Senior Director, Risk and Compliance
S&P Global
Posted: 10/19/2026AWSAzureCloudCyber SecurityDockerGoogle Cloud PlatformKubernetesOpenShift
Senior Regulatory Advisor – Non-Food
Ashbury College
Posted: 10/19/2026
Compliance & Funding Manager – Apprenticeships
KnowledgeBrief
Posted: 10/19/2026
Head of Governance, Risk & Compliance
DJH
Posted: 10/19/2026
Regulatory Submissions Manager II
Fortrea
Posted: 10/16/2026
Product Compliance & Assurance Manager – Semiconductor, SoC
Codasip
Posted: 10/15/2026Cyber Security
GRC Officer, Part Time
TwinStream
Posted: 10/15/2026GRC Officer
TwinStream
Posted: 10/15/2026
Senior Compliance Officer – 12 month FTC
Starling Bank
Posted: 10/15/2026Risk & Compliance Associate
Starling Bank
Posted: 10/15/2026
University Intern – Regulatory Affairs
Boehringer Ingelheim
Posted: 10/14/2026
Compliance Team Manager
Benchmark Capital
Posted: 10/14/2026
Transport Compliance First Line Manager
GXO Logistics, Inc.
Posted: 10/14/2026
Compliance Advisory Director
Capital One
Posted: 10/14/2026Senior Data Protection Manager
Capital One
Posted: 10/14/2026
Senior Manager, Compliance & Conduct Risk Oversight
Santander
Posted: 10/14/2026
Compliance Lead
DrDoctor
Posted: 10/14/2026Compliance & Training Supervisor
Benchmark Capital
Posted: 10/14/2026Senior Manager, Compliance & Conduct Risk Oversight
Santander
Posted: 10/14/2026
Licensing Compliance Coordinator
Goliath
Posted: 10/14/2026Senior Director, Risk and Compliance
S&P GlobalCore Competencies
Role fitCore Competencies
Use this summary to align your resume positioning with the role.
Demonstrates extensive expertise in security governance, risk management, and compliance, with a strong focus on regulatory interpretation and security contract negotiation. Proven ability to develop scalable processes and frameworks while effectively communicating complex technical concepts to diverse stakeholders.
Highest-signal resume keywords
Security Governance, Risk Management, And Compliance (GRC)Regulatory Interpretation And Security Contract NegotiationExpert-Level Proficiency In COBIT, SOC 2, ISO 27001, NIST Cybersecurity FrameworkComprehensive Technical Knowledge Of Cloud Security ControlsIndustry Certifications Such As CISSP, CISM, CISA
Tech Stack
Tools & technologiesAbout the role
Key responsibilities & impact- Lead contract negotiations for security and compliance terms in client agreements
- Serve as the primary technical advisor to Sales and Legal teams
- Maintain strategic customer relationships
- Evaluate proposed security commitments using risk-based decision making
- Analyze compensating controls and potential roadmap investments
- Communicate risk rationale clearly to stakeholders at all levels
- Partner with Legal as the technical subject matter expert
- Ensure organizational capability to deliver on negotiated security commitments
- Provide potential contractual language
- Analyze and interpret complex regulatory requirements
- Assess scope and organizational compliance capabilities
- Develop comprehensive guidance for development and technical teams
- Identify and address systemic gaps between client security demands and organizational capabilities
- Build cross-functional partnerships and advocate for strategic roadmaps
- Establish and maintain a knowledge repository of pre-approved security positions, standardized language, and control framework mappings
Requirements
What you’ll need- 15+ years of total progressive experience in security governance, risk management, and compliance (GRC), security assurance, artificial intelligence or third-party risk management
- Expertise in regulatory interpretation and security contract negotiation
- Working knowledge of financial services and enterprise regulatory environments, including GDPR, DORA, NIS2, EU AI Act and related compliance regimes
- Proven track record of making independent, defensible risk decisions in high-pressure deal environments with measurable business impact
- Experience developing and implementing scalable processes, playbooks, and frameworks for security assurance functions in enterprise environments
- Comprehensive technical knowledge of infrastructure and application controls, modern cloud security controls, AWS, Azure, or GCP, Docker, Kubernetes, or OpenShift, identity and access management, encryption protocols, and security monitoring solutions
- Expert-level proficiency in COBIT, SOC 2, ISO 27001, NIST Cybersecurity Framework, NIST 800-53, and ISO 42001
- Ability to map contractual requirements to specific security controls
- Exceptional written and verbal communication skills
- Ability to engage with legal counsel, negotiate complex terms, and present technical concepts to executive leadership
- Bachelor's degree in Computer Science, Information Security, Risk Management, Business Administration, or related field, or equivalent professional experience
- Industry certifications such as CISSP, CISM, CISA, CCSP, CIPP, or CRISC preferred
- Hands-on experience with contract management platforms, security questionnaire automation tools such as OneTrust or MetricStream, and GRC technology solutions preferred
Benefits
Comp & perks- Health care coverage designed for the mind and body
- Generous time off
- Continuous learning resources and career development opportunities
- Competitive pay
- Retirement planning
- Continuing education program
- Company-matched student loan contribution
- Financial wellness programs
- Family benefits for partners and children
- Retail discounts
- Referral incentive awards
ATS Keywords
✓ Tailor your resumeApplicant Tracking System Keywords
Tip: use these terms in your resume and cover letter to boost ATS matches.
Hard Skills
Security GovernanceRisk ManagementComplianceSecurity AssuranceContract NegotiationRegulatory InterpretationInfrastructure And Application ControlsCloud Security ControlsIdentity And Access ManagementEncryption Protocols
Soft Skills
Exceptional Written CommunicationExceptional Verbal CommunicationStakeholder EngagementNegotiation SkillsCross-Functional Collaboration
Tools & Technologies
Contract Management PlatformsSecurity Questionnaire Automation ToolsOneTrustMetricStreamGRC Technology Solutions
Certifications & Qualifications
CISSPCISMCISACCSPCIPPCRISC
Industry Keywords
GDPRDORANIS2EU AI ActFinancial ServicesEnterprise Regulatory EnvironmentsSecurity Monitoring SolutionsRisk-Based Decision MakingTechnical Subject Matter ExpertKnowledge Repository