Security Architect

The Security Architecture and Engineering team at S&P Global operates as strategic enablers of digital transformation, partnering across Technology, Business, and Security functions to deliver pragmatic, scalable security solutions.

Responsibilities and Impact:

• Lead enterprise-wide security architecture strategy, defining and governing security architecture across Cloud, AI, Application, Infrastructure, and Data domains.
• Drive Zero Trust architecture implementation, establishing comprehensive Zero Trust frameworks spanning identity, network, application, and data domains.
• Provide strategic AI/ML security leadership, leading security architecture for Generative AI, LLMs, and responsible AI governance.
• Conduct high-impact architecture reviews, leading security assessments for major transformations and new solutions.
• Serve as trusted security advisor, partnering with senior technology, business, and security stakeholders across the organization.
• Mentor and develop security architecture capability, providing technical leadership and coaching to Security Architects and Engineers.

Requirements:

• 12+ years of security architecture experience with demonstrated expertise operating at senior or principal architecture level in enterprise environments.
• Enterprise security architecture expertise across multiple domains including cloud platforms, application security, infrastructure security, and identity management frameworks.
• AI/ML security specialization including Generative AI, LLMs, AI agents, model security, and responsible AI governance frameworks.
• Advanced knowledge of security frameworks such as NIST CSF, ISO 27001/27002, CIS Controls, SABSA, or TOGAF with practical implementation experience.
• Zero Trust architecture experience spanning identity, network, application, workload, and data-centric security models.
• Executive communication abilities with proven track record influencing senior stakeholders and translating complex technical risks into business language.
• Architecture governance experience including leading design authorities, review boards, and risk acceptance processes.
• Strategic thinking capabilities with ability to move fluidly between executive strategy and detailed technical architecture.
• Mentoring and leadership experience in developing security architecture teams and building organizational capabilities.

Preferred Qualifications:

• Professional security certifications such as CISSP, CISM, SABSA, TOGAF, CCSP, or cloud security certifications.
• Multi-cloud and hybrid environment experience with hands-on expertise in cloud-native security controls, CSPM/CNAPP platforms, and secure cloud landing zone implementations.
• Advanced cryptography and data protection expertise including PKI implementation, key management systems, encryption at rest/in transit/in use, and crypto-agility frameworks.
• DevSecOps and secure SDLC experience with practical knowledge of CI/CD security integration, container security, and software supply chain security practices.

Compensation: The anticipated base salary range for this position is $200,000 to $220,000.

Benefits:

• Health & Wellness: Health care coverage designed for the mind and body.
• Flexible Downtime: Generous time off helps keep you energized for your time on.
• Continuous Learning: Access a wealth of resources to grow your career and learn valuable new skills.
• Invest in Your Future: Secure your financial future through competitive pay, retirement planning, a continuing education program with a company-matched student loan contribution, and financial wellness programs.
• Family Friendly Perks: It’s not just about you. S&P Global has perks for your partners and little ones, too, with some best-in class benefits for families.
• Beyond the Basics: From retail discounts to referral incentive awards,small perks can make a big difference.