Lead Information Security Engineer

S&P Global Corporate The Role: Lead Information Security Engineer The Team: S&P Global Cyber Risk Team performs Cyber and Technology Risk Assessments that employ cyber and technology risk teams and include divisional stakeholders to ensure potential controls gaps are addressed for remediation. The Impact: To foster an effective information security and technology risk program for mission critical High Target Applications; S&P Global needs to enforce its information security policies, standards and monitor them regularly in order to address and mitigate increasing cyber risk. What’s in it for you: Experience in an exciting career path in Cyber and Technology Risk Responsibilities: Lead Information Cyber Risk Control Assessments of S&P Global high-risk systems Lead the development of assessment questionnaire(s) or similar assessment documentation / templates Implement current risk assessment framework and processes at S&P Global, Coordinate with internal stakeholders such as divisional risk leads, procurement, engagement owners/vendor managers and domain partners, Gather, review, and evaluate supporting assessment documentation (evidence), reviews assessment questionnaire responses and develop resulting action plans, Follow-up with stakeholders until the assessment action items are closed or reasonable resolution timeline identified Prepare summary reports of assessment results and associated metrics Conduct semi-annual NIST Cybersecurity Framework security assessments Monitor and process information security exceptions Review and update technology policies and standards Update and maintain control and assessment information in supporting application systems Support, as needed, other functions such as client due diligence and special associated projects What We’re Looking For: Education: BS, BE or equivalent - preferably in Computer Science with a concentration in Information Security Certifications: Security and risk management certification (e.g. SANS/GIAC, CRISC, CISSP, CISM, CISA) is desirable Basic Qualifications: Ability to work flexible hours is a must, especially in night shift to provide coverage for US/EST business hours, Excellent communication skills - a must. The resource should have the ability to communicate with cross-functional teams and vendors, both written and oral communication is critical, Minimum 5 years of IT experience, out of which 3 years with IT risk and/or security; prior information security and risk management experience in a financial services company, Experience working in information security and demonstrable understanding of the concepts of information security controls including ISO and NIST’ and Project management experience is a “Big” plus as the work involves coordination with internal stakeholders Return to Work Have you taken time out for caring responsibilities and are now looking to return to work? As part of our Return to Work initiative (link to career site page when available), we are encouraging enthusiastic and talented returners to apply, and will actively support your return to the workplace. Grade 10 The Location: Hyderabad About S&P Global Corporate: At S&P Global, we don’t give you intelligence—we give you essential intelligence. The essential intelligence you need to make decisions with conviction. We’re the world’s foremost provider of credit ratings, benchmarks and analytics in the global capital and commodity markets. Our divisions include S&P Global Ratings, S&P Global Market Intelligence, S&P Dow Jones Indices and S&P Global Platts. For more information, visit www.spglobal.com S&P Global is an equal opportunity employer committed to making all employment decisions without regard to race/ethnicity, gender, pregnancy, gender identity or expression, color, creed, religion, national origin, age, disability, marital status (including domestic partnerships and civil unions), sexual orientation, military veteran status, unemployment status, or other legally protected categories, subject to applicable law. ----------------------------------------------------------- Equal Opportunity Employer S&P Global is an equal opportunity employer and all qualified candidates will receive consideration for employment without regard to race/ethnicity, color, religion, sex, sexual orientation, gender identity, national origin, age, disability, marital status, military veteran status, unemployment status, or any other status protected by law. Only electronic job submissions will be considered for employment. If you need an accommodation during the application process due to a disability, please send an email to: [email protected] and your request will be forwarded to the appropriate person.  US Candidates Only: The EEO is the Law Poster http://www.dol.gov/ofccp/regs/compliance/posters/pdf/eeopost.pdf describes discrimination protections under federal law. ----------------------------------------------------------- 20 - Professional (EEO-2 Job Categories-United States of America), IFTECH202.1 - Middle Professional Tier I (EEO Job Group) Job ID: 272720 Posted On: 2022-05-20 Location: Hyderabad, Telangana, India