Cyber Governance Risk and Compliance Analyst

S&P Global Mobility • Southfield, MI

1d

About The Position

A global team has primary responsibilities to manage risk and cyber compliance for the entire Mobility organization. Our focus is to ensure compliance with contractual and customer requirements and to ensure that corporate information security policies and standards are governed. This role supports internal and external audit activities, maintains a centralized control evidence repository, assists in the development and implementation of security policies, partners with the Government Relations team, and supports customer-facing security assurance activities.

Requirements

• Gathering evidence for audit requirements and putting together information that explains in business terms what is being evidenced.
• Apply business knowledge and someone that can figure out what the ask/problem is and then help to find answers by facilitating or reaching out to multiple teams, gathering requirements, and then proposing a final answer.
• Ability to use judgement in responding to customer due diligence requests.
• Understanding of compliance audits
• Problem Solver
• Strong communication and interpersonal skills
• Organizational skills and detail oriented is a plus.

Nice To Haves

• Business background
• IT systems, security, GRC is a plus

Responsibilities

• Support internal and external audit activities, including TISAX, SOC 2, and ISO 27001, by coordinating evidence collection, responding to auditor requests, and tracking remediation activities.
• Maintain and enhance a centralized control evidence repository to improve audit efficiency, enable reuse of artifacts, and support multiple audit and compliance efforts.
• Assist in the development and implementation of security policies, standards, and practices to protect sensitive data, ensuring alignment with established frameworks and organizational requirements.
• Partner with the Government Relations team to support responses to regulatory and state-level inquiries, ensuring accuracy and consistency in security and compliance messaging.
• Support customer-facing security assurance activities, including cyber due diligence requests, TPPA security assessments, and customer audits, ensuring timely and high-quality responses.

What This Job Offers

• Job Type: Full-time
• Career Level: Mid Level
• Education Level: No Education Listed