AVP, Enterprise Logging & Observability (L11)

Job Description:

Role Title : AVP, Enterprise Logging & Observability (L11)

Company Overview

Synchrony (NYSE: SYF) is a premier consumer financial services company delivering one of the industry’s most complete digitally enabled product suites. Our experience, expertise and scale encompass a broad spectrum of industries including digital, health and wellness, retail, telecommunications, home, auto, outdoors, pet and more.

• We have recently been ranked #2 among India’s Best Companies to Work for by Great Place to Work. We were among the Top 50 India’s Best Workplaces in Building a Culture of Innovation by All by GPTW and Top 25 among Best Workplaces in BFSI by GPTW. We have also been recognized by AmbitionBox Employee Choice Awards among the Top 20 Mid-Sized Companies, ranked #3 among Top Rated Companies for Women, and Top-Rated Financial Services Companies.

• Synchrony celebrates ~51% women diversity, 105+ people with disabilities, and ~50 veterans and veteran family members.

• We offer Flexibility and Choice for all employees and provide best-in-class employee benefits and programs that cater to work-life integration and overall well-being. 

• We provide career advancement and upskilling opportunities, focusing on Advancing Diverse Talent to take up leadership roles.

Organizational Overview:
Splunk is Synchrony's enterprise logging solution. Splunk searches and indexes log files and helps derive insights from the data. The primary goal is, to ingests massive datasets from disparate
sources and employs advanced analytics to automate operations and improve data analysis. It also offers predictive analytics and unified monitoring for applications, services and infrastructure.
There are many applications that are forwarding data to the Splunk logging solution. Splunk team including Engineering, Development, Operations, Onboarding, Monitoring maintain Splunk and provide
solutions to teams across Synchrony.

Role Summary/Purpose:
The role AVP, Enterprise Logging & Observability is a key leadership role responsible for driving the strategic vision, roadmap, and development of the organization’s centralized logging and observability platform. This role supports multiple enterprise initiatives including applications, security monitoring, compliance reporting, operational insights, and platform health tracking.

This role lead platform development using Agile methodology, manage stakeholder priorities, ensure 
logging standards across applications and infrastructure, and support security initiatives. This position bridges the gap between technology teams, applications, platforms, cloud, cybersecurity, infrastructure, DevOps, Governance audit, risk teams and business partners, owning and evolving the logging ecosystem to support real-time insights, compliance monitoring, and operational excellence.

Key Responsibilities:
• Splunk Development & Platform Management

• Lead and coordinate development activities, ingestion pipeline enhancements, onboarding  frameworks, and alerting solutions.

• Collaborate with engineering, operations, and Splunk admins to ensure scalability, performance, and reliability of the platform.

• Establish governance controls for source naming, indexing strategies, retention, access controls, and audit readiness.

• Splunk ITSI Implementation & Management - Develop and configure ITSI services, entities, and correlation searches.

• Implement notable events aggregation policies and automate response actions.

• Fine-tune ITSI performance by optimizing data models, summary indexing, and saved searches.

• Help identify patterns and anomalies in logs and metrics.

• Develop ML models for anomaly detection, capacity planning, and predictive analytics.

• Utilize Splunk MLTK to build and train models for IT operations monitoring.

Security & Compliance Enablement

• Partner with InfoSec, Risk, and Compliance to align logging practices with regulations (e.g., PCI-DSS, GDPR, RBI).

• Enable visibility for encryption events, access anomalies, secrets management, and audit  trails.

• Support security control mapping and automation through observability.

Stakeholder Engagement

• Act as a strategic advisor and point of contact for business units, application, infrastructure, security stakeholders and business teams leveraging Splunk.

• Conduct stakeholder workshops, backlog grooming, and sprint reviews to ensure alignment.

• Maintain clear and timely communications across all levels of the organization.

Process & Governance

• Drive logging and observability governance standards, including naming conventions, access controls, and data retention policies.

• Lead initiatives for process improvement in log ingestion, normalization, and compliance  readiness.

• Ensure alignment with enterprise architecture and data classification models.

• Lead improvements in logging onboarding lifecycle time, automation pipelines, and selfservice ingestion tools.

• Mentor junior team members and guide engineering teams on secure, standardized logging practices.

