Head of Technology Risk, Governance, and Controls
Core
Own the strategy and oversight of first-line technology risk, governance, and controls for an enterprise-shared technology organization, ensuring system integrity and regulatory compliance.
Role type
Head of Technology Risk, Governance, and Controls
Builds
Secure, scalable, resilient, and innovative products and services for S&P Global's people and customers
Domain
Financial services / Enterprise Technology Risk & Governance
Deliverable
production ML models | infrastructure
Required skills
Technology risk management, internal controls implementation, people management, stakeholder relationship acumen, complex risk communication, global environment navigation, analytical problem-solving, technology risk frameworks (NIST CSF, ISO 27001, COBIT, SOX), emerging tech risk (AI/ML, cloud, data privacy)
Preferred skills
GRC platforms (ServiceNow GRC, Archer), professional certifications (CRISC, CISM, CISSP), core AI capabilities (Microsoft Copilot, Claude, ChatGPT), Three Lines model experience, third-party/vendor/cloud dependency risk assessment, MBA or Engineering degree
Technologies
ServiceNow GRC, Archer, Microsoft Copilot, Claude, ChatGPT
Responsibilities
Lead technology risk and governance strategy, own SOX controls and annual testing, scale first-line of defense, design and operate controls implementing enterprise risk appetite, establish KPIs/KRIs for risk and compliance, integrate risk management into strategic planning, lead risk assessments and audits, drive risk awareness culture, manage third-party and cloud dependency risks, identify and remediate technology risks, design and operate control environment, embed AI risk management, strengthen operational resilience, map regulatory obligations to controls
Seniority
Senior, hands-on IC with management responsibilities