S&P Global

2 weeks ago

Application & Cloud Security Lead

✓ Verified Job

Canonical indexed version, validated from employer's careers page.

Source: Company careers pageValidated by: Fursa AI

Last checked: 12 hours agoStatus: Live

Job Summary

Lead application, cloud, and AI security initiatives for the S&P Global Energy Division BISO team. Conduct security architecture reviews, embed security into solution design and delivery, and enforce application controls across the software lifecycle. Oversee cloud security implementation in public clouds, assess AI/ML security risks, and drive remediation of findings. Partner with engineering, product, risk, and compliance teams and provide executive reporting on security posture and trends.

Location: Hyderabad, Gurugram, Mumbai

Workplace: Onsite

Employment Type: Full time

Job Function: Administration & Executive Assistance

Seniority: Mid level

Key Responsibilities

•Lead and coordinate application, cloud, and AI security initiatives aligned with cyber risk management objectives for the Energy Division.
•Conduct security architecture reviews for applications, APIs, cloud platforms, data flows, integrations, and AI-enabled solutions, recommending secure design improvements.
•Embed security requirements into solution design, development, deployment, and operations through partnerships with engineering, product, architecture, and business teams.
•Enforce application security controls (secure coding, vulnerability remediation, authentication/authorization, secrets management, dependency security, and supply chain risk management).
•Oversee cloud security control implementation and remediation tracking, including identity/access, network security, encryption, logging/monitoring, workload protection, and secure configuration.

Pay and Benefits

Perks:Health InsuranceLearning Budget

Key Requirements

•Bachelor’s degree in Cybersecurity, Computer Science, Information Technology, Engineering, or related field (or equivalent professional experience).
•5-8+ years of cybersecurity experience focused on application security, cloud security, security architecture, and/or technology risk management.
•Experience conducting security architecture reviews for applications, APIs, cloud and data platforms, and enterprise technology solutions.
•Experience with DevSecOps and CI/CD security, container security, Kubernetes security, infrastructure-as-code scanning, secrets management, and software supply chain security.
•Experience with cloud security tools (e.g., CSPM/CWPP/CNAPP, SIEM, vulnerability management, container scanners, identity governance) and AI security concepts (e.g., prompt injection and access control).

Experience:5-8 yearsCybersecurityApplication securityCloud securitySecurity architectureTechnology risk managementDevSecOpsAI security

Education:Bachelor's

Skills:CommunicationStakeholder managementRisk prioritizationInfluencing remediationCross-functional partnership

Certifications:CISSPSABSACCSKAWS Certified Security — SpecialtyAWS Certified Solution ArchitectGoogle Professional Cloud Security Engineer

Tech Stack:DevSecOpsCI/CDContainer securityKubernetesInfrastructure-as-codeSecrets managementSoftware supply chain securityCSPMCWPPCNAPPSIEMVulnerability managementContainer scannersIdentity governanceAWSAzureGoogle Cloud PlatformAI securityMachine learningPrompt injection

Company Brief

S&P Global

Provides financial information, analytics, benchmarks, and credit ratings to markets and institutions worldwide, offering data, research, indices, and risk assessment tools across the financial services and commodities sectors.

Industry: Data Infrastructure

Company Size: Enterprise (1,001+ employees)

Revenue: USD 1B+

Growth: Public Company

Valuation: Public Company (Market Cap in USD)

Funding: IPO / Publicly Listed

Headquarters: New York, United States

Founded: 1917

Website LinkedIn

Loading job details...

Preparing the role view and application actions.

S&P Global

2 weeks ago

Application & Cloud Security Lead

✓ Verified Job

Canonical indexed version, validated from employer's careers page.

Source: Company careers pageValidated by: Fursa AI

Last checked: 12 hours agoStatus: Live

Job Summary

Location: Hyderabad, Gurugram, Mumbai

Workplace: Onsite

Employment Type: Full time

Job Function: Administration & Executive Assistance

Seniority: Mid level

Key Responsibilities

•Lead and coordinate application, cloud, and AI security initiatives aligned with cyber risk management objectives for the Energy Division.
•Conduct security architecture reviews for applications, APIs, cloud platforms, data flows, integrations, and AI-enabled solutions, recommending secure design improvements.
•Embed security requirements into solution design, development, deployment, and operations through partnerships with engineering, product, architecture, and business teams.
•Enforce application security controls (secure coding, vulnerability remediation, authentication/authorization, secrets management, dependency security, and supply chain risk management).
•Oversee cloud security control implementation and remediation tracking, including identity/access, network security, encryption, logging/monitoring, workload protection, and secure configuration.

Pay and Benefits

Perks:Health InsuranceLearning Budget

Key Requirements

•Bachelor’s degree in Cybersecurity, Computer Science, Information Technology, Engineering, or related field (or equivalent professional experience).
•5-8+ years of cybersecurity experience focused on application security, cloud security, security architecture, and/or technology risk management.
•Experience conducting security architecture reviews for applications, APIs, cloud and data platforms, and enterprise technology solutions.
•Experience with DevSecOps and CI/CD security, container security, Kubernetes security, infrastructure-as-code scanning, secrets management, and software supply chain security.
•Experience with cloud security tools (e.g., CSPM/CWPP/CNAPP, SIEM, vulnerability management, container scanners, identity governance) and AI security concepts (e.g., prompt injection and access control).

Experience:5-8 yearsCybersecurityApplication securityCloud securitySecurity architectureTechnology risk managementDevSecOpsAI security

Education:Bachelor's

Skills:CommunicationStakeholder managementRisk prioritizationInfluencing remediationCross-functional partnership

Certifications:CISSPSABSACCSKAWS Certified Security — SpecialtyAWS Certified Solution ArchitectGoogle Professional Cloud Security Engineer

Company Brief

S&P Global

Industry: Data Infrastructure

Company Size: Enterprise (1,001+ employees)

Revenue: USD 1B+

Growth: Public Company

Valuation: Public Company (Market Cap in USD)

Funding: IPO / Publicly Listed

Headquarters: New York, United States

Founded: 1917

Website LinkedIn