Associate Director, Information Governance and Data Compliance

S&P Global•New York, NY

4d•$104,435 - $182,605•Hybrid

About The Position

S&P Global is seeking an Associate Director, Information Governance and Data Compliance to lead and enhance enterprise-wide information governance and data compliance capabilities across its global data and analytics business. This role is responsible for developing, operationalizing, and enforcing policies, standards, and controls governing the lifecycle of business information and personal data. The Director will ensure alignment with S&P Global’s Privacy Program, Information Governance Policy framework, and evolving regulatory obligations across jurisdictions. The position plays a critical leadership role in embedding privacy by design, strengthening data classification compliance, and operationalizing a risk-based data governance model that supports S&P Global’s delivery of data-driven products and services, including analytics, ratings, market intelligence, and entity-based data solutions. S&P Global’s business model—focused on delivering data, analytics, and insight to global markets—requires robust governance over data sourcing, processing, retention, and usage to ensure trust, regulatory compliance, and operational resilience. In this role, you will collaborate with senior and executive stakeholders globally, act as a senior advisor to stakeholders across Legal, Compliance, Technology, and business divisions, lead cross-functional governance forums to drive alignment and accountability for data governance activities, and be an integral part of enhancing and developing the global Data Compliance program, working alongside executive leadership to drive our team forward.

Requirements

10+ years’ experience in information governance, data governance, privacy, or regulatory compliance.
Demonstrated experience in a global, data-driven organization.
Experience using AI productivity tools and emerging technologies to improve efficiency, streamline workflows, and support smarter ways of working.
Deep understanding of: Data lifecycle management, Records management and retention, Information classification frameworks.
Strong knowledge of global data protection and privacy laws.

Responsibilities

Lead the design, implementation, and governance of enterprise Information Governance frameworks covering data lifecycle management (creation, use, retention, and disposal).
Own and maintain core policies and standards, including: Information Governance Policy, Information Classification Standard, Records Retention Schedule.
Ensure alignment with regulatory requirements, internal risk frameworks, and international standards.
Establish and oversee enterprise-wide data classification frameworks and compliance monitoring.
Partner with Information Security and technology teams to ensure appropriate controls for data access, storage, and protection.
Implement and track metrics to measure classification compliance and data handling effectiveness.
Drive development of a scalable, enterprise data governance model, including: Data inventory and cataloging, Data ownership and stewardship, Data flow visibility and control.
Collaborate with business, technology, and risk teams to ensure governance controls are embedded across products, platforms, and operations.
Embed privacy by design and default principles into business processes, systems, and product development.
Support execution of S&P Global’s Global Privacy Program and related controls governing lawful, fair, and proportionate processing of personal information.
Partner with Legal, Compliance, and Risk teams to ensure alignment on regulatory obligations across jurisdictions.
Support other Privacy projects, as assigned.
Identify, assess, and mitigate risks relating to data governance, retention, classification, and regulatory compliance.
Support internal audits, regulatory inquiries, and external assessments.
Maintain audit-ready documentation and evidence of compliance.
Act as Data Compliance support for the development, implementation, and continuous enhancement of S&P Global’s AI governance framework, ensuring the responsible, ethical, and compliant use of artificial intelligence and automated decision-making technologies across the enterprise.
Where necessary, establish and oversee policies, standards, controls, and risk assessment processes governing the lifecycle of AI systems, including model development, procurement, deployment, monitoring, and retirement.
Partner with Legal, Compliance, Information Security, Technology, Risk, and business stakeholders to ensure AI initiatives align with regulatory requirements, corporate policies, data governance standards, and responsible AI principles, while promoting transparency, accountability, and effective risk management.