Full-Time
Lead Information Security Engineer
Vulnerability Management
Updated on 9/4/2026
S&P Global
10,001+ employees
Delivers credit ratings, market data, indices
Compensation Overview
$125k - $145k/yr
New York, NY, USA
Hybrid
Three days on-site per week required.
Bachelor's
 Cybersecurity (1) |
|---|
Get referred to S&P Global
See people who can refer or advise you
- At least 7 years of operational security experience in vulnerability management, application security testing, or technical project management within large-scale, distributed enterprise environments.
- Deep expertise in vulnerability assessment frameworks including Common Vulnerabilities and Exposures, Common Vulnerability Scoring System, and Common Weakness Enumeration, plus enterprise vulnerability-management platforms such as Qualys, Tanium, or Rapid7.
- Strong application-security knowledge, including assessing risk, mapping vulnerabilities to exploitation techniques, and translating technical findings into actionable business recommendations.
- Experience with application-security testing tools, including Dynamic Application Security Testing and Static Application Security Testing platforms such as Fortify, Checkmarx, or Veracode.
- A Bachelor's degree in Computer Science, Cybersecurity, Information Technology, or equivalent professional experience in information-security roles.
- Demonstrated ability to lead cross-functional initiatives and align stakeholders without direct authority.
- Ability to present security risks and recommendations to technical teams and executive audiences.
- Relevant information-security certifications such as Certified Information Systems Security Professional, Certified Information Security Manager, Certified Ethical Hacker, or Global Information Assurance Certification Incident Handler.
- Lead the enterprise-wide vulnerability-management lifecycle across infrastructure, cloud, and application environments, providing strategic oversight and risk-based prioritization to protect critical business assets.
- Drive cross-functional collaboration with application teams, IT managers, and business stakeholders to ensure timely vulnerability remediation while balancing security requirements with business priorities.
- Develop comprehensive reporting and metrics programs using multiple data sources to provide executive leadership with visibility into organizational security posture and risk trends.
- Mentor and guide junior security professionals while contributing to program maturity through process improvements, governance frameworks, and tooling-strategy development.
- Support regulatory compliance and audit activities by ensuring alignment with enterprise security policies, industry standards, and emerging-technology risk-management requirements.
- Establish and monitor key performance indicators for vulnerability remediation, creating accountability frameworks that drive measurable improvements in security outcomes.
- Advanced vulnerability management expertise, including leading complex assessments across on-premises and cloud environments, network, application, and configuration scanning, and remediation strategies.
- Proficiency with security reporting and analytics tools such as Power BI or Tableau for executive dashboards and security-metrics visualization.
- Knowledge of information security frameworks including the National Institute of Standards and Technology Cybersecurity Framework and ISO 27001, plus risk-management methodologies and audit or regulatory compliance support.
- Foundational understanding of cloud platforms, artificial intelligence and machine-learning systems, and associated security risks such as model vulnerabilities and data-protection considerations.
S&P Global supplies financial information, analytics, and benchmarks to investors, corporations, and governments. Its offerings include credit ratings, market intelligence, and indices, along with price assessments and energy data. Clients access these tools through subscriptions, licensing, and transaction-based services, integrating data and research into their workflows. The company aims to help clients assess risk, make informed decisions, and drive growth while upholding corporate responsibility and ESG commitments.
Company Size
10,001+
Company Stage
IPO
Headquarters
New York City, New York
Founded
1917
Get referred to S&P Global
See people who can refer or advise you
Simplify's Take
What believers are saying
- Q2 2026 pro forma revenue rose 11%, with EPS up 23%.
- Ratings revenue grew 17% and Indices revenue grew 20% on July 28, 2026.
- August 12, 2026 Microsoft partnership expands distribution across analyst workflows and Excel.
What critics are saying
- July 1, 2026 Mobility spin-off removed diversification, increasing dependence on Ratings and Indices.
- 2026 restructuring cut roughly 450 jobs, signaling integration strain and cost pressure.
- 2027 issuance slowdown hits Ratings transaction revenue first, then group margins.
What makes S&P Global unique
- August 12, 2026 Microsoft Copilot integration embeds S&P data inside daily workflows.
