Principal Security Architect

S&P Global•Princeton, NJ

13h•$200,000 - $220,000

About The Position

The Principal Security Architect will lead enterprise-wide security architecture strategy across Cloud, AI, Application, Infrastructure, and Data domains, helping shape the organization’s digital transformation and innovation roadmap. The role is part of the globally distributed Security Architecture and Engineering team, which partners across Technology, Business, and Security functions to deliver pragmatic, scalable security solutions in an Agile environment. The position provides strategic leadership for Zero Trust architecture and security for Generative AI, LLMs, AI agents, and responsible AI governance. It leads high-impact security architecture reviews and assessments for major transformations and new solutions, advising senior stakeholders and influencing technology decisions. The role also mentors Security Architects and Engineers, strengthening the organization’s security architecture capabilities through technical leadership, coaching, and knowledge transfer. S&P Global describes its mission as advancing Essential Intelligence and highlights values of integrity, discovery, and partnership. The company states that it has more than 35,000 employees worldwide. The anticipated base salary range is $200,000 to $220,000; final base salary depends on geographic location and the candidate’s experience, skills, training, licenses, and certifications. The role is eligible for additional S&P Global benefits.

Requirements

12 or more years of security architecture experience, including demonstrated expertise at senior or principal architecture level in enterprise environments.
Enterprise security architecture expertise across multiple domains, including cloud platforms such as AWS, Azure, or GCP; application security; infrastructure security; and identity management frameworks.
AI/ML security specialization, including Generative AI, LLMs, AI agents, model security, and responsible AI governance frameworks.
Advanced knowledge and practical implementation experience with security frameworks such as NIST CSF, ISO 27001/27002, CIS Controls, SABSA, or TOGAF.
Zero Trust architecture experience across identity, network, application, workload, and data-centric security models.
Executive communication skills and a record of influencing senior stakeholders and translating technical risks into business language.
Architecture governance experience, including leading design authorities, review boards, and risk acceptance processes.
Strategic thinking and the ability to move between executive strategy and detailed technical architecture.
Experience mentoring and leading the development of security architecture teams and organizational capabilities.

Nice To Haves

Professional security certifications such as CISSP, CISM, SABSA, TOGAF, CCSP, or cloud security certifications such as AWS Certified Security, Azure Security Engineer, or Google Cloud Security Engineer.
Multi-cloud and hybrid environment experience, including hands-on expertise in cloud-native security controls, CSPM/CNAPP platforms, and secure cloud landing zone implementations.
Advanced cryptography and data protection expertise, including PKI implementation, key management systems (KMS/HSM), encryption at rest, in transit, and in use, and crypto-agility frameworks.
DevSecOps and secure SDLC experience, including practical knowledge of CI/CD security integration, container security such as Kubernetes, and software supply chain security practices.

Responsibilities

Define and govern enterprise security architecture across Cloud, AI, Application, Infrastructure, and Data domains.
Establish comprehensive Zero Trust frameworks across identity, network, application, and data domains.
Lead security architecture for Generative AI, LLMs, and responsible AI governance.
Lead security assessments and architecture reviews for major transformations and new solutions, influencing technology decisions.
Partner with senior technology, business, and security stakeholders as a trusted security advisor.
Provide technical leadership and coaching to Security Architects and Engineers, developing team capabilities and transferring knowledge.