IT & Cloud Security Manager

Spire.AI is a deep-tech Context Intelligence company and a global pioneer in domain-aware AI operating models for solving complex enterprise objectives. The Spire.AI context intelligence technology platform, OpenKnowra, has been engineered to bridge the gap between fragmented enterprise data and actionable intelligence, enabling enterprises to create a Contextual AI layer that solves for complex objectives by delivering coherent autonomy in designed operating frameworks.

Built on the proprietary SpiroBot knowledge graph and configurable deep-domain operating models in real enterprise environments, OpenKnowra connects multi-structured data, organizational semantics, and business rules into a unified context fabric. This allows enterprises to reason across complexity, maintain governance and explainability by design, and apply intelligence with precision across end-to-end objectives rather than isolated automation.

Role:

Own security and operational resilience across our hybrid cloud (AWS + GCP) and internal IT systems, while supporting technical controls for our compliance certifications. This role requires comfort operating with ambiguity in a fast moving AI SaaS company, and being the first point of response for infrastructure/security incidents, including outside standard hours given our global customer base.

Key Responsibilities:

IT & Infrastructure:

- Own hardware/software asset lifecycle: procurement, upgrades, decommissioning

- Own incident and change management for infrastructure and cloud security within SLAs

- Maintain and test BCP/DR plans across cloud workloads

Cloud & Security:

- Own security posture across AWS (IAM, VPC, encryption, CloudTrail/GuardDuty) and GCP (IAM, VPC Service Controls, Security Command Center)

- Harden compute, container, serverless, and database workloads on both platforms

- Own vulnerability management end to end; lead VAPT coordination and remediation

- Implement EDR/XDR, NDR, firewalls, CSPM, CIEM

- Administer IAM/SSO/MFA across cloud and SaaS; run access reviews

- Pilot AI/GenAI tools for security operations and log triage, bringing genuine interest in applying AI to security automation and observability

Compliance Support:

- Technical control owner for ISO 27001:2022; support ISO 42001 and SOC 2 Type II audit cycles

- Support DPDP Act 2023 technical safeguards

- Provide technical input on vendor/customer security questionnaires

- Run risk assessments and threat modeling in close collaboration with engineering

Program & Relationship Management:

- Embed security into engineering/product deployment practices, working closely with GRC, engineering, and product teams

- Run periodic security awareness training, with strong written communication for technical documentation and exec level reporting

- Manage vendor/cloud provider security SLAs

- Act as primary escalation point for infrastructure/security incidents, including off hours, with flexibility to support customers and stakeholders across time zones and treating infrastructure availability as a personal responsibility

Required Qualifications:

- 8 - 12 years in IT infrastructure and/or cloud security, with hands-on ownership of security operations

- Strong hands-on AWS and GCP experience (IAM, networking, security services) in hybrid setups

- Working knowledge of ISO 27001, SOC 2, or similar frameworks

- Experience with vulnerability management, incident response, EDR/XDR, NDR, CSPM, CIEM

- Scripting/automation skills (Python, Bash, or similar)

- Bachelor's degree in CS, IT, or related field (or equivalent experience)