About the Role:

Grade Level (for internal use):

The Team :
S&P Ratings Security team focuses on protecting our clients and users from all aspects of modern-day security threats. The mission of our team is to safeguard systems and data by developing innovative solutions to counter the biggest security challenges.  

The Impact : 

This is a lead level role that will be part of designing, developing, and executing solutions with an eye toward protecting confidential and other non-public data. Your expertise will ensure alignment with corporate policies and modern cybersecurity design patterns, staying ahead of current and emerging cyber threats. This position is for an expert in developing and overseeing technology security solutions to help protect our systems.  

Responsibilities:

• Design and develop security architecture, balancing security risks with business and market requirements.
• Evaluate data threats, identify vulnerabilities, and prioritize security risks across systems.
• Create and enforce data security policies to ensure compliance with industry standards.
• Review and strengthen access management controls to address security gaps.
• Implement scalable data encryption techniques to protect sensitive data at rest and in transit.
• Consolidate user repositories and identity providers across the organization.
• Collaborate with Application teams and stakeholders to establish data classification policies and security controls for sensitive data.
• Perform threat modeling, secure code reviews, and design reviews for high-risk applications.
• Develop automated security testing processes using scripting and open-source tools.
• Stay current with emerging technologies and trends related to security architecture.
• Promote enterprise standards and best practices to ensure security compliance.
• Serve as a technical security advisor for new technologies and applications.
• Coach and train development teams on IAM and data security best practices.

Basic Qualifications:

• Bachelor’s degree in Computer Science or related field, or relevant work experience.
• 7+ years in Security engineering roles with a focus on data security and IAM.
• Expertise in Data Security use cases (In Transit, At Rest, In Use) and cloud security controls.
• Knowledge of identity repositories such as LDAP, Active Directory, and Entra (Azure AD).
• Experience with cloud KMS (AWS KMS, Azure Key Vault, Google KMS).
• Familiarity with privileged access management systems like CyberArk, SailPoint.
• Strong understanding of authentication and authorization protocols (OAuth, SAML, Kerberos).
• Expertise in Application Security, Web services security, and Cloud-native applications.
• Knowledge of security architecture, TCP/IP, encryption, TLS, ECC, and PKI/Certificates.
• Experience with IAM solutions (Okta, Entra ID, AD/LDAP).

Preferred Qualifications :

• Experience with automation security.  

• Programming expertise – Java, Python, Agile SDLC processes. 

• Strong understanding of Hardware Security Modules (HSM’s) and PKCS#11, JCE or  HSM-vendor API’s. 

• Experience migrating applications from On-Prem Active Directory to Entra (Azure AD). 

• Knowledge with AWS cloud architecture and virtualization technologies such as Containers, EKS, Kubernetes, and VMware. 

• Experience in defining and documenting security reference architectures and standards   

• Experience with automation tools associated with DevOps and CI/CD pipelines, and with security integration into CI/CD. 

• Database, datalake knowledge – Postgres, Oracle, Databricks, Snowflake. 

Compensation/Benefits Information (US Applicants Only):

S&P Global states that the anticipated base salary range for this position is $127,700 - $175,000. Final base salary for this role will be based on the individual’s geographic location, as well as experience level, skill set, training, licenses, and certifications. In addition to base compensation, this role is eligible for an annual incentive plan.  This role is eligible to receive additional S&P Global benefits. For more information on the benefits that we provide to our employees, please click here.

About S&P Global Ratings
At S&P Global Ratings, our analyst-driven credit ratings, research, and sustainable finance opinions provide critical insights that are essential to translating complexity into clarity so market participants can uncover o