Associate Director

S&P Global•New York, NY

About The Position

Standard & Poor's Financial Services LLC seeks an Associate Director to lead security architecture for S&P Global Ratings cloud and applications infrastructure. The role recommends cloud security requirements, engineering, design, and implementation while minimizing disruption and business impact. It creates, deploys, analyzes, and refactors infrastructure securely through infrastructure-as-code tools; builds automation for continuous cloud asset discovery and configuration management; and assists engineering teams with deploying cloud services and applications in a secure-by-default environment. The Associate Director leverages and develops automated techniques to continuously identify cloud infrastructure and workload risks; develops approaches to harden cloud-native containers from build through their lifecycle, including runtime; collaborates with partner teams on cloud security standards and verifies controls; implements cloud security automation, including cloud security posture management (CSPM) and cloud workload protection capabilities; and supports definition of Secure SDLC standards covering security architecture, design, and coding requirements for infrastructure, adopting a shift-left approach to security.

Requirements

Bachelor’s degree in Computer Science, Computer Engineering, or a related IT field.
Five years of experience in security engineering, systems engineering, or a related occupation.
Five years of experience designing, architecting, and performing assessments in the cloud.
Five years of experience building and designing cloud solutions from cloud service providers such as Azure.
Five years of experience with cloud service provider ecosystems such as GCP, AWS, or Azure.
Five years of experience designing, building, and maintaining scalable cloud and network infrastructure and applications.
Five years of experience with IP networking, routing, switching, VPNs, DNS, and load balancing.
Five years of experience assessing and implementing networking security policies using firewall features supported by cloud service providers.
Five years of experience translating security and technical requirements into business requirements.

Responsibilities

Lead security architecture for S&P Global Ratings cloud and applications infrastructure.
Recommend cloud security requirements, engineering, design, and implementation while ensuring minimum disruption and business impact.
Create, deploy, analyze, and refactor infrastructure securely using infrastructure-as-code tools.
Build automation for continuous cloud asset discovery and configuration management.
Assist engineering teams with deploying cloud services and applications and design and deliver a secure-by-default environment.
Leverage and develop automated techniques to continuously identify cloud infrastructure and workload risks.
Develop approaches for hardening cloud-native containers from build through their lifecycle, including the runtime environment.
Collaborate with partner teams to develop cloud security standards and verify controls are implemented to standard.
Implement cloud security automation, including cloud security posture management (CSPM) and cloud workload protection capabilities.
Support the definition of Secure SDLC standards covering security architecture, design, and coding requirements for infrastructure, and adopt a shift-left approach to security.