Data Security Lead

Job title: Data Security Lead

About the Role Data Security Lead is responsible for designing, implementing, and operating S&P Global’s enterprise IP protection capabilities. The role leads a team of engineers to convert IP security architecture into scalable solutions that provide visibility into data and IP artifacts across applications and AI systems, while ensuring compliance with policy and regulatory obligations.

What You'll Do

• Lead the design, deployment, and operation of data security platforms supporting discovery, classification, and monitoring across cloud, on-prem, SaaS, and third-party environments; ensure reliability, scalability, and integration with the security ecosystem.
• Build and operate pipelines to identify where data resides across structured and unstructured sources; implement automated data classification and tagging aligned with enterprise standards; ensure continuous discovery and reclassification as data changes.
• Integrate data security tools with IAM, cloud services, and data platforms; monitor and surface who has access to data, including privileged, service, and AI identities; detect over-permissioned access, stale entitlements, and anomalous data usage.
• Implement IP protection controls (watermarking, tagging, fingerprinting, metadata controls) and integrate into data pipelines and AI workflows; support detection and response to IP leakage events.
• Operate and tune detection mechanisms for data exposure and misuse; support security incident investigations by rapidly identifying impacted data and access paths; partner with SOC and IR teams to automate alerts and response workflows.
• Lead, mentor, and grow a team of data security engineers; establish engineering standards, coding practices, and operational runbooks; drive automation to reduce manual effort and improve consistency.
• Partner with Data Security Architects, Cloud Security, IAM, Privacy, Legal, and AI teams to translate architectural requirements into deployable engineering solutions and contribute to roadmap planning.

What We're Looking For

• 10+ years of experience in security engineering, data security, or platform security.
• Strong hands-on experience implementing data discovery, classification, and monitoring solutions.
• Deep expertise in cloud platforms (AWS, Azure, GCP) and data services.
• Experience integrating security platforms with IAM, logging, SIEM, and SOAR.
• Practical experience supporting AI/ML platforms and data pipelines.
• Familiarity with IP protection techniques, including watermarking or tagging.
• Strong scripting or programming skills (Python, Go, or similar).
• Experience operating production security platforms at scale.
• Preferred: DSPM platforms experience (Cyera, Wiz DSPM, BigID); background in regulated industries; knowledge of DLP, CASB, encryption, and key management; security or cloud certifications (CISSP, CCSP, cloud provider certs).

Nice to Have

• Experience with DSPM platforms (Cyera, Wiz DSPM, BigID).
• Background in regulated industries (financial services, data providers).
• Knowledge of DLP, CASB, encryption, and key management.
• Security or cloud certifications (CISSP, CCSP, cloud provider certs).

Compensation & Benefits Salary and benefits are not disclosed in this posting. The company highlights a mission to advance essential intelligence and a culture based on integrity, discovery, and partnership. Our benefits are described as part of the overall employee value proposition.