About the role
- Technical:
- Strong hands‑on in Linux/Windows OS, Infrastructure, Virtualization, Storage, Networking.
- Deep understanding of ITIL Change Management lifecycle (ITIL certification preferred).
- Practical experience in DQ, VM, IM, PM at enterprise scale (cloud + on‑prem).
- Familiarity with DevSecOps and SDLC controls (SAST/DAST/SCA, container/IaC scanning).
- Observability (e.g., Datadog/Dynatrace/New Relic/ELK/Prometheus).
- Process/Platforms/Tools (nice to have): ServiceNow/JSM, Qualys/Tenable/Rapid7/Wiz/Prisma, Snyk/OWASP ZAP, Great Expectations/Soda/Collibra/Alation/Atlan, OpenLineage.
- Leadership & Delivery: Proven record reducing MTTR, burning down aged critical vulns, improving DQ scores, and closing RCA actions.
- Communication: Executive storytelling; crisis leadership; influence without authority across global teams.
Certifications (preferred): ITIL 4, CISSP/CCSP/CISM, AWS/Azure Security, CDMP/DCAM.
Key Responsibilities- Data Quality: Define DQ policy/standards; implement DQ rules, scoring, and lineage for Tier‑1 domains; drive remediation and preventive controls in data pipelines.
- Vulnerability Management: Own discovery → risk‑based prioritization → remediation → exception governance across infra, apps, cloud, containers, and IaC; ensure SLA adherence.
- Incident Management: Run 24×7 major incident command, war rooms, comms playbooks; standardize severity/runbooks; improve MTTA/MTTR in partnership with SRE/Engineering/SecOps.
- Problem Management: Lead RCA using 5‑Whys/Fishbone/Kepner‑Tregoe; maintain problem backlog; drive permanent fixes; reduce repeat incidents.
- Governance & Compliance: Establish SLAs/OLAs, RACI, monthly scorecards; ensure audit readiness and evidence of control effectiveness.
- Tooling & Automation: Optimize ITSM, observability, scanners, and DQ/metadata tools; increase automation coverage (runbooks, CI/CD gates, auto‑remediation).
- Stakeholder Management: Coordinate with Security, Platform, App Eng, Data Office, Risk & Compliance; deliver executive‑ready reporting and risk narratives.
- Knowledge Retention: Formalize runbooks, knowledge base, handover plans, and training to mitigate attrition risk immediately on joining.
- Technical:
- Strong hands‑on in Linux/Windows OS, Infrastructure, Virtualization, Storage, Networking.
- Deep understanding of ITIL Change Management lifecycle (ITIL certification preferred).
- Practical experience in DQ, VM, IM, PM at enterprise scale (cloud + on‑prem).
- Familiarity with DevSecOps and SDLC controls (SAST/DAST/SCA, container/IaC scanning).
- Observability (e.g., Datadog/Dynatrace/New Relic/ELK/Prometheus).
- Process/Platforms/Tools (nice to have): ServiceNow/JSM, Qualys/Tenable/Rapid7/Wiz/Prisma, Snyk/OWASP ZAP, Great Expectations/Soda/Collibra/Alation/Atlan, OpenLineage.
- Leadership & Delivery: Proven record reducing MTTR, burning down aged critical vulns, improving DQ scores, and closing RCA actions.
- Communication: Executive storytelling; crisis leadership; influence without authority across global teams.
Certifications (preferred): ITIL 4, CISSP/CCSP/CISM, AWS/Azure Security, CDMP/DCAM.
Key Responsibilities- Data Quality: Define DQ policy/standards; implement DQ rules, scoring, and lineage for Tier‑1 domains; drive remediation and preventive controls in data pipelines.
- Vulnerability Management: Own discovery → risk‑based prioritization → remediation → exception governance across infra, apps, cloud, containers, and IaC; ensure SLA adherence.
- Incident Management: Run 24×7 major incident command, war rooms, comms playbooks; standardize severity/runbooks; improve MTTA/MTTR in partnership with SRE/Engineering/SecOps.
- Problem Management: Lead RCA using 5‑Whys/Fishbone/Kepner‑Tregoe; maintain problem backlog; drive permanent fixes; reduce repeat incidents.
- Governance & Compliance: Establish SLAs/OLAs, RACI, monthly scorecards; ensure audit readiness and evidence of control effectiveness.
- Tooling & Automation: Optimize ITSM, observability, scanners, and DQ/metadata tools; increase automation coverage (runbooks, CI/CD gates, auto‑remediation).
- Stakeholder Management: Coordinate with Security, Platform, App Eng, Data Office, Risk & Compliance; deliver executive‑ready reporting and risk narratives.
- Knowledge Retention: Formalize runbooks, knowledge base, handover plans, and training to mitigate attrition risk immediately on joining.