Cyber Security Risk Engineer-2
Core
Enforce corporate, regulatory, and risk management policy configurations; assess and report on the maturity of security controls for current and proposed solutions within S&P Global.
Role type
Senior IC Cyber Security Risk Engineer
Builds
Security assessment and measurement models, security architecture, and automated monitoring/response capabilities
Domain
Financial services / Cybersecurity / Risk Management
Required skills
NIST controls framework, cloud computing (IaaS/PaaS/SaaS), SIEM, IDS/IPS, PKI, IDAM, EDR, threat intelligence platforms, security automation and orchestration, compliance and privacy law obligations
Preferred skills
AWS or Microsoft Azure, ISO 27001, PCI DSS, HIPAA, HITECH, SOX, GDPR, CIS standards, SOC 2, Windows/Linux/Unix
Technologies
NIST, AWS, Azure, SIEM, IDS/IPS, PKI, IDAM, EDR, threat intelligence platforms, security automation and orchestration
Responsibilities
Enforce corporate, regulatory, and risk management policy configurations; review and provide guidance on controls for current and future solutions; ensure business adherence to risk appetites; act as subject matter expert for colleagues and line-of-business managers; improve efficiencies using automation and orchestration solutions; provide metrics and management information to leadership
Seniority
Senior, hands-on IC
