Analyst II, Information Security
Core
Assess third-party cybersecurity and business continuity controls to reduce supply chain cyber risk for S&P Global brands.
Role type
Senior IC information security analyst (vendor risk management)
Builds
Vendor risk assessments, continuous monitoring reports, and strategic security projects
Domain
Financial services / Cybersecurity / Supply chain risk
Deliverable
dashboards & analysis
Required skills
Cybersecurity controls assessment, Business continuity planning, Risk assessment methodologies, Vendor contract review, Cloud security knowledge, Attack surface monitoring, Regulatory compliance knowledge, Strategic project leadership
Preferred skills
AWS/Azure/GCP familiarity, Privacy law expertise, Information Security certifications, Attack surface tool experience
Technologies
AWS, Azure, Google Cloud, Attack surface monitoring tools
Responsibilities
Conduct cybersecurity and business continuity assessments for vendors, Collaborate with internal teams to identify critical vendors, Communicate risk findings to stakeholders, Work with vendors to address security gaps, Monitor vendors using attack surface tools, Review cybersecurity contracts for confidentiality and availability clauses, Lead strategic projects aligning with business objectives
Seniority
Senior, hands-on IC
