Application & Cloud Security Lead

S&P Global
Hyderabad, Gurugram, Mumbai
Workplace: OnsiteFull timeFunction: Administration & Executive AssistanceExperience: 5-8 yearsEducation: bachelorsSkills: ["Communication","Stakeholder management","Risk prioritization","Influencing remediation","Cross-functional partnership"]

Lead application, cloud, and AI security initiatives for the S&P Global Energy Division BISO team. Conduct security architecture reviews, embed security into solution design and delivery, and enforce application controls across the software lifecycle. Oversee cloud security implementation in public clouds, assess AI/ML security risks, and drive remediation of findings. Partner with engineering, product, risk, and compliance teams and provide executive reporting on security posture and trends.

Loading

Loading job details...

Preparing the role view and application actions.

FursaFursa
S&P Global
S&P Global
2 months ago

Application & Cloud Security Lead

✓ Verified Job

Canonical indexed version, validated from employer's careers page.

Source: Company careers pageValidated by: Fursa AI
Last checked: 45 days agoStatus: Live

Job Summary

Lead application, cloud, and AI security initiatives for the S&P Global Energy Division BISO team. Conduct security architecture reviews, embed security into solution design and delivery, and enforce application controls across the software lifecycle. Oversee cloud security implementation in public clouds, assess AI/ML security risks, and drive remediation of findings. Partner with engineering, product, risk, and compliance teams and provide executive reporting on security posture and trends.
Location: Hyderabad, Gurugram, Mumbai
Workplace: Onsite
Employment Type: Full time
Job Function: Administration & Executive Assistance
Seniority: Mid level

Key Responsibilities

  • •Lead and coordinate application, cloud, and AI security initiatives aligned with cyber risk management objectives for the Energy Division.
  • •Conduct security architecture reviews for applications, APIs, cloud platforms, data flows, integrations, and AI-enabled solutions, recommending secure design improvements.
  • •Embed security requirements into solution design, development, deployment, and operations through partnerships with engineering, product, architecture, and business teams.
  • •Enforce application security controls (secure coding, vulnerability remediation, authentication/authorization, secrets management, dependency security, and supply chain risk management).
  • •Oversee cloud security control implementation and remediation tracking, including identity/access, network security, encryption, logging/monitoring, workload protection, and secure configuration.

Pay and Benefits

Perks:Health InsuranceLearning Budget

Key Requirements

  • •Bachelor’s degree in Cybersecurity, Computer Science, Information Technology, Engineering, or related field (or equivalent professional experience).
  • •5-8+ years of cybersecurity experience focused on application security, cloud security, security architecture, and/or technology risk management.
  • •Experience conducting security architecture reviews for applications, APIs, cloud and data platforms, and enterprise technology solutions.
  • •Experience with DevSecOps and CI/CD security, container security, Kubernetes security, infrastructure-as-code scanning, secrets management, and software supply chain security.
  • •Experience with cloud security tools (e.g., CSPM/CWPP/CNAPP, SIEM, vulnerability management, container scanners, identity governance) and AI security concepts (e.g., prompt injection and access control).
Experience:5-8 yearsCybersecurityApplication securityCloud securitySecurity architectureTechnology risk managementDevSecOpsAI security
Education:Bachelor's
Skills:CommunicationStakeholder managementRisk prioritizationInfluencing remediationCross-functional partnership
Certifications:CISSPSABSACCSKAWS Certified Security — SpecialtyAWS Certified Solution ArchitectGoogle Professional Cloud Security Engineer
Tech Stack:DevSecOpsCI/CDContainer securityKubernetesInfrastructure-as-codeSecrets managementSoftware supply chain securityCSPMCWPPCNAPPSIEMVulnerability managementContainer scannersIdentity governanceAWSAzureGoogle Cloud PlatformAI securityMachine learningPrompt injection

Company Brief

S&P Global
Provides financial information, analytics, benchmarks, and credit ratings to markets and institutions worldwide, offering data, research, indices, and risk assessment tools across the financial services and commodities sectors.
Industry: Data Infrastructure
Company Size: Enterprise (1,001+ employees)
Revenue: USD 1B+
Growth: Public Company
Valuation: Public Company (Market Cap in USD)
Funding: IPO / Publicly Listed
Headquarters: New York, United States
Founded: 1917
WebsiteLinkedIn