Description
The Data Security Engineering Lead – Intellectual Property (IP) is accountable for designing, implementing, and operating S&P Global’s enterprise capabilities for protecting intellectual property.
This role converts the IP security architecture into scalable, resilient engineering solutions that provide deep visibility into where critical data and IP artifacts reside, what type of data they represent, how they are accessed, and how they are utilized across applications and AI systems.
The Engineering Lead oversees the day-to-day technical execution of IP discovery, classification, access monitoring, and protection controls.
Responsibilities and Impact:
- Lead the design, deployment, and operation of data security platforms supporting discovery, classification, and monitoring
- Implement enterprise-scale DSPM capabilities across cloud, on-prem, SaaS, and third-party environments
- Ensure platforms are reliable, scalable, and integrated with the broader security ecosystem
- Build and operate pipelines to identify where data resides across structured and unstructured sources
- Implement automated data classification and tagging aligned with enterprise standards
- Integrate data security tools with IAM, cloud services, and data platforms
- Monitor and surface who has access to data, including privileged, service, and AI identities
- Detect over-permissioned access, stale entitlements, and anomalous data usage
- Implement controls to monitor and govern data used by AI agents, ML models, and training pipelines
- Instrument visibility into data flows supporting AI prompts, training, inference, and outputs
- Partner with AI platform teams to enforce approved data usage patterns
- Implement IP protection mechanisms, including data watermarking, tagging, fingerprinting, and metadata controls
- Integrate IP protections into data pipelines and AI workflows
- Support detection and response to potential IP leakage events
- Operate and tune detection mechanisms for data exposure and misuse
- Support security incident investigations by rapidly identifying impacted data and access paths
- Partner with SOC and IR teams to automate alerts and response workflows
Basic Required Qualifications:
- 10+ years of experience in security engineering, data security, or platform security
- Strong hands-on experience implementing data discovery, classification, and monitoring solutions
- Deep expertise in cloud platforms (AWS, Azure, GCP) and data services
- Experience integrating security platforms with IAM, logging, SIEM, and SOAR
- Practical experience supporting AI/ML platforms and data pipelines
- Familiarity with IP protection techniques, including watermarking or tagging
- Strong scripting or programming skills (Python, Go, or similar)
- Experience operating production security platforms at scale
Preferred Qualifications:
- Experience with DSPM platforms (e.g., Cyera, Wiz DSPM, BigID)
- Background in regulated industries (financial services, data providers)
- Knowledge of DLP, CASB, encryption, and key management
- Security or cloud certifications (CISSP, CCSP, cloud provider certs)
Benefits:
- Health & Wellness: Health care coverage designed for the mind and body
- Flexible Downtime: Generous time off helps keep you energized for your time on
- Continuous Learning: Access a wealth of resources to grow your career and learn valuable new skills
- Invest in Your Future: Secure your financial future through competitive pay, retirement planning, a continuing education program with a company-matched student loan contribution, and financial wellness programs
- Family Friendly Perks: It’s not just about you. S&P Global has perks for your partners and little ones, too, with some best-in-class benefits for families
- Beyond the Basics: From retail discounts to referral incentive awards,small perks can make a big difference