About this role
As a Lead DevSecOps Engineer, you will define and implement the security strategy for S&P Global's software development lifecycle. You will lead a team to build automated controls across the developer toolchain, ensuring security without hindering engineering velocity. This role offers enterprise-scale ownership of critical security tools and the opportunity to shape governance for emerging technologies like AI-assisted development.
What we are looking for 6
- Own SDLC security strategy, policy framework, and roadmap
- Lead and grow a team of DevSecOps engineers
- Automate security controls across GitHub Enterprise, CI/CD, and cloud environments
- Govern emerging technologies like AI-assisted development and software supply chain security
- Ensure compliance with frameworks such as SOX, SOC 2, and ISO 27001
- Hands-on experience with SAST, SCA, secrets scanning, and IAM