Associate Director, Cloud Security & Architecture

S&P Global Inc.; New York (NY); Hybrid; USD 202,000 - 206,000; Full time

Benefits offered by this job

Health & Wellness

Flexible Downtime

Continuous Learning

Invest in Your Future

Family Friendly Perks

Beyond the Basics

Job summary

Standard & Poor's Financial Services LLC seeks an Associate Director to lead security architecture for the S&P Global Ratings Cloud and applications infrastructure. You will design and implement secure-by-default environments across cloud platforms and drive CSPM and workload protection initiatives.

You will collaborate with engineering teams to embed secure SDLC practices, develop infrastructure-as-code security controls, and harden cloud-native containers throughout their lifecycle, enabling

Qualifications

• Bachelor's degree in Computer Science, Computer Engineering, or related IT field.
• Five years of experience in security engineering or related occupation with cloud design and assessment.
• Experience with Azure, AWS or GCP cloud ecosystems and secure SDLC practices.

Responsibilities

• Lead the security architecture for the S&P Global Ratings Cloud and applications infrastructure.
• Design, implement, and enforce secure-by-default cloud environments across CSPs.
• Develop and deploy CSPM and cloud workload protection capabilities.
• Collaborate with engineering teams to harden containers and adopt secure infrastructure practices.

Skills

Security architecture

Cloud security

Infrastructure as code

Automation

CSPM

Education

Bachelor's degree in Computer Science/Engineering or related IT field

Tools

Azure

AWS

GCP

Job description

Standard & Poor's Financial Services LLC seeks an Associate Director to lead security architecture for the S&P Global Ratings Cloud and applications infrastructure. You will design and implement secure-by-default environments across cloud platforms and drive CSPM and workload protection initiatives.

You will collaborate with engineering teams to embed secure SDLC practices, develop infrastructure-as-code security controls, and harden cloud-native containers throughout their lifecycle, enabling