Cloud & AI Security Strategy Lead

S&P Global; New York (NY); On-site; USD 200,000 - 230,000; Full time

Job summary

S&P Global is seeking a senior AI security leader to architect and govern risk-focused security across multi-cloud AI deployments, including hosted and self-hosted models. The role drives threat modeling, policy enforcement, and safety controls to enable secure-by-design AI.

Collaboration with Legal, Compliance, and Risk teams is essential. The candidate will operationalize enterprise AI risk management, align with NIST/ISO standards, and guide engineering through playbooks and secure coding

Qualifications

• 10+ years of Information Security experience with 4+ years in cloud security.
• 2+ years in AI/ML or LLMOps security implementations.
• Hands-on security engineering across multi-cloud platforms incl. identity management & encryption services.
• Proficiency with policy-as-code and secrets management tools (OPA, Conftest, Sentinel; Vault/Cloud equivalents).
• Deep knowledge of AI/LLM tech such as RAG, vector DBs (Pinecone/Weaviate/FAISS), prompt engineering, and agent orchestration.
• Experience with threat modeling and offensive security testing for AI systems.
• Strong understanding of privacy regs and compliance frameworks (GDPR, CCPA, GLBA).

Responsibilities

• Define and operationalize comprehensive AI Security Strategy across multi-cloud environments (AWS, Azure, GCP, OCI) and on-premises systems.
• Establish and maintain enterprise AI Risk Framework aligned with standards (NIST AI RMF, ISO 23894) and regulatory requirements (SOC 2, ISO 27001).
• Perform security architecture reviews for AI systems including hosted/self-hosted models and agentic AI patterns.
• Design and implement agent safety controls (sandboxing, least-privilege tooling, prompt defense).
• Lead AI Security Governance with Legal, Compliance, Privacy, and Risk teams; promote secure-by-design and privacy-by-design principles.
• Drive adoption of AI security policies with playbooks, secure coding guidelines, and threat modeling workshops.

Skills

Cloud security

AI/ML security

Zero Trust

Policy-as-code

Secrets management

RAG & vector DBs

Threat modeling

Privacy & compliance

LLMOps security

Tools

OPA

Conftest

Sentinel

HashiCorp Vault

AWS Secrets Manager

Azure Key Vault

Pinecone

Weaviate

FAISS

Job description

S&P Global is seeking a senior AI security leader to architect and govern risk-focused security across multi-cloud AI deployments, including hosted and self-hosted models. The role drives threat modeling, policy enforcement, and safety controls to enable secure-by-design AI.

Collaboration with Legal, Compliance, and Risk teams is essential. The candidate will operationalize enterprise AI risk management, align with NIST/ISO standards, and guide engineering through playbooks and secure coding