Director of Divisional Technology & Cyber Risk Management

About the Role:

Grade Level (for internal use):

13

About the Role: The Director of Divisional Technology & Cyber Risk Management will play a critical role in supporting the Head of Technology & Cyber Risk Management as the organization advances the Enterprise Technology & Risk strategy and framework. This position resides in the Second Line of Defense and is tasked with operationalizing the framework and providing divisional oversight, ensuring consistency and compliance across all areas. The Director will focus on tactical execution, detailed risk analysis and advisory, and cross-divisional alignment, to support effective and risk-based identification, prioritization, and mitigation of technology and cyber risks.

Responsibilities and Impact:

Impact: This role is essential for ensuring the operational success of the organization's technology and cyber risk management practices. By focusing on tactical execution and detailed oversight, the Director supports the strategic framework, driving effective and fit for purpose technology and cyber risk management.

Responsibilities:

Operational Execution:

• Implement and operationalize the Enterprise Technology & Cyber Risk Management framework across assigned divisions in close partnership with First Line stakeholders.
• Ensure consistent application of risk management practices and policies, enhancing collaboration with First Line Control functions and other assurance functions such as Internal Audit.

Risk Advisory and Oversight:

• Provide expert risk advisory services to mitigate technology and cyber-related risks within divisions.
• Facilitate discussions and assessments with impacted stakeholders to interpret risks and their implications for the organization.
• Deliver detailed oversight of technology and cyber risks at the divisional level, ensuring comprehensive risk identification and management.

Risk Reporting:

• Develop and present comprehensive risk reporting to inform and support informed decision making by key stakeholders and leadership.
• Support the aggregation of divisional level risks to enterprise views.
• Collaborate with cross-functional teams to ensure reports are comprehensive and reflect diverse perspectives and areas of concern.

Strategic Support

• Utilize risk insights to inform strategic direction and enhance the overall technology and cyber risk management framework.
• Assist with continuously enhancing the risk framework and methodologies to keep pace with the evolving risk environment.

Compliance and Risk Mitigation:

• Support divisions in achieving regulatory compliance and adhering to industry standards.
• Advise on proactive risk mitigation strategies to address specific technology and cyber-related challenges.

Cross-Divisional Coordination:

• Serve as the key liaison between divisions, facilitating communication and coordination to ensure alignment with the risk management framework.
• Strengthen partnerships with First Line Control functions to enhance risk management practices.

Data-Driven Decision Making:

• Conduct in-depth analyses of risk data to identify trends and potential areas of concern.
• Apply risk measurement methodologies to obtain accurate views of risk and develop “what if” scenarios to identify cost effective mitigation options.
• Provide actionable insights to leadership and key stakeholders, driving informed and risk-based decision-making.

Continuous Process Improvement:

• Identify and implement opportunities to enhance risk management processes.
• Introduce new tools and techniques to improve efficiency and effectiveness, ensuring continuous improvement in risk management practices.
• Support maintenance of the technology and cyber risk framework, and associated policies and methodologies.

Team Structure:

• Reports directly to the Head of Technology & Cyber Risk Management within the Second Line
• Works closely with divisional risk directors, first line control functions, and other stakeholder across the organization to maintain risk management practices.

Compensation/Benefits Information: (This section is only applicable to US candidates)

S&P Global states that the anticipated base salary range for this position is $143,244 to $251,511. Final base salary for this role will be based on the individual’s geographic location, as well as experience level, skill set, training, licenses and certifications.

In addition to base compensation, this role is eligible for an annual incentive plan. This role is not eligible for additional compensation such as an annual incentive bonus or sales commission plan.

This role is eligible to receive additional S&P Global benefits. For more information on the benefits we provide to our employees, please click here.

What We’re Looking For:

Basic Qualifications:

• 10+ years in the Financial Services, Ratings or Data / Research Industry

• Bachelor's or advanced degree in a relevant field (e.g., Information Security, Risk Management, Business Administration).

• Proven experience in technology risk management with in-depth knowledge of technology, information security, operational, third party, and other relevant risks.

• Strong knowledge of relevant regulations and industry standards including risk frameworks and quantification methodologies.

• Excellent leadership and team management skills.

• Effective communication and interpersonal skills.

Additional Preferred Qualifications:

• Excellent Communication skills, including experience with Executive and Board of Directors level presentations.

• Industry certifications (e.g., CISSP, CISM, CRISC) are a plus.

• Unwavering ethics and integrity, and an ability to stand firm on issues with independence.

