Job Title

S&P Global CorporateAbout the Role: GenAI Cloud Security LeadThe Team: The GenAI Cloud Security Lead Architect, part of the Cloud Security team, is responsible for safeguarding an organization's digital assets, data, and applications hosted in cloud environments. Our primary focus is to ensure the integrity, confidentiality, and resilience of AI models, specifically focusing on detecting and mitigating vulnerabilities, implementing robust encryption practices, and safeguarding against potential misuse or exploitation of generated outputs. The Team is based in New York, New Jersey, London, Delhi NCR and Hyderabad.Responsibilities and Impact:A cloud security team plays a vital role in enhancing an organization's security posture within cloud environments. By proactively identifying and mitigating risks, safeguarding sensitive data, ensuring compliance, and responding to security incidents, the team not only reduces security threats but also instills confidence, supports innovation, and promotes business continuity, thereby contributing significantly to S&P Global's success and resilience in the cloud era. The position is critical as the business is very dynamic and constantly evolving to Power the Markets of the Future.- Develop and implement comprehensive AI/ML security strategies, policies, standards, and guidelines to protect organizational assets and ensure the secure operation of AI and ML systems - Build security control framework and generic reference architectures for GenAI applications. - Assist with identifying security requirements to be followed by LoB/Dev teams when building GenAI applications. - Conduct threat modeling exercises to identify potential security risks and vulnerabilities in AI systems, working closely with AI development teams to integrate security into the design and development processes. - Provide thought leadership and creativity to mature Gen AI security governance embedding into our existing cyber security risk appetite framework. - Perform security assessments on AI applications and systems to identify and address vulnerabilities. Develop and implement testing methodologies to evaluate the security posture of AI models and frameworks. - Develop configuration hardening guidelines for Cloud Services including native Generative AL/ML services such as AWS SageMaker, SageMaker Notebooks, Bedrock, Kendra, OpenSearch, Lambda, Azure Cognitive Services, Open AI, GCP Vertex AI etc. - Stay updated on relevant regulations and standards related to AI security and ensure compliance. Collaborate with legal and compliance teams to align AI systems with industry and regulatory requirements.What We’re Looking For:Basic Required Qualifications:- 10+ years of Information Security experience in areas of Information/Cloud Security - 5+ years of Software engineering and/or software development experience is required. - Certification in any of the AI/ML cloud services - Good understanding of application and data security, AI/Gen AI, Machine Learning, or data science - Proficiency in Python, R, Java, C++, Julia, MATLAB, Scala, LISP, Prolog, and JavaScript for various AI/ML applications, including data analysis, high-performance computing, enterprise-level applications, and web-based ML - Strong understanding of GenAI, LLM, Prompt Engineering and OWASP LLM Top 10 - Security architecture assessments for one or more IT systems such as Web, Mobile, APIs/Microservices, Cloud (AWS/GCP/Azure/Oracle) - Experience developing Reference Security Architecture and Design Patterns to support proactive and automated controls. - A demonstrated knowledge of information security standards, rules and regulations related to information security and data confidentiality and other various security standards and policies. - Good interpersonal and communication skills with the ability to influence at all levels of the organization, while being able to simplify complex IS topics - Excellent problems solving abilities and analytical skills - Ability to organize, prioritize, and lead multiple deliverables simultaneously across a large, global corporate environment.