IT & Cloud Security Manager

About Spire.AI: Spire.AI is a deep-tech Context Intelligence company and a global pioneer in domain-aware AI operating models for solving complex enterprise objectives. The Spire.AI context intelligence technology platform, OpenKnowra™, has been engineered to bridge the gap between fragmented enterprise data and actionable intelligence, enabling enterprises to create a Contextual AI layer that solves for complex objectives by delivering coherent autonomy in designed operating frameworks.

Built on the proprietary SpiroBot® knowledge graph and configurable deep-domain operating models in real enterprise environments, OpenKnowra connects multi-structured data, organizational semantics, and business rules into a unified context fabric. This allows enterprises to reason across complexity, maintain governance and explainability bydesign, and apply intelligence with precision across end-to-end objectives rather than isolated automation.

Role: Own security and operational resilience across our hybrid cloud (AWS + GCP) and internal IT systems, while supporting technical controls for our compliance certifications. This role requires comfort operating with ambiguity in a fast moving AI SaaS company, and being the first point of response for infrastructure/security incidents, including outside standard hours given our global customer base.

Key Responsibilities

IT & Infrastructure

• Own hardware/software asset lifecycle: procurement, upgrades, decommissioning
• Own incident and change management for infrastructure and cloud security within SLAs
• Maintain and test BCP/DR plans across cloud workloads

Cloud & Security

• Own security posture across AWS (IAM, VPC, encryption, CloudTrail/GuardDuty) and GCP (IAM, VPC Service Controls, Security Command Center)
• Harden compute, container, serverless, and database workloads on both platforms
• Own vulnerability management end to end; lead VAPT coordination and remediation
• Implement EDR/XDR, NDR, firewalls, CSPM, CIEM
• Administer IAM/SSO/MFA across cloud and SaaS; run access reviews
• Pilot AI/GenAI tools for security operations and log triage, bringing genuine interest in applying AI to security automation and observability

Compliance Support

• Technical control owner for ISO 27001:2022; support ISO 42001 and SOC 2 Type II audit cycles
• Support DPDP Act 2023 technical safeguards
• Provide technical input on vendor/customer security questionnaires
• Run risk assessments and threat modeling in close collaboration with engineering

Program & Relationship Management

• Embed security into engineering/product deployment practices, working closely with GRC, engineering, and product teams
• Run periodic security awareness training, with strong written communication for technical documentation and exec level reporting
• Manage vendor/cloud provider security SLAs
• Act as primary escalation point for infrastructure/security incidents, including off hours, with flexibility to support customers and stakeholders across time zones and treating infrastructure availability as a personal responsibility

Required Qualifications

• 8+ years in IT infrastructure and/or cloud security, with hands-on ownership of security operations
• Strong hands-on AWS and GCP experience (IAM, networking, security services) in hybrid setups
• Working knowledge of ISO 27001, SOC 2, or similar frameworks
• Experience with vulnerability management, incident response, EDR/XDR, NDR, CSPM, CIEM
• Scripting/automation skills (Python, Bash, or similar)
• Bachelor's degree in CS, IT, or related field (or equivalent experience)