Associate Director, Information Governance and Data Compliance

About this role

About the Role:
Grade Level (for internal use):
12The Team: The Data Privacy, Protection and Governance team at S&P Global is dedicated to managing sensitive, personal, and non-personal information. We achieve this through the implementation of comprehensive policies, processes, controls, and metrics that ensure compliance with global regulations.
The Impact: S&P Global is seeking an
Director, Information Governance and Records Management to lead, mature, and scale the enterprise-wide information governance and records management program across its global data and analytics business, with supporting responsibility for data governance, privacy by design, and AI governance.
This role owns the strategy, policies, standards, and controls that govern the full lifecycle of S&P Global’s business records and information, from creation and capture through classification, retention, legal hold, and defensible disposition. The Director will ensure that records and information management practices align with S&P Global’s Information Governance Policy framework, Privacy Program, and evolving legal, regulatory, and recordkeeping obligations across jurisdictions.
The position plays a critical leadership role in operationalizing the enterprise records retention schedule, strengthening information classification compliance, and reducing over-retention risk, while supporting a risk-based data management and governance model, privacy by design, and responsible AI practices that underpin S&P Global’s delivery of data-driven products and services, including analytics, ratings, market intelligence, and entity-based data solutions.
S&P Global’s business model—focused on delivering data, analytics, and insight to global markets—requires robust governance over data sourcing, processing, retention, and usage to ensure trust, regulatory compliance, and operational resilience.
What’s in it for you: In this role, you will:

• Collaborate with senior and executive stakeholders globally.

• Act as a senior advisor to stakeholders across Legal, Compliance, Technology, and business divisions.

• Lead cross-functional governance forums to drive alignment and accountability for data governance activities.

• Be an integral part of building and maturing the global Information Governance and Records Management program, working alongside executive leadership to drive our team forward.

Responsibilities: The Associate Director, Information Governance and Records Management will be responsible for:

•
Information Governance & Records Management Leadership

• Lead the strategy, design, implementation, and continuous improvement of the enterprise Information Governance and Records Management program, covering the full information lifecycle (creation, capture, use, storage, retention, legal hold, and defensible disposition) across paper and electronic records.

• Own and maintain core policies and standards, including:

• Information Governance Policy

• Information Classification Standard

• Records Retention Schedule

• Legal Hold and Defensible Disposition procedures

• Ensure alignment with regulatory requirements, internal risk frameworks, and international standards.

• Maintain and periodically refresh the global Records Retention Schedule, conducting legal and regulatory retention research across jurisdictions and securing business sign-off on record classes and retention periods.

• Drive operational adoption of retention requirements across business divisions and enterprise systems, including records inventories, system-level retention configuration, and coordinated defensible disposition of records and data that have met their retention periods.

• Partner with Legal and eDiscovery teams to manage the legal hold process and ensure holds override routine disposition.

• Develop and deliver information governance and records management training, communications, and a network of divisional records coordinators.

•
Data Classification & Information Handling

• Establish and oversee enterprise-wide data classification frameworks and compliance monitoring.

• Partner with Information Security and technology teams to ensure appropriate controls for data access, storage, and protection.

• Implement and track metrics to measure classification compliance and data handling effectiveness.

•
Data Management & Governance

• Support the development of a scalable, enterprise data management and governance model that integrates with records and retention requirements, including:

• Data inventory and cataloging

• Data ownership and stewardship

• Data flow visibility and control

• Collaborate with business, technology, and risk teams to ensure governance controls are embedded across products, platforms, and operations.

•
Risk Management & Regulatory Readiness

• Identify, assess, and mitigate risks relating to data governance, retention, classification, and regulatory compliance.

• Support internal audits, regulatory inquiries, and external assessments.

• Maintain audit-ready documentation and evidence of compliance.

•
Artificial Intelligence (AI) Governance and Oversight

• Act as Information Governance and Data Compliance support for the development, implementation, and continuous enhancement of S&P Global’s AI governance framework, ensuring the responsible, ethical, and compliant use of artificial intelligence and automated decision-making technologies across the enterprise, including appropriate classification, retention, and disposition of AI training data, inputs, and outputs.

• Where necessary, establish and oversee policies, standards, controls, and risk assessment processes governing the lifecycle of AI systems, including model development, procurement, deployment, monitoring, and retirement.

• Partner with Legal, Compliance, Information Security, Technology, Risk, and business stakeholders to ensure AI initiatives align with regulatory requirements, corporate policies, data governance standards, and responsible AI…