The Infrastructure and Security Manager is accountable for the design, implementation, operation, and continuous improvement of the organization's IT infrastructure and cybersecurity posture. This includes cloud platforms, on-premises systems, networks, and security controls.
The role ensures that all infrastructure services are highly available, cost-effective, scalable, and secure, supporting both internal operations and client-facing services. The manager will also lead the development and enforcement of security policies, standards, and incident response capabilities.
Key Accountabilities
- Own end-to-end infrastructure operations across cloud, network, and end-user connectivity
- Establish and maintain a strong cybersecurity posture aligned with business risk appetite
- Ensure high availability, performance, and resilience of all IT systems
- Lead infrastructure and security strategy aligned with business growth
- Manage vendors and partners delivering infrastructure and security services
- Drive cost optimization while maintaining service quality and compliance
- Build and lead the internal team, supplemented by external partners
- Ensure compliance with regulatory, client, and contractual security requirements
Key Responsibilities & Duties
Infrastructure Management
- Design, implement, and manage enterprise infrastructure across:
- Network architecture (LAN/WAN, internet circuits, VPNs)
- Cloud platforms for servers, storage, and virtualization (if applicable)
- Ensure scalability of infrastructure to support rapid business growth
- Oversee office IT infrastructure (connectivity, Wi-Fi, structured cabling, server rooms)
- Manage infrastructure monitoring tools (e.g. SolarWinds or equivalent)
- Define and enforce SLAs, uptime targets, and performance metrics
Cybersecurity
- Develop and implement cybersecurity frameworks, policies, and controls
- Oversee endpoint, network, and cloud security (e.g. firewalls, EDR, IAM)
- Lead vulnerability management, patching, and penetration testing activities
- Establish incident detection and response processes (SOC/NOC coordination if outsourced)
- Ensure data protection and privacy compliance (e.g. ISO 27001, GDPR where applicable)
- Conduct regular security risk assessments and audits
Operations & Service Management
- Ensure stable day-to-day operations of all infrastructure services
- Implement ITIL-aligned processes (incident, problem, change management)
- Support business continuity and disaster recovery planning and testing
- Drive automation and operational efficiency improvements
Vendor & Stakeholder Management
- Manage third-party providers (telcos, cloud providers, MSPs, security vendors)
- Negotiate contracts, SLAs, and service delivery expectations
- Act as the primary escalation point for infrastructure and security issues
- Partner with internal stakeholders (Operations, HR, Finance, Clients)
Strategy & Governance
- Develop infrastructure and security roadmap aligned with business strategy
- Provide input into office build-outs, acquisitions, and new site expansions
- Establish governance frameworks, standards, and documentation
- Report on infrastructure performance, risks, and security posture to leadership
Personal Skills & Qualities
- Strong ownership mindset with accountability for outcomes, not just tasks
- Ability to operate both strategically and hands-on when required
- Calm and structured under pressure, especially during incidents
- Strong problem-solving and analytical thinking skills
- Excellent communication skills, able to translate technical topics for non-technical stakeholders
- High attention to detail, especially in security and risk management
Page 3 of 3
- Collaborative and able to work across business and technical teams
- Vendor management and negotiation capability
- Continuous learning mindset, particularly in cloud and cybersecurity trends
- Integrity and strong sense of responsibility for protecting company and client data
Qualifications & Experience
Education
- Bachelor's degree in Information Technology, Computer Science, Engineering, or related field
Experience
- Minimum 8–12 years of experience in IT infrastructure and/or cybersecurity
- At least 3–5 years in a leadership or managerial role
- Experience managing hybrid environments (cloud + on-premise)
- Experience in BPO, financial services, or technology-driven organizations preferred
- Proven experience managing third-party vendors and outsourced service providers
Technical Skills
- Strong knowledge of:
- Cloud platforms (AWS, Azure, or GCP)
- Network design and security (firewalls, VPNs, SD-WAN)
- Infrastructure monitoring and management tools
- Identity and access management (IAM)
- Endpoint security and EDR solutions
Certifications (Preferred But Not Mandatory)
- Cloud certifications (e.g. AWS Certified Solutions Architect, Azure Administrator)
- Security certifications (e.g. CISSP, CISM, CEH)
- ITIL Foundation or higher
