Manager, Information Security

This role owns and drives all security and operating-model concerns raised by strategic enterprise customers for Icertis Cloud Infrastructure (ICI).

The role acts as the single accountable owner for:

• Cloud security posture in customer-owned Azure environments
• Deviation management (e.g., non-domain-joined VMSS)
• Operating-model alignment (patching, monitoring, CI/CD, access)
• Evidence, visibility, and executive decision support

The role exists to remove friction, ambiguity, and rework in large-customer security engagements by converting repeated questions into clear positions, guardrails, and auditable programs.

1. Strategic Customer Security Ownership (Primary)

• Own end-to-end security conversations for strategic customers
• Act as the single-threaded owner across Cloud Ops, DevOps, CPS, Engineering, and Compliance
• Translate customer security standards into implementable, testable, and supportable models
• Ensure consistent positions across decks, calls, audits, and escalations

2. Cloud Infrastructure & Operating Model Alignment

• Own customer discussions around:
  • VMSS vs VM security equivalence
  • Non-domain-joined deployments
  • Image-based enforcement, identity lifecycle, drift handling
• Lead definition and validation of:
  • Patching lifecycle and visibility
  • Monitoring and telemetry alignment (MDE, Sentinel, customer tools)
  • Support and escalation RACI in customer-owned subscriptions
• Drive clarity on what Icertis owns vs what the customer owns

3. Deviation, Risk & Exception Management

• Own formal risk narratives for deviations from customer standards

  (e.g., domain-join semantics, tooling assumptions)

• Coordinate executive-level risk acceptance with customer CSO teams
• Ensure deviations are:
  • Explicitly documented
  • Guard-railed
  • Time-bound
  • Supported by equivalent security outcomes

4. Change Management & Control Governance

• Own structured approaches for:
  • GPO change management
  • Emergency vs planned enforcement
  • Impact assessment and rollback logic
• Ensure every change has:
  • Clear ownership
  • Defined timelines
  • Evidence and traceability

5. CI/CD, Deployment & Tooling Alignment

• Own customer security posture for:
  • Git runners / CI-CD execution models
  • Private Link vs DMZ-based execution
  • Network allow-listing and proxy constraints
• Ensure deployment models remain:
  • Secure
  • Auditable
  • Scalable across future releases (not bespoke per customer)

6. Evidence, Visibility & Audit Readiness

• Own the evidence model for strategic customers:
  • Patch visibility
  • Scan outputs (SAST, SCA, VAPT)
  • Image lineage and deployment traceability
• Convert ad-hoc evidence requests into repeatable, system-driven artifacts
• Support audits without creating parallel operational processes

Core

• Deep understanding of Azure infrastructure security and operating models
• Experience operating in customer-owned cloud environments
• Strong grasp of:
  • VMSS / image-based security models
  • Patch management and visibility
  • Monitoring, telemetry, and SOC integrations
• Ability to reason about security equivalence, not just control checklists

Program & Stakeholder Leadership

• Proven ability to lead high-noise, high-scrutiny customer engagements
• Comfortable engaging CSO / architecture review boards
• Strong documentation and narrative skills for:
  • Risk acceptance
  • Decision points
  • Executive summaries

Preferred Qualifications

• Azure Security certifications
• Experience with large regulated enterprises (telecom, finance, government)
• Prior ownership of customer-specific cloud security operating models

Key Competencies

• Ownership mindset (“this is my problem end-to-end”)
• Structured thinking under ambiguity
• Ability to reduce repeated questions into durable answers
• Calm, credible presence in customer security forums

Experience

• 10-15 years in Cloud / Security / Infrastructure roles
• 5+ years owning security programs with direct enterprise customer exposure