Cyber Security Risk Engineer-2

Grade Level (for internal use):

S&P Global Corporate

The Role: Cyber Security Risk Engineer

Grade: 9

The Location: Hyderabad

The Team:

Part of the Global Security Architecture team that is responsible for Security Consulting Security Assessments and Measurement Security Exceptions Management New Security Technology Evaluation and Acquisitions and Divestitures. The Team is based in New York Princeton London Hyderabad Beijing and Shanghai.

The Impact:

The Security Risk Measurement analyst will interact extensively with internal technology and business clients in order to review assess and report on the maturity of the security controls of current and proposed solutions within S&P Global. The position is critical as the business is very dynamic and constantly evolving to Power the Markets of the Future.

Whats in it for you:

• S&P Global is on a journey to enhance its existing security controls and processes. This role will allow you to be present at the start of the firms journey towards a mature security assessment and measurement model.
• The role involves engaging with a broad range of technologists and business professionals allowing you to develop a broad understand of the technology and business flows.
• As your experience of the technology and the firm grows there is an opportunity to grow your role to work with the technologists and business professionals directly to partner on developing and assessing the firms security architecture.

Responsibilities:

• Part of a team that enforces corporate regulatory and risk management policy configurations. The position also assists in developing implementing and maintaining corporate information security standards technologies processes and procedures.

• Reviews and provides guidance on the controls relating to all S&P Global current and future solutions.
• The role holder will look to ensure that the business adheres with expected minimum requirements and operates within agreed risk appetites for information data and cyber security and ongoing assurance.
• The role holder will be expected to understand areas of concern and in conjunction with stakeholders provide advice and guidance recommendations and mitigations where required.
• Serves as a subject matter expert for colleagues and line-of-business managers and experience with multiple technologies compliance requirements and risk analysis methodologies is crucial.
• Improve efficiencies using automation and orchestration solutions to reduce manual work that can be done programmatically.
• Influence tactical and strategic decisions.
• Identify process efficiencies through analysis and metrics driven decision making
• Responsible for the creation of guidance security documentation and configuration practices.
• Ensure systems are protected against threats through the deployment of Security controls.
• Ensure guidance and assessment provides is aligned to regulatory and compliance requirement and local laws.
• Administer best practices and required configuration standards for compliance and privacy law obligations.
• Remain current with new security threats and assessing systems to ensure they can defend the business.
• Provide metrics and other management information to leadership to ensure decision making is sound.
• Perform other duties as assigned.

What Were Looking For:

Basic Qualifications

• At least 5-7 years experience in cybersecurity including compliance and risk management with a system and network security engineering background.

• Highly technical and analytical expertise with a proven deep background in technology design implementation and delivery.
• Experience of aligning to a NIST controls framework. Familiarity with the concepts of Security Control Frameworks
• Experience in cloud computing technologies including software- infrastructure- and platform-as-a-service as well as public private and hybrid environments.
• Extensive knowledge of traditional security controls and technologies such as SIEM systems IDS/IPS public key infrastructure (PKI) IDAM systems antivirus and firewalls in addition to newer offerings such as endpoint detection and response (EDR) threat intelligence platforms security automation and orchestration deception technologies and application controls.
• Experience driving measurable improvement in monitoring and response capabilities at scale.
• Track record of acting with integrity taking pride in work seeking to excel being curious and adaptable and communicating effectively.
• Experience of information security and Data protection practices in financial services.
• Experience of working within cyber security and information security teams within an international business of scale and complexity

• Bachelors degree in computer science information assurance MIS or related field or equivalent.

Preferred Qualifications:

• Experience with Amazon Web Services (AWS) or Microsoft Azure.
• Experience with one or more of the following: ISO 27001 NIST Payment Card Industry Data Security Standard (PCI DSS) Health Information Portability and Accountability Act (HIPAA) Health Information Technology for Economic and Clinical Health (HITECH) Act Sarbanes-Oxley Act (SOX) the General Data Protection Regulation (GDPR) Center for Internet Security (CIS) standards or Service Organization Controls (SOC) 2.
• Working knowledge of Windows Linux and Unix.
• Highly trustworthy; leads by example.

About S&P Global Corporate:

At S&P Global we dont give you intelligencewe give you essential intelligence. The essential intelligence you need to make decisions with conviction. Were the worlds foremost provider of credit ratings benchmarks and analytics in the global capital and commodity markets. Our divisions include S&P Global Ratings S&P Global Market Intelligence S&P Dow Jones Indices and S&P Global Platts. For more information visit

S&P Global is an equal opportunity employer committed to making all employment decisions without regard to race/ethnicity sex pregnancy gender identity or expression color creed religion national origin age disability marital status (including domestic partnerships and civil unions) sexual orientation military veteran status unemployment status or other legally protected categories subject to applicable law.

Whats In It For You

Our Mission:

Advancing Essential Intelligence.

Our People:

Were more than 35000 strong worldwideso were able to understand nuances while having a broad perspective. Our team is driven by curiosity and a shared belief that Essential Intelligence can help build a more prosperous future for us finding new ways to measure sustainability to analyzing energy transition across the supply chain to building workflow solutions that make it easy to tap into insight and apply it. We are changing the way people see things and empowering them to make an impact on the world we live in. Were committed to a more equitable future and to helping our customers find new sustainable ways of doing business. Join us and help create the critical insights that truly make a difference.

Our Values:
Integrity Discovery Partnership

Throughout our history the worlds leading organizations have relied on us for the Essential Intelligence they need to make confident decisions about the road ahead. We start with a foundation of integrity in all we do bring a spirit of discovery to our work and collaborate in close partnership with each other and our customers to achieve shared goals.

Benefits:

We take care of you so you cantake care of business. We care about our people. Thats why we provide everything youand your careerneed to thrive at S&P Global.

Our benefits include:

• Health & Wellness: Health care coverage designed for the mind and body.

• Flexible Downtime: Generous time off helps keep you energized for your time on.

• Continuous Learning: Access a wealth of resources to grow your career and learn valuable new skills.

• Invest in Your Future: Secure your financial future through competitive pay retirement planning a continuing education program with a company-matched student loan contribution and financial wellness programs.

• Family Friendly Perks: Its not just about you. S&P Global has perks for your partners and little ones too with some best-in class benefits for families.

• Beyond the Basics: From retail discounts to referral incentive awardssmall perks can make a big difference.

For more information on benefits by country visit: Hiring and Opportunity at S&P Global:

At S&P Global we are committed to fostering a connected andengaged workplace where all individuals have access to opportunities based on their skills experience and contributions. Our hiring practices emphasize fairness transparency and merit ensuring that we attract and retain top talent. By valuing different perspectives and promoting a culture of respect and collaboration we drive innovation and power global markets.

Recruitment Fraud Alert:

If you receive an email from a domain or any other regionally based domains it is a scam and should be reported to. S&P Global never requires any candidate to pay money for job applications interviews offer letters pre-employment training or for equipment/delivery of equipment. Stay informed and protect yourself from recruitment fraud by reviewing our guidelines fraudulent domains and how to report suspicious activityhere.

Equal Opportunity Employer

S&P Global is an equal opportunity employer and all qualified candidates will receive consideration for employment without regard to race/ethnicity color religion sex sexual orientation gender identity national origin age disability marital status military veteran status unemployment status or any other status protected by law. Only electronic job submissions will be considered for employment.

If you need an accommodation during the application process due to a disability please send an email to:and your request will be forwarded to the appropriate person.

US Candidates Only:Know Your Rights: Workplace discrimination is illegal