Principal Lead-Infrastructure Operations

Location: Noida, Uttar Pradesh, India

About Our Company

Ameriprise India LLP has been providing client based financial solutions to help clients plan and achieve their financial objectives for 20 years. We are part of Ameriprise Financial Inc., a US financial planning company headquartered in Minneapolis with a global presence and diversified financial services leader with more than $1.5 trillion in assets under management, administration and advisement as of year-end 2024. The firm’s focus areas include Asset Management and Advice, Retirement Planning and Insurance Protection.

Be part of an inclusive, collaborative culture that rewards you for your contributions, and work with other talented individuals who share your passion for doing great work. You’ll also have plenty of opportunities to make your mark at the office and a difference in your community. So, if you're talented, driven and want to work for a strong, ethical company that cares, take the next step and create a career at Ameriprise India LLP.

The position will lead the enterprise Application Configuration Management and Drift Governance program supporting regulatory and cyber risk remediation initiatives. This role will be responsible for governing application security baselines, configuration compliance, drift monitoring, enterprise-wide patch governance, exception management and executive reporting.

The individual will work closely with Application CDOs, Information Security, Vulnerability Management, Engineering, Cloud, Infrastructure, ServiceNow, CMDB, and Technology Governance teams to drive configuration hardening, baseline compliance, continuous monitoring of application configuration controls, patch compliance oversight, audit evidence readiness, and scalable governance designs for future configuration management processes.

Key Responsibilities

• Lead the Application Configuration Management and Drift Governance program across enterprise applications.
• Establish governance processes for configuration baseline creation, review, approval, and ongoing compliance monitoring.
• Own and manage the ongoing enterprise patch audit governance process on a day-to-day basis once the operating model transitions into BAU.
• Establish and run enterprise-wide patch governance routines, including audit scheduling, compliance tracking, escalation management, evidence collection, and reporting across technology teams.
• Partner with infrastructure, application, vulnerability management, and technology governance teams to ensure patch compliance gaps are reviewed, tracked, remediated, or risk accepted in line with enterprise policy and SLA expectations.
• Develop governance playbooks and repeatable control designs that can be extended from patch audit governance into future configuration management and configuration drift processes.
• Partner with Application CDOs and Information Security teams to identify applications eligible for configuration drift governance.
• Drive onboarding of applications into Configuration Drift Management phases including Baseline Documentation, Verification Capability, and Compliance Reporting.
• Govern application configuration compliance against approved baselines, enterprise security standards, vendor recommendations, and industry frameworks.
• Manage configuration exceptions, risk acceptance reviews, remediation tracking, and issue escalation.
• Monitor configuration drift trends and ensure timely remediation of identified gaps.
• Define and track KPIs, KRIs, compliance metrics, coverage metrics, and remediation SLAs.
• Define patch governance KPIs and KRIs covering audit completion, patch compliance, overdue remediation, exception ageing, SLA adherence, and control effectiveness.
• Prepare executive dashboards and governance reports for technology and cyber risk leadership.
• Coordinate regulatory, audit, and compliance evidence requests related to configuration governance.
• Collaborate with ServiceNow, CMDB, Vulnerability Management, and Technology Governance teams to improve governance maturity and reporting automation.
• Lead continuous improvement initiatives to strengthen enterprise configuration compliance and cyber resilience.
• Additional Locations: Hyderabad, Telangana, India, Gurugram, Haryana, India