Cloud Infrastructure & Security Operations Lead

Hire Resolve; Centurion; On-site; ZAR 900,000 - 1,500,000; Full time

Job summary

Hire Resolve seeks a Cloud Infrastructure & Security Operations Lead in Centurion, Gauteng. The role focuses on maintaining, securing, and optimizing our cloud ecosystem, primarily on Google Cloud Platform (GCP).

As part of the ISMS team, you will drive ISO 27001 compliance, risk mitigation, and continuous monitoring aligned with SDLC governance, balancing stability and security across the cloud stack.

Qualifications

• Experience administering and securing cloud environments, with GCP preferred.
• Background in ISO 27001, SOC 2, or NIST compliant frameworks.
• Familiarity with IaC tooling (e.g., Terraform) and cloud monitoring/logging.

Responsibilities

• Maintain cloud infrastructure health, security, and DR posture.
• Perform vulnerability scans, patch management, and remediation.
• Govern IAM, least privilege, and network security policies (VPCs, firewalls).
• Support SDLC guardrails and CI/CD pipelines for deployments.

Skills

Cloud expertise

GCP

IAM management

IaC Terraform

CI/CD experience

InfoSec governance

Vulnerability management

SIEM tooling

Tools

Terraform

GCP Security Command Center

SIEM

Job description

A leading software company is looking for a highly skilledCloud Infrastructure & Security Operations Lead to join their team in Centurion, Gauteng. TheCloud Infrastructure & Security Operations Lead will manage, maintain, and secure our cloud ecosystem, which is primarily centered on Google Cloud Platform (GCP).

This role is operationally focused, prioritising system maintenance, support, and security oversight over heavy front-end architecture design. As an integral member of the InfoSec team (ISMS), you will drive technical compliance, risk mitigation, and continuous monitoring aligned with ISO 27001 standards and established SDLC governance.

The ideal candidate is a pragmatic, process-driven professional who prioritises stability, security, and continuous support.

Responsibilities

Cloud Infrastructure and Operations

• System Maintenance & Health: Manage, monitor, and optimise cloud infrastructure (compute, networking, IAM, storage, and database services), with a primary focus on GCP.
• Escalation: Provide advanced troubleshooting and incident resolution for complex cloud infrastructure issues.
• Operational Oversight: Maintain infrastructure uptime, disaster recovery (DR) posture, automated backups, and cost optimisation.
• SDLC Operational Support: Support engineering teams in deploying code within established SDLC guardrails and CI/CD pipelines.

InfoSec and ISO 27001 Governance

• ISMS Integration: Act as the primary technical hands-on lead within the Information Security Management System (ISMS) team.
• ISO 27001 Compliance: Enforce controls, gather audit evidence, conduct access reviews, and maintain compliance artifacts for annual ISO 27001 certifications.
• Vulnerability & Threat Management: Perform vulnerability scans, patch management, and remediation across cloud assets; monitor security tools (e.g., GCP Security Command Center).
• Access & Governance: Audit and manage Identity and Access Management (IAM), Least Privilege access, and network security policies (VPC, firewalls).

KPI's

• ISO 27001 Compliance Rate: Zero high-risk non-conformities during internal and external audits.
• Uptime & SLA Adherence: Maintenance of core cloud infrastructure availability targets.
• Incident Response & MTTR: Mean Time to Resolution for Tier 3 security and infrastructure incidents.
• SDLC Compliance: 100% compliance of deployed environments with secure SDLC guidelines.

Requirements

• Cloud Infrastructure Expertise: Experience administering and securing cloud environments. GCP is preferred, but experience with AWS or Azure is equally relevant.
• Security & Governance: Background working within an ISO 27001, SOC 2, or NIST compliant framework.
• Infrastructure as Code (IaC): Familiarity with Terraform or scripting tools for infrastructure management.
• Monitoring & Logging: Exposure to cloud logging, monitoring solutions, or SIEM tooling.

Certifications

• Google Cloud Certified Professional Cloud Security Engineer / Cloud Engineer
• AWS / Azure Security or Administrator Certifications
• ISO 27001 Lead Implementer / Auditor or CompTIA Security+

Our client is offering a highly competitive salary for this role based on experience.