Associate Director

S&P Global•New York, NY

1d•$202,158 - $206,350•Remote

About The Position

Standard & Poor's Financial Services LLC seeks an Associate Director to lead security architecture for S&P Global Ratings cloud and applications infrastructure. The role recommends cloud security requirements, engineering, design, and implementation while minimizing disruption and business impact. It creates, deploys, analyzes, and refactors infrastructure securely through infrastructure-as-code tools; builds automation for continuous cloud asset discovery and configuration management; and assists engineering teams with deploying cloud services and applications in a secure-by-default environment. The position leverages and develops automated techniques to continuously identify cloud infrastructure and workload risks, and develops approaches to harden cloud-native containers from build through the lifecycle, including runtime. It collaborates with partner teams on cloud security standards and verifies that controls meet those standards. The role implements cloud security automation, including cloud security posture management (CSPM) and cloud workload protection capabilities, and supports defining Secure SDLC standards for security architecture, design, and infrastructure coding requirements using a shift-left approach. The position is based at 55 Water Street, New York, NY 10041, with telecommuting permitted from anywhere in the U.S. The anticipated base salary range is $202,158 to $206,350, with final base salary determined by factors including geographic location, experience, skills, training, licenses, and certifications. The role is eligible for an annual incentive plan and S&P Global benefits.

Requirements

Bachelor’s degree in Computer Science, Computer Engineering, or a related IT field.
Five years of experience in security engineering, systems engineering, or a related occupation.
Five years of experience designing, architecting, and performing assessments in the cloud.
Five years of experience building and designing cloud solutions from cloud service providers such as Azure.
Five years of experience with cloud service provider ecosystems such as GCP, AWS, or Azure.
Five years of experience designing, building, and maintaining scalable cloud and network infrastructure and applications.
Five years of experience with IP networking, routing, switching, VPNs, DNS, and load balancing.
Five years of experience assessing and implementing networking security policies with firewall features supported by cloud service providers.
Five years of experience translating security and technical requirements into business requirements.

Responsibilities

Lead security architecture for S&P Global Ratings cloud and applications infrastructure.
Recommend cloud security requirements, engineering, design, and implementation while minimizing disruption and business impact.
Create, deploy, analyze, and refactor infrastructure securely using infrastructure-as-code tools.
Build automation for continuous cloud asset discovery and configuration management.
Assist engineering teams with deploying cloud services and applications and design and deliver a secure-by-default environment.
Develop automated techniques to continuously identify cloud infrastructure and workload risks.
Develop approaches for hardening cloud-native containers from build through the lifecycle, including the runtime environment.
Collaborate with partner teams to develop cloud security standards and verify that controls are implemented to standard.
Implement cloud security automation, including cloud security posture management (CSPM) and cloud workload protection capabilities.
Support definition of Secure SDLC standards covering security architecture, design, and infrastructure coding requirements, and adopt a shift-left approach to security.