Required Skills/Knowledge: 

• Bachelor's degree with Minimum of 6+ years of experience in Technology ,or in lieu of a degree 8+ years of Experience in Technology

• Minimum of 3+ years of experience in leading development team or equivalent role in observability, logging, or security platforms.

• Splunk Subject Matter Expert (SME)

• Strong hands-on understanding of Splunk architecture, pipelines, dashboards, and alerting, data ingestion, search optimization, and enterprise-scale operations.

• Experience supporting security use cases, encryption visibility, secrets management, and compliance logging.

• Splunk Development & Platform Management, Security & Compliance Enablement, Stakeholder Engagement & Process & Governance

• Experience with Splunk Premium Apps - ITSI and Enterprise Security (ES) minimally

• Experience with Data Streaming Platforms & tools like Cribl, Splunk Edge Processor.

• Proven ability to work in Agile environments using tools such as JIRA or JIRA Align.

• Strong communication, leadership, and stakeholder management skills.

• Familiarity with security, risk, and compliance standards relevant to BFSI.

• Proven experience leading product development teams and managing cross-functional initiatives using Agile methods.

• Strong knowledge and hands-on experience with Splunk Enterprise/Splunk Cloud.

• Design and implement Splunk ITSI solutions for proactive monitoring and service health tracking.

• Develop KPIs, Services, Glass Tables, Entities, Deep Dives, and Notable Events to improve service reliability for users across the firm

• Develop scripts (python, JavaScript, etc.) as needed in support of data collection or integration

• Develop new applications leveraging Splunk’s analytic and Machine Learning tools to maximize performance, availability and security improving business insight and operations.

• Support senior engineers in analyzing system issues and performing root cause analysis (RCA).

Desired Skills/Knowledge: 

• Deep knowledge of Splunk development, data ingestion, search optimization, alerting, dashboarding, and enterprise-scale operations.

• Exposure to SIEM integration, security orchestration, or SOAR platforms.

• Knowledge of cloud-native observability (e.g. AWS/GCP/Azure logging).

• Experience in BFSI or regulated industries with high-volume data handling.

• Familiarity with CI/CD pipelines, DevSecOps integration, and cloud-native logging.

• Working knowledge of scripting or automation (e.g., Python, Terraform, Ansible) for observability tooling.

• Splunk certifications (Power User, Admin, Architect, or equivalent) will be an advantage .

• Awareness of data classification, retention, and masking/anonymization strategies.

• Awareness of integration between Splunk and ITSM or incident management tools (e.g., ServiceNow, PagerDuty)

• Experience with Version Control tools – Git, Bitbucket

Eligibility Criteria:

• Bachelor's degree with Minimum of 6+ years of experience in Technology ,or in lieu of a degree 8+ years of Experience in Technology

• Minimum of 3+ years of experience in leading development team or equivalent role in observability, logging, or security platforms.

• Demonstrated success in managing large-scale logging platforms in regulated environments.

• Excellent communication, leadership, and cross-functional collaboration skills.

• Experience with scripting languages such as Python, Bash, or PowerShell for automation and integration purposes.

• Prior experience in large-scale, security-driven logging or observability platform development.

• Excellent problem-solving skills and the ability to work independently or as part of a team. Strong communication and interpersonal skills to interact effectively with team members and stakeholders.

• Knowledge of IT Service Management (ITSM) and monitoring tools.

• Knowledge of other data analytics tools or platforms is a plus.

WORK TIMINGS : 01:00 PM to 10:00 PM IST

This role qualifies for Enhanced Flexibility and Choice offered in Synchrony India and will require the 
incumbent to be available between 06:00 AM Eastern Time – 11:30 AM Eastern Time (timings are anchored to US Eastern hours and will adjust twice a year locally). This window is for meetings with India and US teams. The remaining hours will be flexible for the employee to choose. Exceptions may apply periodically due to business needs. Please discuss this with the hiring manager for more details.

For Internal Applicants: 

• Understand the criteria or mandatory skills required for the role, before applying 

• Inform your manager and HRM before applying for any role on Workday 

• Ensure that your professional profile is updated (fields such as education, prior experience, other skills) and it is mandatory to upload your updated resume (Word or PDF format) 

• Must not be any corrective action plan (First Formal/Final Formal, PIP) 

• L9+ Employees who have completed 18 months in the organization and 12 months in current role and level are only eligible.

• L09+ Employees can apply.

Level / Grade : 11

Job Family Group: