Principal Security Architect

S&P Global•New York, NY

13h

About The Position

The Principal Security Architect will lead enterprise-wide security architecture strategy across cloud, AI, application, infrastructure, and data domains, helping shape the organization's digital transformation and innovation roadmap. The role is part of the globally distributed Security Architecture and Engineering team, which partners across Technology, Business, and Security functions in an Agile environment to deliver pragmatic, scalable security solutions. The team emphasizes technical excellence, collaborative problem-solving, continuous learning, mentorship, and emerging technologies such as AI/ML security and Zero Trust architectures. The role provides strategic leadership for Zero Trust implementation and security architecture for Generative AI, LLMs, AI agents, and responsible AI governance. It also leads high-impact architecture reviews for major transformations and new solutions, advises senior stakeholders, and mentors Security Architects and Engineers. The position is based in New York, New York. The anticipated base salary range is $200,000 to $220,000, with final pay based in part on location, experience, skills, training, licenses, and certifications. The role is eligible for additional S&P Global benefits.

Requirements

12+ years of security architecture experience, including demonstrated senior- or principal-level architecture work in enterprise environments.
Enterprise security architecture expertise across multiple domains, including cloud platforms such as AWS, Azure, or GCP; application security; infrastructure security; and identity management frameworks.
AI/ML security specialization, including Generative AI, LLMs, AI agents, model security, and responsible AI governance frameworks.
Advanced knowledge and practical implementation experience with security frameworks such as NIST CSF, ISO 27001/27002, CIS Controls, SABSA, or TOGAF.
Zero Trust architecture experience spanning identity, network, application, workload, and data-centric security models.
Executive communication skills and a proven ability to influence senior stakeholders and translate technical risks into business language.
Architecture governance experience, including leading design authorities, review boards, and risk acceptance processes.
Strategic thinking and ability to move between executive strategy and detailed technical architecture.
Mentoring and leadership experience developing security architecture teams and organizational capabilities.

Nice To Haves

Professional security certifications such as CISSP, CISM, SABSA, TOGAF, CCSP, or cloud security certifications such as AWS Certified Security, Azure Security Engineer, or Google Cloud Security Engineer.
Multi-cloud and hybrid environment experience, including hands-on expertise with cloud-native security controls, CSPM/CNAPP platforms, and secure cloud landing zone implementations.
Advanced cryptography and data protection expertise, including PKI implementation, key management systems (KMS/HSM), encryption at rest, in transit, and in use, and crypto-agility frameworks.
DevSecOps and secure SDLC experience, including practical knowledge of CI/CD security integration, container security such as Kubernetes, and software supply chain security practices.

Responsibilities

Define and govern enterprise security architecture across cloud, AI, application, infrastructure, and data domains.
Drive implementation of Zero Trust frameworks across identity, network, application, and data domains.
Lead security architecture for Generative AI, LLMs, and responsible AI governance.
Lead security assessments and architecture reviews for major transformations and new solutions, influencing technology decisions.
Partner with senior technology, business, and security stakeholders as a trusted security advisor.
Mentor and provide technical leadership to Security Architects and Engineers, developing team capabilities and transferring knowledge.