We are looking for a hands-on IT leader to own Winfo's digital foundation end-to-end — corporate IT, network and endpoint security, and the operations of our SaaS products hosted in the cloud. The role is both a builder (maturing our ISMS, hardening cloud workloads, scaling IT for a growing consulting + product workforce) and an operator (keeping employees productive, customers' SaaS environments reliable, and audits clean).
1. Corporate IT & End-User Computing
-
Own laptop lifecycle, MDM, identity (Entra/AD, SSO, MFA), email, collaboration (M365), and helpdesk for all Winfo employees across India and overseas locations.
-
Manage office network, Wi-Fi, VPN, firewalls, and physical IT infrastructure at Hyderabad and other sites.
-
Drive employee onboarding/offboarding from an IT and access-control standpoint.
2. Cloud & SaaS Operations
-
Operate the cloud infrastructure (Azure/AWS/OCI as applicable) hosting Winfo's SaaS products — uptime, monitoring, backups, DR, patching, cost governance.
-
Partner with product engineering on environment hygiene, secrets management, network segmentation, and production access controls.
-
Build incident response, on-call, and change-management practices for customer-facing workloads.
3. Information Security & Compliance
-
Own the ISMS — drive and maintain ISO 27001 and SOC 2 Type II certifications, including policies, controls, internal audits, evidence collection, and external auditor engagement.
-
Run vulnerability management, endpoint protection (EDR), email security, DLP, and access reviews.
-
Lead customer security reviews and questionnaires; act as the security point-of-contact for enterprise customers and partners.
-
Partner with delivery and product teams on secure SDLC, data classification, and customer data handling — especially for Oracle Cloud / EBS implementation engagements.
4. Governance, Risk & Vendor Management
-
Maintain the risk register, BCP/DR plans, and run periodic tabletop exercises.
-
Manage IT/security vendors, licenses, and renewals; optimize spend.
-
Report security and IT KPIs to leadership.
