Associate Director, Information Governance and Records Management

S&P Global•Greater London, UNAVAILABLE

About The Position

The Associate Director, Information Governance and Records Management will lead, mature, and scale S&P Global’s enterprise-wide Information Governance and Records Management program across its global data and analytics business. The role owns the strategy, policies, standards, and controls for the lifecycle of business records and information, from creation and capture through classification, retention, legal hold, and defensible disposition. It ensures practices align with the company’s Information Governance Policy framework, Privacy Program, and applicable legal, regulatory, and recordkeeping obligations across jurisdictions. The role operationalizes the enterprise records retention schedule, strengthens information classification compliance, reduces over-retention risk, and supports a risk-based data management and governance model, privacy by design, and responsible AI practices. It works with senior and executive stakeholders and advises Legal, Compliance, Technology, and business divisions, while leading cross-functional governance forums and helping mature the global program. The position also supports S&P Global’s AI governance framework, including appropriate classification, retention, and disposition of AI training data, inputs, and outputs. Where necessary, it establishes and oversees policies, standards, controls, and risk assessment processes across the AI lifecycle, partnering with relevant stakeholders to promote responsible, ethical, transparent, accountable, and compliant use of AI.

Requirements

10+ years of experience in information governance and records management, with complementary experience in data governance, privacy, or regulatory compliance.
Demonstrated experience building or leading an enterprise records management program in a global, data-driven organization.
Experience using AI productivity tools and emerging technologies to improve efficiency, streamline workflows, and support smarter ways of working.
Deep understanding of data lifecycle management, records management and retention, information classification frameworks, and legal hold and defensible disposition practices.
Strong knowledge of global data protection and privacy laws.
Indefinite right to work in the United States.

Nice To Haves

Professional certification such as IGP, CRM, or CIPP/CIPM.
Knowledge of records management standards and frameworks such as ISO 15489 and ARMA Generally Accepted Recordkeeping Principles.

Responsibilities

Lead the strategy, design, implementation, and continuous improvement of the enterprise Information Governance and Records Management program across paper and electronic records.
Own and maintain the Information Governance Policy, Information Classification Standard, Records Retention Schedule, and Legal Hold and Defensible Disposition procedures.
Ensure alignment with regulatory requirements, internal risk frameworks, and international standards.
Refresh the global Records Retention Schedule through legal and regulatory research across jurisdictions and obtain business sign-off on record classes and retention periods.
Drive adoption of retention requirements across business divisions and enterprise systems, including records inventories, system-level retention configuration, and defensible disposition of records and data that have reached the end of their retention periods.
Partner with Legal and eDiscovery teams to manage legal holds and ensure they override routine disposition.
Develop and deliver information governance and records management training and communications, and build a network of divisional records coordinators.
Establish and oversee enterprise-wide data classification frameworks and compliance monitoring.
Partner with Information Security and technology teams to ensure appropriate data access, storage, and protection controls.
Implement and track metrics for classification compliance and data handling effectiveness.
Support a scalable enterprise data management and governance model integrating data inventories and cataloging, data ownership and stewardship, data flow visibility and control, and records and retention requirements.
Collaborate with business, technology, and risk teams to embed governance controls across products, platforms, and operations.
Identify, assess, and mitigate risks related to data governance, retention, classification, and regulatory compliance.
Support internal audits, regulatory inquiries, and external assessments, and maintain audit-ready compliance documentation and evidence.
Support the development, implementation, and continuous enhancement of the enterprise AI governance framework, including governance of AI training data, inputs, and outputs.
Where necessary, establish and oversee policies, standards, controls, and risk assessment processes for the lifecycle of AI systems, from development and procurement through deployment, monitoring, and retirement.
Partner with Legal, Compliance, Information Security, Technology, Risk, and business stakeholders to align AI initiatives with regulatory requirements, corporate policies, data governance standards, and responsible AI principles.
Collaborate with senior and executive stakeholders globally, advise stakeholders across Legal, Compliance, Technology, and business divisions, and lead cross-functional governance forums.