About the Role:

Grade Level (for internal use):

The Team:

Information Security is an enterprise-shared services team that enables people, functions, and divisions by providing secure, reliable, and seamless solutions to customers and our people. We take a community approach in making decisions in partnership with stakeholders who are consumers of our services, with the belief that technology allows people to do their best work. Our key focus areas include Risk Management, Cybersecurity Maturity, People Development, and Innovation.

The Impact:

The Chief of Staff for the Information Security team plays a pivotal role in driving the strategic alignment of security initiatives across the organization, ensuring that security measures effectively protect the enterprise while enabling business operations. By fostering collaboration among stakeholders and managing key projects, the Chief of Staff enhances the team's efficiency and responsiveness to escalating threats, evolving business needs, and emerging regulatory requirements. Additionally, this role supports the development of a security-first culture, promoting awareness and innovation that empowers both employees and customers to thrive in a secure environment.

Compensation/Benefits Information: (This section is only applicable to US candidates)

S&P Global states that the anticipated base salary range for this position is $150,000 to $235,000. Final base salary for this role will be based on the individual’s geographic location, as well as experience level, skill set, training, licenses and certifications.

In addition to base compensation, this role is eligible for an annual incentive plan. This role is not eligible for additional compensation such as an annual incentive bonus or sales commission plan.

This role is eligible to receive additional S&P Global benefits. For more information on the benefits we provide to our employees, please click here.

Responsibilities and Impact:

• Strategic Advisory & Executive Support: Serve as strategic advisor and trusted partner to the CISO, providing executive support on high-priority initiatives and enterprise security strategy

• Financial & Resource Management: Partner with finance, procurement, and leadership teams to develop and manage annual operating budgets, resource allocation, and vendor relationships

• Cross-Functional Coordination: Coordinate and facilitate alignment across divisions, business units, and key stakeholders to ensure seamless execution of security initiatives

• Executive Communications: Develop executive-level communications, presentations, and reporting materials for stakeholders including the Executive Leadership Team, Board, and Senior Leadership

• Strategic Planning Leadership: Lead strategic planning processes, including annual planning cycles, quarterly business reviews, and organizational assessments

• Data Analysis & Insights: Collect, analyze, and report on security metrics, operational data, and key performance indicators to provide actionable insights for strategic decision-making

• Security Awareness Programs: Design, implement, and lead enterprise-wide security awareness training programs to strengthen organizational security posture

• Policy & Compliance Management: Coordinate with partners to ensure consistency and completeness of security policies, procedures, and documentation, and drive compliance with regulatory requirements and internal standards

What We’re Looking For:

Basic Required Qualifications:

• Bachelor's degree in Information Security, Computer Science, or related field, or equivalent professional experience
• 3-5 years of hands-on experience in an information technology, technology audit, or Finance related field with at least 2 years in a leadership role.
• Demonstrated success working in a fast-paced, innovative, and collaborative team environment.
• Excellent analytical and problem-solving skills with ability to communicate complex security concepts to both technical and non-technical stakeholders

Additional Preferred Qualifications:

• Professional security certifications such as CISSP, CISM, CISA, or Security+ demonstrating advanced knowledge and commitment to the field and/or a willingness to pursue the same
• Basic knowledge of cloud platforms and services including AWS, Azure, or