About the Role:

Grade Level (for internal use):

S&P Global delivers essential intelligence that powers decision making. We provide the world’s leading organizations with the right data, connected technologies and expertise they need to move ahead. As part of our team, you’ll help solve complex challenges that equip businesses, governments, and individuals with the knowledge to adapt to a changing economic landscape.

The Role:  Snr. Director, Technology Risk and Cyber Security

Location: New York, New Jersey, Englewood CO

S&P Global is seeking a talented executive to assume strategic leadership to oversee and manage technology and cybersecurity related risks and ensuring robust data governance practices for the enterprise.  The ideal candidate will have a strong background in technology risk management, data governance, and a proven track record of implementing effective strategies to safeguard technology assets. A successful leader in this role is responsible to:

• Define the Technology risk management framework and strategies inclusive of IT, Network and Application risks. Provide direction to proactively manage Technology and other related risks.

• Review Technology risk management policies, limits, and methodologies. Ensure they are up to market standards and compliant to regulatory requirements.

• Support Privacy Regulations and ensure proper Data handling across the enterprise.  Oversee technology, tooling, and processes for proper Data Governance in partnership with the Technology and Legal organization.

• Remain educated on developments in Risk that have potential impacts to the business.

• Partner with Technology Executives (CISO, CTOs, CIO, BISOs) to ensure adherence to standards and policies related to Technology Risk, Cybersecurity, and Data Governance.

The Team: Reporting to the SVP, Chief Risk & Compliance Officer this role will be responsible for working in close alignment and partnership with Technology, Legal, Compliance and other divisional & functional leaders across the organization.

The Impact: A Key leader in development and execution of Technology Risk & Data Governance that provides strategic leadership to foster a culture of security and compliance while contributing significantly to the overall resilience, reputation, and success of the organization.

What’s in it for you: You have a complementary blend of accountabilities to discuss with senior executives across the organization with an interesting blend of stakeholders.  Ensuring the consistent engagement of a large global team is no small feat.

Responsibilities:

• Identify, assess, and prioritize technology risks affecting the organization and provide key technology risk insights to Chief Risk & Compliance Officer, CISO, CIO, CTOs and General Counsels.

• Oversee, drive operationalization of the Technology Risk Management Framework

• Report and advise on technology risk related matters to internal and external stakeholders.

• Oversee, drive operationalization of the Data Governance Framework. Establish and enforce data governance policies and procedures.

• Analyze the design of controls around the underlying system architecture in the context of information technology controls such as security, availability and performance and their impact on business-aligned technology groups.

•  Analyze the business and technology processes to evaluate the effectiveness of the relevant technology controls.

• Promote development of educational guidance & resources for use by Technology Risk & Controls and Technology personnel

• Ensure quality standards are achieved in development and maintenance of program documentation.

• Develop and implement risk mitigation strategies and controls.

• Conduct regular risk assessments and ensure compliance with industry standards.

• Collaborate with legal and compliance teams to address regulatory requirements.

Basic Qualifications:

• 12 years or above experience in the Financial Services, Ratings or Data / Research Industry

• Bachelor's or advanced degree in a relevant field (e.g., Information Security, Risk Management, Business Administration).

• Technology Risk professional with in-depth knowledge of IT risk, Cybersecurity, Network risk, operational risk, 3rd party