Infrastructure Specialist

Job Description

Infrastructure & Security Lead

🔷 Position Title:

Infrastructure & Security Lead

🔷 Reporting To:

Head – IT

🔷 Team Reporting:

• Infra & Network Support Engineer
• System & Endpoint Support Engineer
• DPO (Governance coordination)
• Junior engineer - Infra & Network Support
• Junior engineer - System & Endpoint Support

🔷 Role Purpose

To independently lead and manage the organization’s complete IT infrastructure, cybersecurity framework, site IT operations, and infrastructure-related governance controls across Head Office and all project locations.

This role carries full operational accountability for infrastructure stability, cyber risk mitigation, audit readiness, vendor governance, and business continuity in a listed organization environment.

🔷 Key Responsibilities

1️⃣ Infrastructure Operations & Availability

• Own end-to-end IT infrastructure operations across HO and project sites
• Ensure high availability of ERP, HRMS, CRM, BI platforms from infrastructure perspective
• Manage Microsoft 365 / Azure environment / Active directory
• Ensure ISP redundancy and connectivity stability
• Monitor system uptime and performance metrics
• Proactively prevent recurring infrastructure failures

2️⃣ Cybersecurity Management

• Lead enterprise cybersecurity operations (firewall, proxy, XDR, endpoint security)
• Enforce patch management compliance
• Monitor and respond to security alerts
• Coordinate VAPT and ensure timely vulnerability closure
• Manage privileged access governance
• Ensure MFA and secure authentication enforcement

3️⃣ IT General Controls (ITGC) & Audit Ownership

• Own infrastructure-related ITGC controls
• Enforce logical access controls and approval workflows
• Coordinate quarterly access reviews
• Ensure backup validation and periodic restoration testing
• Maintain change management documentation for infra changes
• Maintain audit evidence repository
• Support statutory and internal audits

4️⃣ Backup, Disaster Recovery & Business Continuity

• Maintain structured backup policy
• Conduct periodic restoration testing
• Design and test Disaster Recovery (DR) plan
• Maintain DR drill documentation
• Ensure business continuity readiness for critical systems

5️⃣ Project Site IT Setup & Decommissioning

• Plan and execute IT setup for new project launches
• Maintain standardized deployment checklist
• Ensure IT readiness before site go-live
• Conduct site infra health monitoring
• Lead structured asset recovery during site closure
• Submit formal closure documentation

6️⃣ IT Asset & CCTV Governance

• Maintain centralized IT asset register
• Conduct monthly physical IT stock audit (HO & sites)
• Ensure asset tagging and reconciliation
• Oversee CCTV installation, uptime, and retention compliance
• Ensure secure disposal and data wipe process
• Enforce asset recovery during employee exits

7️⃣ Vendor, Contract & Renewal Governance

• Maintain centralized tracker of infrastructure contracts, licenses, and AMCs
• Ensure renewal planning (60–90 days prior to expiry)
• Prevent service disruption due to missed renewals
• Validate vendor invoices against SLAs
• Conduct vendor performance reviews
• Negotiate commercial terms during renewals
• Monitor infra budget vs actual expenditure

8️⃣ Incident & Risk Management

• Establish structured incident response framework
• Maintain incident log with root cause analysis
• Escalate major incidents to Head – IT
• Conduct periodic infrastructure risk assessment
• Develop risk mitigation roadmap

🔷 Required Experience

• 10–12 years of IT infrastructure & cybersecurity experience
• Experience managing multi-location environments
• Exposure to listed or regulated organization preferred
• Strong audit coordination exposure (ITGC / ICFR)
• Experience managing 500+ user environment preferred
• Real Estate experience is preferred.

🔷 Technical Skills

• Network architecture & firewall management
• Microsoft 365 / Azure administration
• Endpoint security & XDR tools
• Backup & DR solutions
• SIEM / log monitoring exposure preferred
• Vulnerability management tools
• Access control governance

🔷 Key Competencies

• Strong ownership mindset
• Crisis management capability
• Governance and documentation discipline
• Vendor negotiation ability
• Financial awareness (budget vs actual tracking)
• Multi-site operational control

🔷 Success Metrics (KPIs)

• System uptime ≥ 99%
• Zero major cybersecurity incidents
• Zero major ITGC audit observations
• 100% quarterly access review completion
• Successful DR drill annually
• Zero service disruption due to renewal lapse
• 100% monthly IT asset audit completion
• Zero unexplained asset variance
• CCTV uptime ≥ 98%