Analyst II, Information Security
Core
Assess third-party cybersecurity and business continuity controls to reduce supply chain cyber risk for S&P Global brands.
Role type
Senior IC information security analyst (vendor risk)
Builds
Vendor risk assessments, continuous monitoring reports, and strategic security projects
Domain
Financial services / Cybersecurity / Vendor Risk Management
Deliverable
dashboards & analysis
Required skills
Cybersecurity controls assessment, Business Continuity planning, Risk assessment methodologies, Cloud security (AWS/Azure/GCP), Contract review (data confidentiality/integrity/availability), Attack surface monitoring, Regulatory compliance knowledge
Preferred skills
AI security assessment, Vendor cyber security contract expertise, Attack surface monitoring tool experience
Technologies
AWS, Microsoft Azure, Google Cloud, Attack surface monitoring tools
Responsibilities
Conduct cybersecurity and business continuity assessments for vendors; Collaborate with internal teams to identify critical vendors; Communicate risk findings to stakeholders; Work with vendors to address security gaps; Monitor vendors using attack surface tools; Review security contracts for confidentiality and availability clauses; Lead strategic projects aligning with business objectives.
Seniority
Senior, hands-on IC
