IT & Cloud Security Lead (Infrastructure & Technology)

Spire Technologies And Solutions; Bengaluru; Hybrid; INR 2,400,000 - 4,200,000; Full time

Job summary

Spire Technologies & Solutions Private Limited (Spire.AI / OpenKnowra) is seeking an IT & Cloud Security Lead to drive security and resilience across hybrid cloud (AWS + GCP) and on‑prem IT. You will be one of the first responders for incidents outside normal hours and help embed security into engineering and product practices.

This role requires hands-on cloud security experience, governance focus, and collaboration with GRC to support ISO 27001/ SOC 2 audits along with risk assessments and

Qualifications

• 5–8 years in IT infrastructure or cloud security with hands-on ops.
• Strong hands-on AWS and GCP experience in hybrid setups.
• Familiar with ISO 27001, SOC 2 or similar frameworks.
• Experience with vulnerability management and incident response.
• Scripting/automation skills (Python, Bash).

Responsibilities

• Lead IT & infrastructure security and incident response within SLAs.
• Harden security for AWS and GCP, manage IAM, networking, and controls.
• Embed security into engineering/product deployment practices.
• Support ISO 27001/ SOC 2 audits and risk assessments.
• Pilot AI/GenAI tools for security automation and observability.

Skills

AWS & GCP security

Vulnerability management

Incident response

Scripting (Python/Bash)

ISO 27001 / SOC 2 familiarity

Education

Bachelor's degree in CS/IT or related

Tools

EDR/XDR

NDR

CSPM

CIEM

CloudTrail/GuardDuty

Job description

IT & Cloud Security Lead (Infrastructure & Technology)

Job Description

Company: Spire Technologies & Solutions Private Limited (Spire.AI / OpenKnowra)

Department: IT / Governance, Risk & Compliance

Reports to: CISO/Director

Location: Bengaluru, India

Employment Type: Full-time

About Spire.AI

Spire.AI is a deep-tech Context Intelligence company and a global pioneer in domain-aware AI operating models for solving complex enterprise objectives. The Spire.AI context intelligence technology platform, OpenKnowra, has been engineered to bridge the gap between fragmented enterprise data and actionable intelligence, enabling enterprises to create a Contextual AI layer that solves for complex objectives by delivering coherent autonomy in designed operating frameworks.

Built on the proprietary SpiroBot knowledge graph and configurable deep-domain operating models in real enterprise environments, OpenKnowra connects multi-structured data, organizational semantics, and business rules into a unified context fabric. This allows enterprises to reason across complexity, maintain governance and explainability by design, and apply intelligence with precision across end-to-end objectives rather than isolated automation.

Role Overview

We're looking for an IT & Cloud Security Lead to drive security and operational resilience across our hybrid cloud (AWS + GCP) and internal IT systems, while supporting the technical controls behind our compliance certifications. This role requires comfort operating with ambiguity in a fast-moving AI SaaS company, and being one of the first points of response for infrastructure/security incidents including outside standard hours, given our global customer base.

Key Responsibilities

IT & Infrastructure

• Manage hardware/software asset lifecycle: procurement, upgrades, decommissioning
• Handle incident and change management for infrastructure and cloud security within SLAs
• Maintain and test BCP/DR plans across cloud workloads

Cloud & Security

• Drive security posture across AWS (IAM, VPC, encryption, CloudTrail/GuardDuty) and GCP (IAM, VPC Service Controls, Security Command Center)
• Harden compute, container, serverless, and database workloads on both platforms
• Manage vulnerability management end to end; support VAPT coordination and remediation
• Implement and maintain EDR/XDR, NDR, firewalls, CSPM, CIEM
• Administer IAM/SSO/MFA across cloud and SaaS; run access reviews
• Explore and pilot AI/GenAI tools for security operations and log triage, bringing genuine interest in applying AI to security automation and observability

Compliance Support

• Act as technical control point for ISO 27001:2022; support ISO 42001 and SOC 2 Type II audit cycles
• Support DPDP Act 2023 technical safeguards
• Provide technical input on vendor/customer security questionnaires
• Run risk assessments and threat modeling in close collaboration with engineering

Program & Relationship Management

• Embed security into engineering/product deployment practices, working closely with GRC, engineering, and product teams
• Run periodic security awareness training, with strong written communication for technical documentation and reporting
• Support vendor/cloud provider security SLAs
• Act as an escalation point for infrastructure/security incidents, including off hours, with flexibility to support customers and stakeholders across time zones and treating infrastructure availability as a personal responsibility

Required Qualifications

• 5–8 years in IT infrastructure and/or cloud security, with hands-on experience in security operations
• Strong hands-on AWS and GCP experience (IAM, networking, security services) in hybrid setups
• Working knowledge of ISO 27001, SOC 2, or similar frameworks
• Experience with vulnerability management, incident response, EDR/XDR, NDR, CSPM, CIEM
• Scripting/automation skills (Python, Bash, or similar)
• Bachelor's degree in CS, IT, or related field (or equivalent experience)