- March 10, 2026 SSI Automate tackles manual settlement instructions for T+1 readiness.
- July 28, 2026 Q2 showed Ratings and Indices record growth, proving franchise durability.
Help us improve and share your feedback! Did you find this helpful?
Benefits
Health Insurance
Unlimited Paid Time Off
Professional Development Budget
401(k) Company Match
Family Planning Benefits
Employee Discounts
Company News
S&P Global has made a strategic investment in SSImple, a fintech firm specialising in Standing Settlement Instructions (SSI) management. The partnership aims to modernise the handling of SSIs, which are critical for post-trade settlement but often rely on fragmented, manual processes. The collaboration comes as markets transition to shorter settlement cycles. The US has already moved to T+1 settlement, whilst the UK and EU are shifting to T+1 in October 2027. Shorter cycles reduce time for resolving exceptions, increasing the need for accurate, automated data. Together, the firms have developed SSI Automate, combining SSImple's SSI expertise with S&P Global's market connectivity and workflow capabilities. The solution aims to improve data quality, reduce manual intervention, and support straight-through processing across post-trade operations.
The S&P 500 edged lower despite strong results from NVIDIA and steady core inflation data. NVIDIA reported revenue of $96.2 billion, surpassing the $92 billion consensus, with earnings per share of $2.22 beating the $2.09 estimate. Revenue rose 106% year-over-year. The index closed nearly flat at 7,675.70 points before NVIDIA's report. Core personal consumption expenditures rose 0.2% monthly and 3.3% annually in July, matching economists' expectations. NVIDIA shares fell 1.59% during regular trading to $209.66 but jumped 4.32% to $218.72 in after-hours trading. Hyperscaler revenue more than doubled to $48.7 billion, whilst the AI cloud, industrial, and enterprise segment added $40.3 billion, up 138%. NVIDIA carries the largest weight in the S&P 500, making its quarterly results particularly consequential for the index.
The S&P 500's dividend yield has fallen to a record low of just above 1%, according to Charlie Bilello, chief market strategist at Creative Planning. Whilst dividend payouts haven't decreased, stock prices have risen much faster, particularly amongst megacap technology companies that pay little or nothing in dividends. The shift is forcing retirees to adapt their strategies. Steven Yedlin, a 75-year-old retired doctor, has stopped automatically reinvesting dividends and now directs them to high-yield money-market funds instead. Recent dividend suspensions at Papa John's and UWM Holdings highlight the risks. Papa John's scrapped its quarterly payout following an 8.8% revenue decline to $482.4 million, choosing to redirect funds toward franchise incentives and technology improvements instead.
Wolfe Research reports strong second-quarter earnings momentum for S&P 500 companies, with 69% of the 465 firms that had reported by Wednesday beating revenue forecasts. The dollar-weighted revenue surprise reached 3.8%. Corporate guidance for the third quarter shows unusual confidence, with 64% of the 86 companies providing guidance offering midpoints above consensus—the highest proportion since the COVID period. The firm expects S&P 500 operating earnings per share to grow 31% in 2026, or approximately 27% when adjusted for one-time gains from mega-cap technology companies. Wolfe characterises this as the strongest fundamental environment outside a post-recession recovery in over 50 years. Sustainability of growth into 2027 remains uncertain, particularly given heavy capital expenditure on artificial intelligence.
Expand Energy stands out among three companies popular with Wall Street analysts, according to StockStory's independent analysis. The natural gas and oil producer, formerly Chesapeake Energy, achieved 19.4% annual revenue growth over five years. Its $12.66 billion revenue base provides strong negotiating leverage with suppliers. The company also improved its EBITDA profits and efficiency during this period. In contrast, analysts may be overlooking risks at S&P Global and MSCI, despite bullish consensus price targets suggesting upside of 23.9% and 22.3% respectively. S&P Global's earnings per share growth of 8.5% annually lagged behind revenue gains over the past five years. MSCI shows negative return on equity, indicating management lost money attempting to expand the business. The analysis notes that analysts rarely issue sell ratings, partly because their firms often seek business from covered companies.