Cloud Infrastructure & Security Operations Lead at Hire Resolve

Job Description

• A leading software company is looking for a highly skilled Cloud Infrastructure & Security Operations Lead to join their team in Centurion, Gauteng. The Cloud Infrastructure & Security Operations Lead will   manage, maintain, and secure our cloud ecosystem, which is primarily centered on Google Cloud Platform (GCP).
• This role is operationally focused, prioritising system maintenance, support, and security oversight over heavy front-end architecture design. As an integral member of the InfoSec team (ISMS), you will drive technical compliance, risk mitigation, and continuous monitoring aligned with ISO 27001 standards and established SDLC governance.
• The ideal candidate is a pragmatic, process-driven professional who prioritises stability, security, and continuous support.

Responsibilities: 

Cloud Infrastructure and Operations: 

• System Maintenance & Health: Manage, monitor, and optimise cloud infrastructure (compute, networking, IAM, storage, and database services), with a primary focus on GCP.
• Escalation: Provide advanced troubleshooting and incident resolution for complex cloud infrastructure issues.
• Operational Oversight: Maintain infrastructure uptime, disaster recovery (DR) posture, automated backups, and cost optimisation.
• SDLC Operational Support: Support engineering teams in deploying code within established SDLC guardrails and CI/CD pipelines.

InfoSec and ISO 27001 Governance: 

• ISMS Integration: Act as the primary technical hands-on lead within the Information Security Management System (ISMS) team.
• ISO 27001 Compliance: Enforce controls, gather audit evidence, conduct access reviews, and maintain compliance artifacts for annual ISO 27001 certifications.
• Vulnerability & Threat Management: Perform vulnerability scans, patch management, and remediation across cloud assets; monitor security tools (e.g., GCP Security Command Center).
• Access & Governance: Audit and manage Identity and Access Management (IAM), Least Privilege access, and network security policies (VPC, firewalls).

KPI's:

• ISO 27001 Compliance Rate: Zero high-risk non-conformities during internal and external audits.
• Uptime & SLA Adherence: Maintenance of core cloud infrastructure availability targets.
• Incident Response & MTTR: Mean Time to Resolution for Tier 3 security and infrastructure incidents.
• SDLC Compliance: 100% compliance of deployed environments with secure SDLC guidelines.

Requirements: 

• Cloud Infrastructure Expertise: Experience administering and securing cloud environments. GCP is preferred, but experience with AWS or Azure is equally relevant.
• Security & Governance: Background working within an ISO 27001, SOC 2, or NIST compliant framework.
• Infrastructure as Code (IaC): Familiarity with Terraform or scripting tools for infrastructure management.
• Monitoring & Logging: Exposure to cloud logging, monitoring solutions, or SIEM tooling.

Certifications: 

• Google Cloud Certified Professional Cloud Security Engineer / Cloud Engineer
• AWS / Azure Security or Administrator Certifications
• ISO 27001 Lead Implementer / Auditor or CompTIA Security+