yoinka

Principal Security Architect

S&P Global

New York, NYFull TimePrincipalH-1B sponsor company
Sign in to applyVerified
Location
New York, NY
Employment
Full Time
Work model
On-Site
Level
Principal
H-1B history
10 approvals (FY2023)
Posted

Skills

AWSAgileAzureCI/CDCybersecurityGCPGenAIKubernetesREST

About this role

About the Role

Grade Level (for internal use): 13 The Team: The Security Architecture and Engineering team operates as strategic enablers of digital transformation, partnering across Technology, Business, and Security functions to deliver pragmatic, scalable security solutions. As a globally distributed team working in an Agile environment, we value technical excellence, collaborative problem-solving, and the ability to translate complex security challenges into actionable business outcomes. Our culture emphasizes continuous learning, mentorship, and staying at the forefront of emerging technologies like AI/ML security and Zero Trust architectures. Responsibilities and Impact: Lead enterprise-wide security architecture strategy - Define and govern security architecture across Cloud, AI, Application, Infrastructure, and Data domains, directly shaping the organization's digital transformation and innovation roadmap Drive Zero Trust architecture implementation - Establish comprehensive Zero Trust frameworks spanning identity, network, application, and data domains, positioning yourself at the forefront of modern security paradigms Provide strategic AI/ML security leadership - Lead security architecture for Generative AI, LLMs, and responsible AI governance, gaining cutting-edge expertise in this rapidly evolving field Conduct high-impact architecture reviews - Lead security assessments for major transformations and new solutions, directly influencing technology decisions at the executive level Serve as trusted security advisor - Partner with senior technology, business, and security stakeholders across the organization, building influential relationships while enabling secure innovation Mentor and develop security architecture capability - Provide technical leadership and coaching to Security Architects and Engineers, building lasting impact through team development and knowledge transfer What We're Looking For: Basic Required Qualifications: 12+ years of security architecture experience with demonstrated expertise operating at senior or principal architecture level in enterprise environments Enterprise security architecture expertise across multiple domains including cloud platforms (such as AWS, Azure, or GCP), application security, infrastructure security, and identity management frameworks AI/ML security specialization including Generative AI, LLMs, AI agents, model security, and responsible AI governance frameworks Advanced knowledge of security frameworks such as NIST CSF, ISO 27001/27002, CIS Controls, SABSA, or TOGAF with practical implementation experience Zero Trust architecture experience spanning identity, network, application, workload, and data-centric security models Executive communication abilities with proven track record influencing senior stakeholders and translating complex technical risks into business language Architecture governance experience including leading design authorities, review boards, and risk acceptance processes Strategic thinking capabilities with ability to move fluidly between executive strategy and detailed technical architecture Mentoring and leadership experience in developing security architecture teams and building organizational capabilities Additional Preferred Qualifications: Professional security certifications such as CISSP, CISM, SABSA, TOGAF, CCSP, or cloud security certifications (AWS Certified Security, Azure Security Engineer, or Google Cloud Security Engineer) Multi-cloud and hybrid environment experience with hands-on expertise in cloud-native security controls, CSPM/CNAPP platforms, and secure cloud landing zone implementations Advanced cryptography and data protection expertise including PKI implementation, key management systems (KMS/HSM), encryption at rest/in transit/in use, and crypto-agility frameworks DevSecOps and secure SDLC experience with practical knowledge of CI/CD security integration, container security (such as Kubernetes), and software supply chain

Listing verified . Applications go through the company's official careers site.

← Back to Yoinka