Cloud Infrastructure & Technical Assurance Lead

About the Role:

The Cloud Infrastructure & Technical Assurance Lead is a senior technical role within Valocity's global IT Operations function.

The role combines three areas that are normally treated separately:

• Cloud infrastructure and security governance
• Technical compliance, evidence and audit readiness
• Customer-facing technical architecture and assurance

The successful candidate must be capable of working directly with Azure infrastructure while also representing Valocity confidently in technical discussions with banks, auditors, customer security teams and senior stakeholders.

This is not primarily a governance or documentation role. It requires someone who understands how the underlying technology actually works and can explain, troubleshoot and evidence it.

In One Line:

A senior Azure infrastructure professional who can operate the platform, prove that its controls work and confidently explains Valocity's technical architecture to banks, customers and auditors.

What Makes This Role Different:

• Traditional infrastructure roles often focus primarily on operating technology
• Traditional compliance roles often focus on controls, policies and evidence
• This role needs to understand both, while also being capable of representing Valocity's architecture to sophisticated financial services customers

Major Responsibilities:

1. Azure infrastructure governance: Provide senior technical oversight of Valocity's Azure infrastructure and security posture. Review and maintain security and operational standards across Azure environments, investigate and remediate infrastructure issues with cloud and platform engineers, ensure configuration aligns with security, compliance and operational standards, review infrastructure-as-code changes, and assist with complex infrastructure incidents.

2. Customer technical architecture and assurance: Act as one of Valocity's senior technical representatives for customers in India. Work with banks, financial institutions and customer security teams to explain how Valocity's platform meets their technical requirements, support architecture and security reviews during onboarding and implementation, translate customer requirements into internal requirements, and ensure technical commitments accurately reflect platform capability.

3. Compliance automation and Vanta: Own the operational administration, technical integrations and evidence quality of Valocity's compliance automation platform used for ISO/IEC 27001, SOC 2 and other assurance activities. Validate integrations rather than relying solely on a "connected" status, reconcile assets against Azure source environments, investigate failing controls, and track remediation to closure.

4. Technical evidence and documentation: Maintain clear, traceable and reproducible evidence showing how infrastructure implements security and compliance requirements, including control evidence maps, technical runbooks and architecture documentation, and improve automation of evidence collection.

5. Audit and customer assurance: Support ISO/IEC 27001 and SOC 2 Type II audits, participate in bank and customer audits, act as technical point of contact for auditors and customer security teams, respond to security questionnaires and technical due diligence, and track audit findings to closure.

6. Security, vulnerability and infrastructure risk: Identify and document infrastructure and cloud security risks, contribute to the information security risk register, track penetration testing and vulnerability findings, review Defender for Cloud findings, and support hardening and root-cause analysis.

7. Resilience, backup and disaster recovery: Review backup configuration and coverage, coordinate disaster recovery exercises, validate recovery procedures, support testing of RTO and RPO commitments, and identify dependencies that could affect resilience.

Must Haves:

• Azure production experience: Strong hands-on experience operating production Microsoft Azure environments, including AKS, Azure Firewall, Azure Front Door, Application Gateway and WAF, VNets, NSGs, private endpoints, Azure DNS, Azure Policy, Defender for Cloud, Entra ID, Azure RBAC, PIM, Key Vault, Azure Monitor and Log Analytics.
• Kubernetes: Practical understanding of RBAC, network policies, ingress, container registries, workload identity, cluster upgrades and container security.
• Infrastructure security and governance: Strong understanding of identity and access management, least privilege, privileged access, network segmentation, encryption, key management, logging and monitoring, infrastructure hardening and cloud security posture management.
• Customer-facing technical communication: Strong ability to communicate with bank technology and security teams, enterprise architects, cloud teams, auditors, risk teams, senior customer stakeholders and Valocity senior leadership.
• Audit and assurance: Practical experience supporting ISO/IEC 27001, SOC 2, financial-services audits, customer security reviews or regulatory technology assurance, with understanding of technical versus procedural controls, automated versus manual evidence, control ownership, exceptions, remediation and evidence traceability.
• APIs and automation: Comfortable with REST APIs, JSON, OAuth, service principals and managed identities, Azure CLI, PowerShell or Python, API documentation and authentication troubleshooting.

Experience, Education and Certifications:

• A BE, BTech or equivalent qualification in CS or IT
• 6-10 years of relevant experience across cloud infrastructure, infrastructure security, platform engineering or technical assurance

Strongly preferred:

• AZ-104 - Microsoft Azure Administrator
• AZ-500 - Microsoft Azure Security Engineer