Senior Manager - Information Security

Grade Level (for internal use): 11 S&P Global Corporate The Role: Senior Manager, Information Security  The Team:  You will be a Cyber Security Detection Engineer in S&P Global’s Cyber Fusion Center within the Information Security department. You will play a pivotal role in safeguarding the organization’s digital assets. You will design, implement, and optimize detection rules and analytics to identify and mitigate cyber threats across our multi-cloud and hybrid environments. You will work closely with global teams to ensure our detection capabilities are robust, scalable, and aligned with industry best practices. The Impact:  You will collaborate with cross-functional teams to enhance our cybersecurity posture, develop strategic plans, and drive continuous improvement in threat detection and incident response capabilities. What’s in it for you: Opportunity to work on a wide & industry leading Cyber technology stack. Immense opportunity to learn new technologies & gain new skill set. Work with a leading brand & attractive benefit.

Develop, tune, and maintain detection rules and analytics within Google SecOps (Chronicle Security Operations), using YARA-L and other relevant tools, specifically tailored to S&P Global’s environment. Strong expertise in log analysis and threat hunting with Google BigQuery. Solid understanding of cloud security concepts across AWS, Azure and GCP environments. Conduct proactive threat hunting and log analysis across global infrastructure including cloud (AWS, Azure, GCP) Integrate actionable threat intelligence into detection logic, collaborating closely with Threat Intelligence, Incident Response, and SOC teams to optimize detection and response workflows. Demonstrate strong analytical and problem-solving skills to identify and mitigate threats in large-scale enterprise environments. Communicate effectively and document clearly, especially for detection playbooks and security operations. Stay up-to-date with the latest security threats, vulnerabilities, and attack techniques relevant to the financial sector. Support compliance initiatives and reporting (e.g., SOX, GDPR) by providing detection-related evidence and metrics from SIEM, Data lake platforms. Participate in the evaluation and deployment of new security technologies and products within the security ecosystem. Proficiency in using Cribl for data stream management, log routing, filtering, enrichment, and optimization to enhance security analytics and improve detection capabilities within large-scale cloud and hybrid environments. Work collaboratively with global teams to continuously improve S&P Global’s cyber defense capabilities. Automate detection and response processes using scripting languages (Python, PowerShell, Google Cloud Functions) and orchestration tools. Maintain and update documentation, detection playbooks, and knowledge bases, with a focus on Cloud security operations and best practices. Solid understanding of cyber security governance frameworks (e.g., NIST, ISO/IEC 27001, CIS Controls). Experience in implementing and maintaining security policies, standards, and procedures. Ability to assess and ensure compliance with regulatory requirements (e.g., SOX, GDPR) relevant to the financial sector. Proficiency in documenting and reporting security controls, risk assessments, and audit findings. Familiarity with conducting gap analyses to identify and remediate compliance deficiencies. Strong knowledge of risk management principles and their application in enterprise environments. Experience collaborating with internal audit, risk, and compliance teams to support security initiatives. Ability to translate technical security requirements into clear, actionable policies and guidelines. Up-to-date awareness of emerging regulations, industry standards, and best practices in cyber security governance and compliance.   What We’re Looking For: Minimum 7 years of experience in cyber