About the Role:

Grade Level (for internal use):

12

We are seeking an Associate Director – Lead Security Resilience with 10+ years of deep technical and leadership experience to own and evolve our enterprise-wide security resilience program in a high-velocity, AI-first organization.

You will be the authoritative voice on resilience strategy—ensuring the company can withstand, adapt to, and rapidly recover from cyber attacks, major incidents, and disruptive events without compromising trust, availability, or velocity. You will partner at the highest levels with Engineering, Infrastructure, Product, Risk, and Executive Leadership to turn resilience from a compliance checkbox into a measurable competitive advantage.

This is a strategic yet deeply hands-on leadership role: you will design resilience architectures, drive chaos engineering at scale, lead red team/blue team programs, own incident response orchestration, and embed resilience-by-design across cloud, AI, and data platforms.

The Impact

• Build an organization that survives and thrives through sophisticated attacks and outages
• Directly protect next-generation AI products serving millions of users
• Equity in a high-growth, mission-driven AI company
• Flexible, remote-first culture with global impact
• Work alongside world-class AI researchers, platform engineers, and security leaders
• Define the industry benchmark for resilient AI systems

Key Responsibilities

• Resilience Strategy & Governance: Develop and maintain the enterprise resilience roadmap, including business continuity, disaster recovery, crisis management, and cyber recovery capabilities across multi-cloud and on-prem environments.
• Chaos & Reliability Engineering Leadership: Scale chaos engineering, fault-injection, and GameDay programs to validate resilience of AI training/inference clusters, real-time serving systems, and critical data pipelines.
• Advanced Incident Response & Recovery: Own the technical incident command process, lead high-severity incident response, and continuously mature detection-to-recovery runbooks and playbooks.
• Red Team / Adversarial Resilience: Direct advanced red team operations focused on AI-specific attack surfaces (model theft, poisoning, inversion, supply-chain) and cloud-scale persistence techniques.
• Resilient Architecture Patterns: Define and enforce resilience reference architectures (circuit breakers, bulkheads, graceful degradation, immutable infrastructure, automated failover) across the stack.
• Metrics & Assurance: Establish and report on resilience KPIs/SLIs (RTO, RPO, MTTD, MTTR, blast radius containment) and drive continuous improvement through post-mortems and resilience reviews.
• Cross-Functional Influence: Chair the Resilience Working Group, align executives on risk appetite vs. recovery objectives, and secure budget/investment for resilience initiatives.

Required Qualifications

• 10+ years of progressive experience in security resilience, incident response, reliability engineering, or site reliability leadership roles in cloud-native, high-scale environments.
• Proven track record of building and leading enterprise resilience or SRE programs that materially reduced downtime and attack impact.
• Hands-on experience designing and executing large-scale chaos engineering and red team exercises in production.
• Deep expertise in modern incident response frameworks (NIST, CREST, PICERL) and orchestration tools (e.g., PagerDuty, xMatters, Resolve, Rootly).
• Strong architecture-level knowledge of multi-cloud environments (AWS, GCP, Azure) and AI infrastructure (GPU clusters, model serving, data lakes).
• Experience leading technical response to nation-state level or high-profile security incidents preferred.
• Relevant certifications: CISSP, CISM, GIAC (GCTI, GNFA, GCIH), or SRE-related credentials strongly preferred.

Preferred Skills

• Familiarity with NIST Cybersecurity Framework (Recover function), NIST AI RMF resilience controls, and DRI/BCI standards
• Proficiency in chaos tools (Gremlin, Chaos Monkey, Litmus, PowerfulSeal) and observability stacks (Datadog, Honeycomb, Lightstep)
• Experience securing AI/ML supply chains and defending against adversarial ML attacks
• Prior success influencing executive leadership and securing multi-million-dollar resilience investments

Who You Are

• Obsessed with recovery: You measure success in minutes-to-recovery, not just prevention.
• Calm under fire: You’ve led war rooms during ransomware, DDoS, and zero-day exploits.
• Builder and breaker: You both architect resilient systems and know exactly how to tear them down.
• Collaborative force multiplier: Engineers trust you because you’ve been in the trenches with them.
• Data-driven pragmatist: You balance ideal resilience with business velocity and cost.
• AI-aware: You understand the unique resilience challenges of training clusters, inference endpoints, and prompt interfaces.

If you’ve ever looked at a major outage or breach and thought, “We could have recovered in half the time,” this role was built for you.

What’s In It For You?

Our Mission:

Advancing Essential Intelligence.

Our People:

We're more than 35,000 strong worldwide—so we're able to understand nuances while having a broad perspective. Our team is driven by curiosity and a shared belief that Essential Intelligence can help build a more prosperous future for us all.From finding new ways to measure sustainability to analyzing energy transition across the supply chain to building workflow solutions that make it easy to tap into insight and apply it. We are changing the way people see things and empowering them to make an impact on the world we live in. We’re committed to a more equitable future and to helping our customers find new, sustainable ways of doing business. Join us and help create the critical insights that truly make a difference.

Our Values:
Integrity, Discovery, Partnership

Throughout our history, the world's leading organizations have relied on us for the Essential Intelligence they need to make confident decisions about the road ahead. We start with a foundation of integrity in all we do, bring a spirit of discovery to our work, and collaborate in close partnership with each other and our customers to achieve shared goals.

Benefits:

We take care of you, so you can take care of business. We care about our people. That’s why we provide everything you—and your career—need to thrive at S&P Global.

Our benefits include: 

• Health & Wellness: Health care coverage designed for the mind and body.

• Flexible Downtime: Generous time off helps keep you energized for your time on.

• Continuous Learning: Access a wealth of resources to grow your career and learn valuable new skills.

• Invest in Your Future: Secure your financial future through competitive pay, retirement planning, a continuing education program with a company-matched student loan contribution, and financial wellness programs.

• Family Friendly Perks: It’s not just about you. S&P Global has perks for your partners and little ones, too, with some best-in class benefits for families.

• Beyond the Basics: From retail discounts to referral incentive awards—small perks can make a big difference.

For more information on benefits by country visit: https://spgbenefits.com/benefit-summaries

Global Hiring and Opportunity at S&P Global:

At S&P Global, we are committed to fostering a connected and engaged workplace where all individuals have access to opportunities based on their skills, experience, and contributions. Our hiring practices emphasize fairness, transparency, and merit, ensuring that we attract and retain top talent. By valuing different perspectives and promoting a culture of respect and collaboration, we drive innovation and power global markets.

Recruitment Fraud Alert:

If you receive an email from a spglobalind.com domain or any other regionally based domains, it is a scam and should be reported to [email protected]. S&P Global never requires any candidate to pay money for job applications, interviews, offer letters, “pre-employment training” or for equipment/delivery of equipment. Stay informed and protect yourself from recruitment fraud by reviewing our guidelines, fraudulent domains, and how to report suspicious activity here.

20 - Professional (EEO-2 Job Categories-United States of America), IFTECH202.2 - Middle Professional Tier II (EEO Job Group)