Job Description

Position Overview

• Employment Type: Full time
• Grade Level: 13
• Team: S&P Ratings Security team
• Role Level: Director (Individual Contributor)
• Focus Areas: Application Security, Cloud Security, Security Architecture
• Brief Description: This Director-level individual contributor role is focused on application security, cloud security, and security architecture. The role will collaborate across multiple teams to identify and mitigate security risks, drive the Secure SDLC roadmap, and contribute to maturing the security engineering program.

Responsibilities and Impact

• Evaluate threats and identify vulnerabilities to prioritize data security risks.
• Develop and enforce data security policies for compliance with industry standards.
• Review access management controls for security gaps.
• Implement encryption techniques to protect sensitive data.
• Maintain Application and Cloud security strategies.
• Guide security best practices in software development, UI design, and technologies.
• Lead the creation of a security architecture, balancing business risks and customer needs.
• Perform threat modeling, secure code reviews, and design reviews for high-risk applications.
• Conduct vulnerability research and advise on new technologies.
• Automate security testing using scripting and open-source tools.
• Assist developers with vulnerability remediation.
• Coach teams on security practices such as threat modeling and code reviews.
• Stay updated on emerging security technologies and trends.
• Develop repeatable security patterns based on data and system purpose.
• Consult on incident response processes and Application Penetration tests.
• Guide teams in building secure Cloud Native applications with best practices.

Requirements

• Experience: Requires broad experience in application security, cloud security, and security architecture. (Specific details not provided in original description).

Compensation/Benefits Information (US Applicants Only)

• Anticipated Base Salary Range: $130,000 - $230,000
• Annual Incentive Plan: Eligible
• Additional S&P Global Benefits: Eligible - Further details available upon request.

Company Information

• Company: S&P Global
• Team Focus: Protecting clients and users from modern security threats.
• Mission: Safeguarding systems and data by developing innovative security solutions.