• A team player with strong interpersonal, people management and leadership skills, demonstrating confidence, practicality, and resilience.

• Strong analytical skills and ability to articulate guidance clearly and concisely.

• Demonstrated ability to design, drive and pace organizational change and bring others along.

• Ability to influence and build strong and trusting relationships with senior stakeholders and to collaborate internally and across company organizations.

• Lead and manage a high-performing team of technology risk and data governance professionals.

• Provide mentorship, training, and professional development opportunities for team members.

• Foster a culture of collaboration, innovation, and continuous improvement.

Right to Work Requirements:

This role is limited to persons with indefinite right to work in the United States.

Return to Work:

Have you taken time out for caring responsibilities and are now looking to return to work? As part of our Return to Work initiative, Restart, we are encouraging enthusiastic and talented returners to apply, and will actively support your return to the workplace.

What’s In It For You?

Our Purpose:

Progress is not a self-starter. It requires a catalyst to be set in motion. Information, imagination, people, technology–the right combination can unlock possibility and change the world.

Our world is in transition and getting more complex by the day. We push past expected observations and seek out new levels of understanding so that we can help companies, governments and individuals make an impact on tomorrow. At S&P Global we transform data into Essential Intelligence®, pinpointing risks and opening possibilities. We Accelerate Progress.

Our People:

We're more than 35,000 strong worldwide—so we're able to understand nuances while having a broad perspective. Our team is driven by curiosity and a shared belief that Essential Intelligence can help build a more prosperous future for us all.

From finding new ways to measure sustainability to analyzing energy transition across the supply chain to building workflow solutions that make it easy to tap into insight and apply it. We are changing the way people see things and empowering them to make an impact on the world we live in. We’re committed to a more equitable future and to helping our customers find new, sustainable ways of doing business. We’re constantly seeking new solutions that have progress in mind. Join us and help create the critical insights that truly make a difference.

Our Values:
 

Integrity, Discovery, Partnership

At S&P Global, we focus on Powering Global Markets. Throughout our history, the world's leading organizations have relied on us for the Essential Intelligence they need to make confident decisions about the road ahead. We start with a foundation of integrity in all we do, bring a spirit of discovery to our work, and collaborate in close partnership with each other and our customers to achieve shared goals.

Benefits:

We take care of you, so you can take care of business. We care about our people. That’s why we provide everything you—and your career—need to thrive at S&P Global.

Our benefits include: 

• Health & Wellness: Health care coverage designed for the mind and body.

• Flexible Downtime: Generous time off helps keep you energized for your time on.

• Continuous Learning: Access a wealth of resources to grow your career and learn valuable new skills.

• Invest in Your Future: Secure your financial future through competitive pay, retirement planning, a continuing education program with a company-matched student loan contribution, and financial wellness programs.

• Family Friendly Perks: It’s not just about you. S&P Global has perks for your partners and little ones, too, with some best-in class benefits for families.

• Beyond the Basics: From retail discounts to referral incentive awards—small perks can make a big difference.

For more information on benefits by country visit: https://spgbenefits.com/benefit-summaries

Diversity, Equity, and Inclusion at S&P Global:
At S&P Global, we believe diversity fuels creative insights, equity unlocks opportunity, and inclusion drives growth and innovation – Powering Global Markets. Our commitment centers on our global workforce, ensuring that our people are empowered to bring their whole selves to work. It doesn’t stop there, we strive to better reflect and serve the communities in which we live and work, and advocate for greater opportunity for all.

-----------------------------------------------------------

Equal Opportunity Employer

S&P Global is an equal opportunity employer and all qualified candidates will receive consideration for employment without regard to race/ethnicity, color, religion, sex, sexual orientation, gender identity, national origin, age, disability, marital status, military veteran status, unemployment status, or any other status protected by law.  Only electronic job submissions will be considered for employment.  

 

If you need an accommodation during the application process due to a disability, please send an email to: EEO.Compliance@spglobal.com and your request will be forwarded to the appropriate person.  
 
US Candidates Only:  The EEO is the Law Poster http://www.dol.gov/ofccp/regs/compliance/posters/pdf/eeopost.pdf describes discrimination protections under federal law.  Pay Transparency Nondiscrimination Provision - https://www.dol.gov/sites/dolgov/files/ofccp/pdf/pay-transp_%20English_formattedESQA508c.pdf

-----------------------------------------------------------

103 - Middle Management (EEO Job Group) (inactive), 10 - Officials or Managers (EEO-2 Job Categories-United States of America), RSKMGT103.2 - Middle Management Tier II (EEO Job Group)