Lead Information Security Engineer

S&P Global Market Intelligence The Role: Security Operations Engineer Grade: 10 The Location: Hyderabad (Sky View) The Team: The Market Intelligence Information Security team is responsible for building, enforcing and reporting on information security maturity across MI products by adopting, adapting and extending Enterprise Corporate standards and tools. MI products are a critical component of the global financial markets, so building and ensuring information security compliance is an extremely important function. The Impact: As a Security Operations Engineer, you will be part of the Security Operations Engineering Team that is accountable for report and improve the Security state by calibrating security against set standards and practices in the division and organization. This role will practice and encourage secure by design mindset. A background of System Administration / SRE with expertise in general Infrastructure systems architecture would be ideal. What’s in it for you: This is a unique opportunity to work on all facets of information security. From working on infrastructure and cloud security to driving a DevSecOps mentality with a primary focus on our Application security, including both DevOps and Cloud services. This role will involve collaborating with global development and product teams with a lot of exposure to senior leadership. Responsibilities: Working with the Director of Security Operations Engineering you will be implementing and enforcing corporate security standards Responsible for the successful operations of all security tools and technologies and participates in or drives security reviews for new products and services. Partners closely with the scrum teams, DevOps leads, Product Development managers, and Product Managers to improve the operating risk posture, improve security maturity, and mitigate risks. Implement the best practices in Database privacy and Security, Privilege access management (for application and database) and Recertification, data redundancy and disaster Recover scenarios Collect and analyze available vulnerability data to identify risks, and manage remediation. Aggressively but realistically eliminate technical debt that leads to security vulnerabilities. Assist in performing risk assessments and developing remediation plans for identified risks. Work with Internal Audit team ensuring audit compliance of all the products in MI. Documents wiki, run books, and trains others to help operationalize and automate DevSecOps. Works across engineering teams to prioritize flaws and with external entities to respond to security issues and concerns. Continuously identifies areas needing improvement, creates action plans, and executes to implement changes in a timely manner What We’re Looking For: Basic Qualifications: A bachelor’s in computer science (or equivalent) degree with 5 years of documented information security work experience or an adjacent specialty such as a System Administrator/SRE. Strong knowledge of NIST standards and the NIST Cybersecurity Framework. Strong sense of project management, prioritization and ability to resolve or mitigate blockers. Strong knowledge in Database Security framework and implementation specifics on RDBMS platforms like SQL Server, Oracle on Linux/Windows Platforms. Past experience in Sysadmin, Dbaadmin will be a great plus A strong level of technical depth in the information security domain and is focused on driving metrics-driven results Experience with complex SaaS and Corporate IT services environments Expertise with administering security technology controls (firewalls, orchestration platforms, anti-malware, forensics, IAM, IDS, DLP, open-source, etc.) Experience with security automation and technology and process integrations with CI/CD pipelines. Experience with creating Analytics Dashboards with Tableau for the underlying asset data. Experience managing security in DevOps and SaaS environments. Experience with AWS and best practices for monitoring an IaaS environment Experience working with a Corporate Cyber Security Team that declares the standards; your job is to implement and enforce them while also working in partnership to help improve the corporate standards. Familiarity with operating enterprise security technologies and establishing enterprise security processes. Familiarity and experience with standards and compliance frameworks ISO, SANS, OWASP, NIST, SSAE SOC, ITIL, etc. Development of detailed SecOps metrics and reporting for executive management. Excellent written visualization and verbal communication skills. S&P Global Market Intelligence : At S&P Global Market Intelligence, we know that not all information is important—some of it is vital. Accurate, deep and insightful. We integrate financial and industry data, research and news into tools that help track performance, generate alpha, identify investment ideas, understand competitive and industry dynamics, perform valuation and assess credit risk. Investment professionals, government agencies, corporations and universities globally can gain the intelligence essential to making business and financial decisions with conviction. S&P Global Market Intelligence is a division of S&P Global (NYSE: SPGI), which provides essential intelligence for individuals, companies and governments to make decisions with confidence. For more information, visit www.spglobal.com/marketintelligence. S&P Global has a Securities Disclosure and Trading Policy (“the Policy”) that seeks to mitigate conflicts of interest by monitoring and placing restrictions on personal securities holding and trading. The Policy is designed to promote compliance with global regulations. In some Divisions, pursuant to the Policy’s requirements, candidates at S&P Global may be asked to disclose securities holdings. Some roles may include a trading prohibition and remediation of positions when there is an effective or potential conflict of interest. Employment at S&P Global is contingent upon compliance with the Policy. Equal Opportunity Employer: S&P Global is an equal opportunity employer and all qualified candidates will receive consideration for employment without regard to race/ethnicity, color, religion, sex, sexual orientation, gender identity, national origin, age, disability, marital status, military veteran status, unemployment status, or any other status protected by law. Only electronic job submissions will be considered for employment. If you need an accommodation during the application process due to a disability, please send an email to: [email protected] and your request will be forwarded to the appropriate person. ----------------------------------------------------------- Equal Opportunity Employer S&P Global is an equal opportunity employer and all qualified candidates will receive consideration for employment without regard to race/ethnicity, color, religion, sex, sexual orientation, gender identity, national origin, age, disability, marital status, military veteran status, unemployment status, or any other status protected by law. Only electronic job submissions will be considered for employment. If you need an accommodation during the application process due to a disability, please send an email to: [email protected] and your request will be forwarded to the appropriate person.  US Candidates Only: The EEO is the Law Poster http://www.dol.gov/ofccp/regs/compliance/posters/pdf/eeopost.pdf describes discrimination protections under federal law. ----------------------------------------------------------- 20 - Professional (EEO-2 Job Categories-United States of America), IFTECH202.2 - Middle Professional Tier II (EEO Job Group) Job ID: 263840 Posted On: 2022-05-12 Location: Hyderabad, Telangana, India