S&P Global

1 month ago

Senior IT Audit Manager, Cybersecurity & Technology

✓ Verified Job

Canonical indexed version, validated from employer's careers page.

Source: Company careers pageValidated by: Fursa AI

Last checked: 10 hours agoStatus: Live

Job Summary

Lead IT audits across the Chief Technology and Transformation Office (CTTO), focusing on IT infrastructure, applications, cloud systems, cyber security, and Identity and Access Management (IAM). Manage stakeholder relationships, execute audit planning and fieldwork, drive strategic transformation, and assess IAM, cloud security, and secure‑by‑design practices across emerging technologies including GenAI.

Location: Mumbai, Hyderabad, Gurugram, Bengaluru

Workplace: Hybrid

Employment Type: Full time

Job Function: Cybersecurity

Seniority: Sr. Manager level

Key Responsibilities

•Partner with technology stakeholders to identify and assess identity-related vulnerabilities and control gaps through grey box testing.
•IAM architecture experience, including MFA and tools such as SailPoint and CyberArk.
•Act as a subject matter expert in IAM security testing, providing deep insights into exploitation techniques across IAM solutions.
•Assess the effectiveness of Identity Governance & Administration controls (provisioning, RBAC, access certifications) through control testing, abuse-case simulation, and privilege escalation scenarios.
•Conduct risk-based vulnerability assessments focused on identity attack vectors, including credential compromise, privilege misuse, and lateral movement.

Key Requirements

•8+ years of experience in IAM and cybersecurity, with hands-on vulnerability assessment and security testing of identity platforms and access control mechanisms.
•Strong experience in testing identity governance and access management controls, including provisioning, RBAC, privilege escalation, and access certification bypass scenarios.
•Experience performing security testing of IAM solutions in cloud environments (AWS, Azure, GCP), including validation of authentication, authorization, and federation controls.
•Understanding of cryptographic controls, PKI, and their exploitation risks, with ability to assess weaknesses in identity and authentication mechanisms.
•Knowledge of Zero Trust architectures, DevSecOps pipelines, and modern application environments with focus on identity-driven attack paths.

Experience:8+ yearsCybersecurityIAMCloudGenAIAI

Skills:CommunicationStakeholder managementProblem solvingAnalyticalTeamwork

Certifications:CISACISSPCEHRed Team

Tech Stack:SailPointCyberArkMFASSORBACPAMIAMISO 27001NISTGDPRPCI-DSSAWSAzureGCPPKI

Company Brief

S&P Global

Provides financial information, analytics, benchmarks, and credit ratings to markets and institutions worldwide, offering data, research, indices, and risk assessment tools across the financial services and commodities sectors.

Industry: Data Infrastructure

Company Size: Enterprise (1,001+ employees)

Revenue: USD 1B+

Growth: Public Company

Valuation: Public Company (Market Cap in USD)

Funding: IPO / Publicly Listed

Headquarters: New York, United States

Founded: 1917

Website LinkedIn

Loading job details...

Preparing the role view and application actions.

S&P Global

1 month ago

Senior IT Audit Manager, Cybersecurity & Technology

✓ Verified Job

Canonical indexed version, validated from employer's careers page.

Source: Company careers pageValidated by: Fursa AI

Last checked: 10 hours agoStatus: Live

Job Summary

Location: Mumbai, Hyderabad, Gurugram, Bengaluru

Workplace: Hybrid

Employment Type: Full time

Job Function: Cybersecurity

Seniority: Sr. Manager level

Key Responsibilities

•Partner with technology stakeholders to identify and assess identity-related vulnerabilities and control gaps through grey box testing.
•IAM architecture experience, including MFA and tools such as SailPoint and CyberArk.
•Act as a subject matter expert in IAM security testing, providing deep insights into exploitation techniques across IAM solutions.
•Assess the effectiveness of Identity Governance & Administration controls (provisioning, RBAC, access certifications) through control testing, abuse-case simulation, and privilege escalation scenarios.
•Conduct risk-based vulnerability assessments focused on identity attack vectors, including credential compromise, privilege misuse, and lateral movement.

Key Requirements

•8+ years of experience in IAM and cybersecurity, with hands-on vulnerability assessment and security testing of identity platforms and access control mechanisms.
•Strong experience in testing identity governance and access management controls, including provisioning, RBAC, privilege escalation, and access certification bypass scenarios.
•Experience performing security testing of IAM solutions in cloud environments (AWS, Azure, GCP), including validation of authentication, authorization, and federation controls.
•Understanding of cryptographic controls, PKI, and their exploitation risks, with ability to assess weaknesses in identity and authentication mechanisms.
•Knowledge of Zero Trust architectures, DevSecOps pipelines, and modern application environments with focus on identity-driven attack paths.

Experience:8+ yearsCybersecurityIAMCloudGenAIAI

Skills:CommunicationStakeholder managementProblem solvingAnalyticalTeamwork

Certifications:CISACISSPCEHRed Team

Tech Stack:SailPointCyberArkMFASSORBACPAMIAMISO 27001NISTGDPRPCI-DSSAWSAzureGCPPKI

Company Brief

S&P Global

Industry: Data Infrastructure

Company Size: Enterprise (1,001+ employees)

Revenue: USD 1B+

Growth: Public Company

Valuation: Public Company (Market Cap in USD)

Funding: IPO / Publicly Listed

Headquarters: New York, United States

Founded: 1917

Website LinkedIn