Job Title : IT Infrastructure Security Lead / Manager

Location : Akurdi Pune

Reports To : DGM (Technology & Digital)

Role Purpose :

The IT Infrastructure Security Lead is responsible for end-to-end implementation, operation, and continuous improvement of infrastructure security controls across Data Center, Network, End User Computing, and Enterprise IT environments.

Key Responsibilities :

1. Infrastructure Security Implementation & Operations :

- Implement, manage, and continuously optimize security controls across Data Center infrastructure, Enterprise network, and End-user computing environment.

2. Vendor Coordination - Data Center Security :

- Act as the single point of contact for vendors implementing DC security tools including Firewalls, WAF, SD-WAN, Load Balancers, and Network segmentation controls.

- Review and approve security design documents, architecture diagrams, and rule sets and policy proposals.

- Ensure vendor implementations follow approved security standards, address audit and VAPT requirements, and are delivered within agreed timelines and SLAs.

- Validate implementation outcomes through configuration reviews, reports, and testing evidence.

3. End User & Endpoint Security :

- Define security requirements for Antivirus / EDR, Endpoint hardening, NAC, and Secure Wi-Fi.

- End User Support teams to ensure organization-wide deployment coverage, policy compliance, and timely remediation of endpoint risks.

- Review endpoint security dashboards and reports to identify gaps and drive corrective actions via vendors/support teams.

4. Security Monitoring & Effectiveness Oversight :

- Oversee continuous monitoring of security tools by reviewing alerts, dashboards, and health reports and ensuring integration with SIEM / monitoring platforms.

- Track repeated alerts, misconfigurations, and policy violations.

- Drive vendors to tune rules, optimize policies, and reduce false positives and attack surface.

5. Vulnerability Management & Audit Closure Ownership :

- Act as overall owner for closure of infrastructure-related audit findings, including internal audits, external / regulatory audits, and VAPT reports.

- Analyze findings to identify ownership (DC, network, endpoint, vendor), define remediation approach, and coordinate with vendors and internal teams to implement fixes, provide evidence, and meet agreed SLAs.

- Validate closure through re-testing and audit confirmation.

- Maintain centralized audit tracking with risk rating, status, aging, and dependencies.

6. Incident Support & Corrective Action Tracking :

- Act as infrastructure security focal point during security incidents and investigations.

- Coordinate vendors for immediate containment actions, root cause analysis, and long-term corrective and preventive controls.

- Ensure learnings are documented and converted into updated standards or controls.

Required Skills & Experience :

- 5 - 8 years of experience in IT Security and compliance roles.

Preferred Qualifications :

- Bachelor's degree in computer science, Information Technology, or related field.