Description

The position will lead the enterprise Application Configuration Management and Drift Governance program supporting regulatory and cyber risk remediation initiatives. This role will be responsible for governing application security baselines, configuration compliance, drift monitoring, enterprise-wide patch governance, exception management and executive reporting.
The individual will work closely with Application CDOs, Information Security, Vulnerability Management, Engineering, Cloud, Infrastructure, Service Now, CMDB, and Technology Governance teams to drive configuration hardening, baseline compliance, continuous monitoring of application configuration controls, patch compliance oversight, audit evidence readiness, and scalable governance designs for future configuration management processes.

Key Responsibilities

- Lead the Application Configuration Management and Drift Governance program across enterprise applications.
- Establish governance processes for configuration baseline creation, review, approval, and ongoing compliance monitoring.
- Own and manage the ongoing enterprise patch audit governance process on a day-to-day basis once the operating model transitions into BAU.
- Establish and run enterprise-wide patch governance routines, including audit scheduling, compliance tracking, escalation management, evidence collection, and reporting across technology teams.
- Partner with infrastructure, application, vulnerability management, and technology governance teams to ensure patch compliance gaps are reviewed, tracked, remediated, or risk accepted in line with enterprise policy and SLA expectations.
- Develop governance playbooks and repeatable control designs that can be extended from patch audit governance into future configuration management and configuration drift processes.
- Partner with Application CDOs and Information Security teams to identify applications eligible for configuration drift governance.
- Drive onboarding of applications into Configuration Drift Management phases including Baseline Documentation,



Verification Capability, and Compliance Reporting.
- Govern application configuration compliance against approved baselines, enterprise security standards, vendor recommendations, and industry frameworks.
- Manage configuration exceptions, risk acceptance reviews, remediation tracking, and issue escalation.
- Monitor configuration drift trends and ensure timely remediation of identified gaps.
- Define and track KPIs, KRIs, compliance metrics, coverage metrics, and remediation SLAs.
- Define patch governance KPIs and KRIs covering audit completion, patch compliance, overdue remediation, exception ageing, SLA adherence, and control effectiveness.
- Prepare executive dashboards and governance reports for technology and cyber risk leadership.
- Coordinate regulatory, audit, and compliance evidence requests related to configuration governance.
- Collaborate with Service Now, CMDB, Vulnerability Management, and Technology Governance teams to improve governance maturity and reporting automation.
- Lead continuous improvement initiatives to strengthen enterprise configuration compliance and cyber resilience.

Required Qualifications

- Bachelors degree or equivalent in Computer Science, Engineering or related field; or equivalent work experience.
- 8-12 years of relevant experience required.
- Ability to communicate and articulate technical information across various organizational levels.
- Strong thought leadership abilities and a highly creative problem solver.
- High reasoning aptitude and ability to quickly understand a complex operating environments.
- Ability to coach and mentor experienced engineering staff.

Preferred Qualifications





- Strong understanding of Application Configuration and Patch Management, Configuration Compliance, and Drift Governance.
- Experience in Cybersecurity Governance, Risk Management, Vulnerability Management, or Technology Controls.
- Hands-on experience with Service Now, CMDB, Governance Reporting, and Workflow Management.
- Knowledge of SaaS, COTS, Custom Applications, Cloud Platforms, and Enterprise Technology Environments.
- Familiarity with CIS Benchmarks, NIST Framework, Secure Configuration Standards, and Compliance Monitoring.
- Experience supporting regulatory remediation, audit reviews, and risk governance programs.
- Strong stakeholder management and executive communication skills.
- Experience building dashboards, metrics, KPI/KRI reporting, and governance scorecards.
- Knowledge of automation tools, configuration validation, and drift detection concepts.
- Bachelor’s degree in Computer Science, Information Technology, Engineering, Cybersecurity, or related discipline.
- CISSP, CISM, CRISC or equivalent security certifications.
- Service Now CSA/ITOM/CMDB certifications preferred.
- AWS Cloud Practitioner, AWS Solutions Architect Associate, Azure Fundamentals (AZ-900), or equivalent cloud certification.

In-Office Collaboration

- We are a client-centric, relationship-based business. Working together, in-person, is foundational to how we achieve results. By fostering a culture of face-to-face collaboration, idea sharing, productivity and personal connection, we deliver for our stakeholders — clients, advisors, employees and shareholders. Our employees work in the office at least three (3) days per week, with flexibility to work from home two (2) days per week. Some roles may require additional in-office time or different in-office expectations, and specific requirements will be discussed during the hiring process.

Full-Time/Part-Time

Full time

Timings

(2:00p-10:30p)

India Business Unit

AWMPO AWMP&S; President's Office

Job Family Group

Technology

📌 Principal Lead-Infrastructure Operations (India)
🏢 56672 Ameriprise India
📍 India