Assistant Manager - Information Security

Larsen & Toubro (L&T); Mumbai; On-site; INR 1,200,000 - 1,800,000; Full time

Job summary

Larsen & Toubro (L&T) Corporate IT in Mumbai seeks an experienced security operations leader to oversee enterprise security technologies and cloud deployments across Azure, AWS, and GCP. You will drive remediation, KPI/KRI governance, and risk reporting for governance and leadership teams.

The role focuses on CNAPP/CSPM/CWPP/DSPM/KSPM, vulnerability management, identity security, and AI security framework governance with strong analytics and stakeholder management skills.

Qualifications

• B.Tech/B.E./MCA in Cyber Security specialization is required.
• Hands-on experience with enterprise security technologies and cloud security platforms is essential.
• Familiarity with security frameworks (NIST, CIS, ISO 27001) and KPI/KRI governance is preferred.

Responsibilities

• Oversee and maintain the maturity of security technologies (EDR, PIM/PAM, WAF, IDS/IPS, Vulnerability Management, DLP, and cloud security platforms).
• Manage deployment, configuration, integration, health, coverage, and operational effectiveness of security technologies.
• Drive remediation of vulnerabilities, misconfigurations, unsupported technologies, and security control gaps.
• Define and track SecOps KPIs and KRIs including vulnerability ageing, patch compliance, tool coverage, remediation timelines, incidents, and risk exceptions.
• Prepare cybersecurity dashboards, operational reports, and risk updates for governance and leadership teams.
• Coordinate cloud security deployments across CNAPP, CSPM, CWPP, DSPM, and KSPM across Azure, AWS, and GCP; remediate cloud misconfigurations and identity-control gaps.
• Govern remediation of audit findings from audits, assessments, penetration tests, cloud reviews, and compliance reviews with validation evidence.
• Conduct periodic security-control validation, attack simulations, and tabletop exercises.
• Monitor identity-security risks including excessive privileges, dormant/service accounts, MFA gaps, and privileged-access exceptions.
• Govern the enterprise AI security framework covering policies, risk assessment, data protection, access controls, compliance, and continuous monitoring.

Skills

EDR

PIM/PAM

WAF

IDS/IPS

Vulnerability Management

DLP

CNAPP

CSPM

CWPP

DSPM

KSPM

Azure/AWS/GCP

NIST/CIS/ISO 27001 knowledge

Education

B.Tech/B.E./MCA In Cyber Security Specialization

Job description

About Organization:

Larsen & Toubro Ltd, commonly known as L&T, is an Indian multinational conglomerate company, with business interests in engineering, construction, manufacturing, technology, information technology and financial services, headquartered in Mumbai.

The company is counted among world's top five construction companies. The L&T Group comprises of 93 subsidiaries, 5 associate companies, 27 joint ventures and 35 jointly held operations, operating across basic and heavy engineering, construction, realty, manufacturing of capital goods, information technology, and financial services.

This role is based out of Corporate IT in Headoffice.

Job Location: Powai, Mumbai

Working Model: Work from office

Operating Model: 5 days (Alternate Saturdays working)

Educational Qualifications: B.Tech/B.E./MCA In Cyber Security Specialization,

Experience: 4-8 years in Security Technologies Operations Management.

Job Profile

• 1. Strong hands‑on expertise across enterprise security technologies EDR, PIM/PAM, WAF, IDS/IPS, Vulnerability Management, DLP, and cloud security platforms.
• 2. Experience managing deployment, configuration, integration, health, coverage, and operational effectiveness of security controls against industry best practices, KPIs, and KRIs.
• 3. Hands‑on knowledge of cloud security CNAPP, CSPM, CWPP, DSPM, and KSPM across Azure, AWS, and GCP, including remediation of misconfigurations and workloadhardening findings.
• 4. Strong understanding of vulnerability management, patch compliance, remediation tracking, and technology‑obsolescence risk management.
• 5. Experience in identity‑security risk monitoring, including excessive privileges, dormant and service accounts, MFA gaps, and privileged‑access exceptions.
• 6. Ability to govern enterprise AI security frameworks covering policy, risk assessment, data protection, access control, compliance, and continuous monitoring.
• 7. Strong analytical, documentation, dashboards, reporting, and stakeholder‑management skills, with knowledge of security frameworks such as NIST, CIS, and ISO 27001.

Job Responsibilities

• 1. Oversee and maintain the maturity of security technologies (EDR, PIM/PAM, WAF, IDS/IPS, Vulnerability Management, DLP, and cloud security platforms) against defined industry best practices, KPIs, and KRIs.
• 2. Manage the deployment, configuration, integration, health, coverage, and operational effectiveness of enterprise security technologies.
• 3. Drive remediation of vulnerabilities, security misconfigurations, unsupported technologies, and security control gaps.
• 4. Define and track SecOps KPIs and KRIs covering vulnerability ageing, patch compliance, security‑tool coverage, remediation timelines, incidents, and risk exceptions.
• 5. Prepare cybersecurity dashboards, operational reports, and risk updates for governance and leadership teams.
• 6. Manage the effectiveness and coverage of cloud security deployments including CNAPP, CSPM, CWPP, DSPM, and KSPM across Azure, AWS, and GCP, and coordinate remediation of cloud misconfigurations, identity‑control gaps, network‑segmentation issues, encryption gaps, and workload‑hardening findings.
• 7. Manage remediation of findings arising from audits, cybersecurity assessments, penetration tests, cloud reviews, compliance reviews, and operational‑risk assessments, ensuring closure with appropriate technical validation and supporting evidence.
• 8. Conduct periodic security‑control validation, attack simulations, and tabletop exercises.
• 9. Monitor identity‑security risks, including excessive privileges, dormant accounts, service accounts, MFA gaps, and privileged‑access exceptions.
• 10. Govern the enterprise AI security framework, including policies, risk assessment, data protection, access controls, compliance, and continuous monitoring.

CERTIFICATIONS

Preferred: CCSP, GCIH, GCIA, CRISC, CEH, CompTIA CySA+, or OSCP. Cloud Security: Microsoft Azure Security, AWS Security, or Google Professional Cloud Security Engineer. Equivalent certifications supported by relevant SecOps leadership and hands‑on experience may also be considered.