments.
  • Explain risk rationale clearly to stakeholders at every level.
  • Partner with Legal as the technical subject matter expert.
  • Ensure the organization can meet negotiated security commitments.
  • Suggest suitable contractual language.
  • Interpret complex regulatory requirements.
  • Assess compliance scope and organizational capabilities.
  • Create practical guidance for development and technical teams.
  • Find and address systemic gaps between client security demands and organizational capabilities.
  • Build cross-functional partnerships and advocate for strategic roadmaps.
  • Maintain a knowledge repository of approved security positions, standard contract language, and control framework mappings.

Talablar

  • 15+ years of progressive experience in security governance, risk management and compliance (GRC), security assurance, artificial intelligence, or third-party risk management.
  • Expertise in interpreting regulations and negotiating security terms in contracts.
  • Working knowledge of financial services and enterprise regulatory environments, including GDPR, DORA, NIS2, the EU AI Act, and related compliance regimes.
  • A record of making independent, defensible risk decisions in high-pressure deal environments with measurable business impact.
  • Experience building and implementing scalable processes, playbooks, and frameworks for enterprise security assurance functions.
  • Broad technical knowledge of infrastructure and application controls, modern cloud security controls across AWS, Azure, or GCP, Docker, Kubernetes, or OpenShift, identity and access management, encryption protocols, and security monitoring solutions.
  • Expert-level proficiency in COBIT, SOC 2, ISO 27001, the NIST Cybersecurity Framework, NIST 800-53, and ISO 42001.
  • Ability to map contractual requirements to specific security controls.
  • Exceptional written and verbal communication skills.
  • Ability to work with legal counsel, negotiate complex terms, and present technical concepts to executive leaders.
  • Bachelor’s degree in Computer Science, Information Security, Risk Management, Business Administration, or a related field, or equivalent professional experience.
  • Certifications such as CISSP, CISM, CISA, CCSP, CIPP, or CRISC are preferred.
  • Hands-on experience with contract management platforms, security questionnaire automation tools such as OneTrust or MetricStream, and GRC technology solutions is preferred.

Imtiyozlar

  • Health coverage supporting physical and mental well-being.
  • Generous paid time off.
  • Ongoing learning resources and career development opportunities.
  • Competitive pay.
  • Retirement planning.
  • Continuing education program.
  • Company-matched student loan contributions.
  • Financial wellness programs.
  • Benefits for employees’ partners and children.
  • Retail discounts.
  • Referral incentives.

O‘xshash ish o‘rinlari