Application & Cloud Security Lead

About the Role: Grade Level (for internal use): 11Role Summary The Application & Cloud Security Lead will serve as a key security leader within the S&P Global Energy Division BISO team, responsible for coordinating security initiatives across application, cloud, and AI-enabled environments. This role directly supports the protection of applications, data, systems, and reputation by proactively managing cyber risk, strengthening resilience and embedding security into everything we do. The successful candidate will partner with technology, product, engineering, cloud, risk, compliance, and business stakeholders to ensure security is integrated into architecture, delivery, operations, and innovation. The role will focus on security architecture reviews, application security governance, cloud security enforcement, AI security oversight, risk remediation, and alignment with enterprise cybersecurity standards. This position requires a hands-on security leader who can translate cybersecurity requirements into practical controls, influence engineering teams, guide secure design decisions, and drive measurable improvements in cyber resilience across the Energy Division. Key Responsibilities Lead and coordinate application, cloud, and AI security initiatives across the S&P Global Energy Division in alignment with S&P Global's cyber risk management objectives. Conduct security architecture reviews for applications, APIs, cloud platforms, data flows, integrations, and AI-enabled solutions to identify risks and recommend secure design improvements. Partner with engineering, product, architecture, cloud, and business teams to embed security requirements into solution design, development, deployment, and operations. Enforce application security controls, including secure coding practices, vulnerability remediation, authentication, authorization, secrets management, dependency security, and software supply chain risk management. Oversee cloud security control implementation across public cloud environments, including identity and access management, network security, encryption, logging, monitoring, workload protection, and secure configuration. Review and assess AI and machine learning use cases for security risks, including data leakage, prompt injection, model exposure, access control, third-party AI risk, and misuse scenarios. Track, prioritize, and drive remediation of application, cloud, and AI security findings, exceptions, and risk acceptances in partnership with accountable technology owners. Support cyber risk assessments, compliance reviews, audit requests, and security reporting related to Energy Division applications, cloud services, and AI-enabled platforms. Develop and maintain metrics, dashboards, and executive-level reporting to communicate security posture, risk trends, remediation progress, and key security initiatives.