Technology Control Officer

**About the Role**:
**Grade Level (for internal use)**: 10
S&P Global Corporate
Technology Control Officer
**The Team**: Digital Solutions (DS) is an enterprise-shared technology service enabling people, functions, and divisions. We drive S&P Global to Power the Markets of the Future by working as trusted partners delivering secure, scalable, resilient, and innovative services and solutions that enable seamless experiences for our people and customers.

**Responsibilities**:
Exception Management
Oversee the filing, tracking, and closure of exceptions within the organization’s risk framework.
Ensure timely resolution of exceptions while maintaining compliance with internal policies and external regulations.
Audit Coordination
Serve as the primary point of contact for all internal and external audits related to technology controls.
Coordinate audit activities, including preparation of documentation, facilitating meetings, and addressing audit findings.
Ensure successful completion of audits by validating corrective actions and issue remediation.
Issue Management
Manage the Issue Management Process (e.g., MAPS), including filing, tracking progress, and ensuring timely closure of issues.
Conduct root cause analyses for identified issues and implement corrective actions to prevent recurrence.
Develop structured resolution plans for high-priority issues and monitor their execution.
Vulnerability Management
Prioritize and track all identified vulnerabilities across the organization’s IT systems.
Collaborate with IT teams to ensure timely remediation of vulnerabilities based on severity and risk impact.
Self-Assessments
Execute regular self-assessments to evaluate the effectiveness of existing controls.
Identify gaps or weaknesses in controls and recommend improvements to mitigate risks.
Disaster Recovery (DR) & Business Continuity (BC) Testing
Plan, execute, and document DR/BC testing exercises to ensure organizational resilience during disruptions.
Identify gaps during testing and implement strategies to enhance recovery capabilities.
Control Management & SOX Testing
Oversee the lifecycle of controls, including designing new controls or modifying/retiring existing ones.
Conduct SOX (Sarbanes-Oxley) testing to ensure compliance with financial reporting requirements.
Collaborate with stakeholders to maintain adherence to IT General Controls (ITGCs) and other regulatory standards.
**What We’re Looking For**:Basic Required Qualifications**:
Bachelor's Degree in a relevant field such as Engineering, Business, or Information Technology.
6+ years of experience in technology risk management and internal controls implementation, including both building and operating a function.
Proven ability to convey complex risk topics to varied audiences, including executive leadership and technical teams.
Successful track record in a global environment, with strong relationship-building and communication skills.
Exceptional analytical skills and problem-solving abilities, with experience in high-pressure environments.
Certifications (preferred)
CISA (Certified Information Systems Auditor)
CISSP (Certified Information Systems Security Professional)
CRISC (Certified in Risk and Information Systems Control)
CISM (Certified Information Security Manager)
**Location**: CDMX - Santa Fe (2-3 days onsite a week)
What’s In It For You?
**Our Purpose**:
Progress is not a self-starter. It requires a catalyst to be set in motion. Information, imagination, people, technology-the right combination can unlock possibility and change the world.
Our world is in transition and getting more complex by the day. We push past expected observations and seek out new levels of understanding so that we can help companies, governments and individuals make an impact on tomorrow. At S&P Global we transform data into Essential Intelligence®, pinpointing risks and opening possibilities. We Accelerate Progress.
**Our People**:
We're more than 35,000 strong worldwide—so we're able to understand nuances while having a broad perspective. Our team is driven by curiosity and a shared belief that Essential Intelligence can help build a more prosperous future for us all.
**Our Values**:
Integrity, Discovery, Partnership
At S&P Global, we focus on Powering Global Markets. Throughout our history, the world's leading organizations have relied on us for the Essential Intelligence they need to make confident decisions about the road ahead. We start with a foundation of integrity in all we do, bring a spirit of discovery to our work, and collaborate in close partnership with each other and our customers to achieve shared goals.

**Benefits**:
We take care of you, so you can take care of business. We care about our people. That’s why we provide everything you—and your career—need to thrive at S&P Global.
**Our benefits include**:
**Health & Wellness**: Health care coverage designed for the mind and body.
**Flexible Downtime**: Generous time off helps keep you energized for your tim