FREE ACCESS
5,000–10,000 jobs/day
See all jobs on Scoutfield
Search thousands of fresh jobs every day.
Discover
- Fresh listings
- Fast filters
- No subscription required
Create a free account and start exploring right away.
Director, Cyber Governance and Compliance
S&P Global. Lead contract negotiations for security and compliance terms in client agreements .
Core Competencies
Role fitCore Competencies
Use this summary to align your resume positioning with the role.
Demonstrates extensive expertise in security governance, risk management, and compliance, with a strong focus on regulatory interpretation and security contract negotiation. Proven ability to develop scalable processes and frameworks while effectively communicating complex technical concepts to diverse stakeholders.
Highest-signal resume keywords
Security Governance, Risk Management, And Compliance (GRC)Regulatory Interpretation And Security Contract NegotiationCloud Security Controls (AWS, Azure, GCP)Industry Certifications (CISSP, CISM, CISA, CCSP, CIPP, CRISC)Technical Communication And Stakeholder Engagement
ATS Keywords
Tailor your resumeApplicant Tracking System Keywords
Tip: use these terms in your resume and cover letter to boost ATS matches.
Hard Skills
Risk-Based Decision MakingSecurity AssuranceInfrastructure And Application ControlsIdentity And Access ManagementEncryption ProtocolsSecurity Monitoring SolutionsContractual Requirements MappingScalable Process DevelopmentCompliance Frameworks (COBIT, SOC 2, ISO 27001, NIST)Contract Negotiation
Soft Skills
Exceptional Written CommunicationExceptional Verbal CommunicationStakeholder AdvocacyNegotiation SkillsCross-Functional Collaboration
Tools & Technologies
Contract Management PlatformsSecurity Questionnaire Automation Tools (OneTrust, MetricStream)GRC Technology Solutions
Certifications & Qualifications
CISSPCISMCISACCSPCIPPCRISC
Industry Keywords
Financial Services Regulatory EnvironmentsGDPRDORANIS2EU AI ActSecurity CommitmentsCompliance RegimesTechnical Subject Matter ExpertKnowledge RepositoryControl Framework Mappings
Tech Stack
Tools & technologiesAWSAzureCloudCyber SecurityDockerGoogle Cloud PlatformKubernetesOpenShift
About the role
Key responsibilities & impact- Lead contract negotiations for security and compliance terms in client agreements
- Serve as the primary technical advisor to Sales and Legal teams
- Maintain strategic customer relationships
- Apply risk-based decision making to evaluate proposed security commitments
- Analyze compensating controls and potential roadmap investments
- Communicate risk decision rationale clearly to stakeholders at all levels
- Partner with Legal as the technical subject matter expert
- Ensure organizational capability to deliver on negotiated security commitments
- Provide potential contractual language
- Analyze and interpret complex regulatory requirements
- Assess scope and organizational compliance capabilities
- Develop comprehensive guidance for development and technical teams to ensure adherence
- Identify and address systemic gaps between client security demands and organizational capabilities
- Partner cross-functionally and advocate for strategic roadmap investments
- Establish and maintain a knowledge repository of pre-approved security positions, standardized language, and control framework mappings
Requirements
What you’ll need- 12+ years of total progressive experience in security governance, risk management, and compliance (GRC), security assurance, artificial intelligence or third-party risk management
- Demonstrated expertise in regulatory interpretation and security contract negotiation
- Working knowledge of financial services and enterprise regulatory environments, including GDPR, DORA, NIS2, EU AI Act and related compliance regimes
- Proven track record of making independent, defensible risk decisions in high-pressure deal environments with measurable business impact
- Proven experience developing and implementing scalable processes, playbooks, and frameworks for security assurance functions in enterprise environments
- Comprehensive technical knowledge of infrastructure and application controls, modern cloud security controls, AWS, Azure, or GCP, Docker, Kubernetes, or OpenShift, identity and access management, encryption protocols, and security monitoring solutions
- Expert-level proficiency in COBIT, SOC 2, ISO 27001, NIST Cybersecurity Framework, NIST 800-53, and ISO 42001
- Proven ability to map contractual requirements to specific security controls
- Exceptional written and verbal communication skills
- Demonstrated ability to engage with legal counsel, negotiate complex terms, and present technical concepts to executive leadership
- Bachelor's degree in Computer Science, Information Security, Risk Management, Business Administration, or related field, or equivalent professional experience
- Industry certifications such as CISSP, CISM, CISA, CCSP, CIPP, or CRISC preferred
- Hands-on experience with contract management platforms, security questionnaire automation tools such as OneTrust or MetricStream, and GRC technology solutions preferred
Benefits
Comp & perks- Health care coverage designed for the mind and body
- Generous time off
- Access to career development and continuous learning resources
- Competitive pay
- Retirement planning
- Continuing education program with company-matched student loan contribution
- Financial wellness programs
- Family benefits for partners and children
- Retail discounts
- Referral incentive awards