IT & Cloud Security Lead (Infrastructure & Technology)

IT & Cloud Security Lead (Infrastructure & Technology)

Job Description

Company: Spire Technologies & Solutions Private Limited (Spire.AI / OpenKnowra)

Department: IT / Governance, Risk & Compliance

Reports to: CISO/Director

Location: Bengaluru, India

Employment Type: Full-time

About Spire.AI

Spire.AI is a deep-tech Context Intelligence company and a global pioneer in domain-aware AI operating models for solving complex enterprise objectives. The Spire.AI context intelligence technology platform, OpenKnowra, has been engineered to bridge the gap between fragmented enterprise data and actionable intelligence, enabling enterprises to create a Contextual AI layer that solves for complex objectives by delivering coherent autonomy in designed operating frameworks.

Built on the proprietary SpiroBot knowledge graph and configurable deep-domain operating models in real enterprise environments, OpenKnowra connects multi-structured data, organizational semantics, and business rules into a unified context fabric. This allows enterprises to reason across complexity, maintain governance and explainability by design, and apply intelligence with precision across end-to-end objectives rather than isolated automation.

Role Overview

We're looking for an IT & Cloud Security Lead to drive security and operational resilience across our hybrid cloud (AWS + GCP) and internal IT systems, while supporting the technical controls behind our compliance certifications. This role requires comfort operating with ambiguity in a fast-moving AI SaaS company, and being one of the first points of response for infrastructure/security incidents including outside standard hours, given our global customer base.

Key Responsibilities

IT & Infrastructure

• Manage hardware/software asset lifecycle: procurement, upgrades, decommissioning
• Handle incident and change management for infrastructure and cloud security within SLAs
• Maintain and test BCP/DR plans across cloud workloads

Cloud & Security

• Drive security posture across AWS (IAM, VPC, encryption, CloudTrail/GuardDuty) and GCP (IAM, VPC Service Controls, Security Command Center)
• Harden compute, container, serverless, and database workloads on both platforms
• Manage vulnerability management end to end; support VAPT coordination and remediation
• Implement and maintain EDR/XDR, NDR, firewalls, CSPM, CIEM
• Administer IAM/SSO/MFA across cloud and SaaS; run access reviews
• Explore and pilot AI/GenAI tools for security operations and log triage, bringing genuine interest in applying AI to security automation and observability

Compliance Support

• Act as technical control point for ISO 27001:2022; support ISO 42001 and SOC 2 Type II audit cycles
• Support DPDP Act 2023 technical safeguards
• Provide technical input on vendor/customer security questionnaires
• Run risk assessments and threat modeling in close collaboration with engineering

Program & Relationship Management

• Embed security into engineering/product deployment practices, working closely with GRC, engineering, and product teams
• Run periodic security awareness training, with strong written communication for technical documentation and reporting
• Support vendor/cloud provider security SLAs
• Act as an escalation point for infrastructure/security incidents, including off hours, with flexibility to support customers and stakeholders across time zones and treating infrastructure availability as a personal responsibility

Required Qualifications

• 5–8 years in IT infrastructure and/or cloud security, with hands-on experience in security operations
• Strong hands-on AWS and GCP experience (IAM, networking, security services) in hybrid setups
• Working knowledge of ISO 27001, SOC 2, or similar frameworks
• Experience with vulnerability management, incident response, EDR/XDR, NDR, CSPM, CIEM
• Scripting/automation skills (Python, Bash, or similar)
• Bachelor's degree in CS, IT, or related field (or equivalent experience)