Principal Lead-Infrastructure Operations

About Our Company

Ameriprise India LLP has been providing client based financial solutions to help clients plan and achieve their financial objectives for 20 years. We are part of Ameriprise Financial Inc., a US financial planning company headquartered in Minneapolis with a global presence and diversified financial services leader with more than $1.5 trillion in assets under management, administration and advisement as of year-end 2024. The firm’s focus areas include Asset Management and Advice, Retirement Planning and Insurance Protection.

Be part of an inclusive, collaborative culture that rewards you for your contributions, and work with other talented individuals who share your passion for doing great work. You’ll also have plenty of opportunities to make your mark at the office and a difference in your community. So, if you're talented, driven and want to work for a strong, ethical company that cares, take the next step and create a career at Ameriprise India LLP.

Job Description

The position will lead the enterprise Application Configuration Management and Drift Governance program supporting regulatory and cyber risk remediation initiatives. This role will be responsible for governing application security baselines, configuration compliance, drift monitoring, enterprise-wide patch governance, exception management and executive reporting.

The individual will work closely with Application CDOs, Information Security, Vulnerability Management, Engineering, Cloud, Infrastructure, ServiceNow, CMDB, and Technology Governance teams to drive configuration hardening, baseline compliance, continuous monitoring of application configuration controls, patch compliance oversight, audit evidence readiness, and scalable governance designs for future configuration management processes.

Key Responsibilities

- Lead the Application Configuration Management and Drift Governance program across enterprise applications.
- Establish governance processes for configuration baseline creation, review, approval, and ongoing compliance monitoring.

- Own and manage the ongoing enterprise patch audit governance process on a day-to-day basis once the operating model transitions into BAU.

- Establish and run enterprise-wide patch governance routines, including audit scheduling, compliance tracking, escalation management, evidence collection, and reporting across technology teams.

- Partner with infrastructure, application, vulnerability management, and technology governance teams to ensure patch compliance gaps are reviewed, tracked, remediated, or risk accepted in line with enterprise policy and SLA expectations.

- Develop governance playbooks and repeatable control designs that can be extended from patch audit governance into future configuration management and configuration drift processes.

- Partner with Application CDOs and Information Security teams to identify applications eligible for configuration drift governance.

- Drive onboarding of applications into Configuration Drift Management phases including Baseline Documentation, Verification Capability, and Compliance Reporting.

- Govern application configuration compliance against approved baselines, enterprise security standards, vendor recommendations, and industry frameworks.

- Manage configuration exceptions, risk acceptance reviews, remediation tracking, and issue escalation.

- Monitor configuration drift trends and ensure timely remediation of identified gaps.

- Define and track KPIs, KRIs, compliance metrics, coverage metrics, and remediation SLAs.

- Define patch governance KPIs and KRIs covering audit completion, patch compliance, overdue remediation, exception ageing, SLA adherence, and control effectiveness.

- Prepare executive dashboards and governance reports for technology and cyber risk leadership.

- Coordinate regulatory, audit, and compliance evidence requests related to configuration governance.

- Collaborate with ServiceNow, CMDB, Vulnerability Management, and Technology Governance teams to improve governance maturity and reporting automation.

- Lead continuous improvement initiatives to strengthen enterprise configuration compliance and cyber resilience.

Required Qualifications

- Bachelors degree or equivalent in Computer Science, Engineering or related field; or equivalent work experience.
- 8-12 years of relevant experience required.
- Ability to communicate and articulate technical information across various organizational levels.
- Strong thought leadership abilities and a highly innovative problem solver.
- High reasoning aptitude and ability to quickly understand a complex operating environments.
- Ability to coach and mentor experienced engineering staff.

Preferred Qualifications

- Strong understanding of Application Configuration and Patch Management, Configuration Compliance, and Drift Governance.
- Experience in Cybersecurity Governance, Risk Management, Vulnerability Management, or Technology Controls.
- Hands-on experience with ServiceNow, CMDB, Governance Reporting, and Workflow Management.
- Knowledge of SaaS, COTS, Custom Applications, Cloud Platforms, and Enterprise Technology Environments.
- Familiarity with CIS Benchmarks, NIST Framework, Secure Configuration Standards, and Compliance Monitoring.
- Experience supporting regulatory remediation, audit reviews, and risk governance programs.
- Strong stakeholder management and executive communication skills.
- Experience building dashboards, metrics, KPI/KRI reporting, and governance scorecards.
- Knowledge of automation tools, configuration validation, and drift detection concepts.
- Bachelor’s degree in Computer Science, Information Technology, Engineering, Cybersecurity, or related discipline.
- CISSP, CISM, CRISC or equivalent security certifications.
- ServiceNow CSA/ITOM/CMDB certifications preferred.
- AWS Cloud Practitioner, AWS Solutions Architect Associate, Azure Fundamentals (AZ-900), or equivalent cloud certification.

In-Office Collaboration

- We are a client-centric, relationship-based business. Working together, in-person, is foundational to how we achieve results. By fostering a culture of face-to-face collaboration, idea sharing, productivity and personal connection, we deliver for our stakeholders — clients, advisors, employees and shareholders. Our employees work in the office at least three (3) days per week, with flexibility to work from home two (2) days per week. Some roles may require additional in-office time or different in-office expectations, and specific requirements will be discussed during the hiring process.

Full-Time/Part-Time
Full time

Timings
(2:00p-10:30p)

India Business Unit
AWMPO AWMP&S President's Office

Job Family Group
Technology

Ameriprise India LLP is an equal opportunity employer. We consider all qualified applicants without regard to race, color, religion, sex, genetic information, age, sexual orientation, gender identity, disability, military status, veteran status, marital status, pregnancy, family status or any other basis prohibited by law.

We are committed to fostering an inclusive and accessible recruitment process for individuals with disabilities. If you require a reasonable accommodation to participate in the application or interview process, speak to your recruiter to discuss how we can support you.