Director of Infromation Security, Risk and Compliance - US - NY - VIRTUAL

Grade Level (for internal use):

About the Role: 

The Team: 

This is a senior position within the Cyber Risk and Compliance team designed to provide backup and support for the team manager and expected to be able to function in a leading role in the manager’s absence. The team performs facilitates internal assessments and audit activities, assesses regulatory requirements and control frameworks, and crafts department and corporate policies and standards. Additionally, the group participates in pre and post sales customer security queries and contractual interactions. 

 
Responsibilities and Impact: 

• Form partnerships and work closely with a variety of corporate and divisional groups. Seek information and work to influence approaches and outcomes driven by these groups. 

• Become familiar with the Cyber Risk and Compliance team activities and Market Intelligence regarding SOC reporting, relevant regulatory requirements, control frameworks, internal and external audit processes, customer interactions including security questions and audits, and overall company and divisional cyber security processes and controls. Use this knowledge to support team activities as needed. 

• Make recommendations related to balancing requirements and deadlines made by corporate departments with human resource and technical capabilities which exist in Market Intelligence. Negotiate differences to find solutions acceptable to both corporate groups and Market Intelligence. 

• Participate in various Corporate and IT/InfoSec projects to understand the project impact on Market Intelligence position, processes, and controls. 

• Lead efforts to align control frameworks used throughout the company to enhance and maintain a standard control framework for Markit Intelligence. 

• Analyze new and existing regulations and identify impact to the Division. Drive adoption of controls where needed within product teams to meet requirements. 

• Respond to emerging requirements and requests as they arise. 

• Identify and …