Assistant Manager - Information Security

Larsen & Toubro; Mumbai; On-site; INR 1,800,000 - 2,400,000; Full time

Job summary

Larsen & Toubro is seeking a senior security architect to lead enterprise security programs in Mumbai. You will oversee EDR, PIM/PAM, WAF, IDS/IPS, Vulnerability Management, DLP and cloud security platforms, guiding governance and remediation across multiple cloud providers.

The role emphasizes KPI/KRI driven security operations, AI security governance, and collaboration with governance and leadership teams. Strong analytical and documentation skills are essential.

Qualifications

• Experience implementing security controls aligned to best practices, KPIs and KRIs.
• Hands-on cloud security across CNAPP, CSPM, CWPP, DSPM, KSPM and major providers.
• Strong vulnerability management and patch remediation experience.
• Experience monitoring identity-security risks and MFA gaps.
• Ability to govern AI security frameworks and continuous monitoring.
• Strong analytical, documentation, dashboarding and stakeholder-management skills with NIST/CIS/ISO 27001 knowledge.

Responsibilities

• Oversee security technologies’ maturity against KPIs and KRIs.
• Manage deployment, configuration, integration and health of controls.
• Drive remediation of vulnerabilities and misconfigurations.
• Define and track SecOps KPIs, KRIs, remediation timelines.
• Prepare cybersecurity dashboards and risk updates for leadership.
• Coordinate cloud security deployments across Azure, AWS, GCP and remediate cloud misconfigurations.
• Remediate findings from audits, assessments, and tests with validation.
• Conduct periodic security-control validation and tabletop exercises.
• Monitor identity-security risks including MFA gaps and privileged-access issues.
• Govern enterprise AI security policy, data protection and compliance.

Skills

EDR

PIM/PAM

WAF

IDS/IPS

Vulnerability Management

DLP

Cloud Security Platforms

CNAPP

CSPM

CWPP

DSPM

KSPM

Azure

AWS

GCP

AI Security Governance

Analytics & Reporting

Tools

CNAPP

CSPM

CWPP

DSPM

KSPM

Azure

AWS

GCP

Job description

Skills Required

Strong hands-on expertise across enterprise security technologies EDR, PIM/PAM, WAF, IDS/IPS, Vulnerability Management, DLP, and cloud security platforms.

Skills Required

Strong hands-on expertise across enterprise security technologies EDR, PIM/PAM, WAF, IDS/IPS, Vulnerability Management, DLP, and cloud security platforms.

• 2 Experience managing deployment, configuration, integration, health, coverage, and operational effectiveness of security controls against industry best practices, KPIs, and KRIs.
• 3 Hands-on knowledge of cloud security CNAPP, CSPM, CWPP, DSPM, and KSPM across Azure, AWS, and GCP, including remediation of misconfigurations and workload-hardening findings.
• 4 Strong understanding of vulnerability management, patch compliance, remediation tracking, and technology-obsolescence risk management.
• 5 Experience in identity-security risk monitoring, including excessive privileges, dormant and service accounts, MFA gaps, and privileged-access exceptions.
• 6 Ability to govern enterprise AI security frameworks covering policy, risk assessment, data protection, access control, compliance, and continuous monitoring.
• 7 Strong analytical, documentation, dashboarding, reporting, and stakeholder-management skills, with knowledge of security frameworks such as NIST, CIS, and ISO 27001.

Job Responsibilities

• 1 Oversee and maintain the maturity of security technologies (EDR, PIM/PAM, WAF, IDS/IPS, Vulnerability Management, DLP, and cloud security platforms) against defined industry best practices, KPIs, and KRIs.
• 2 Manage the deployment, configuration, integration, health, coverage, and operational effectiveness of enterprise security technologies.
• 3 Drive remediation of vulnerabilities, security misconfigurations, unsupported technologies, and securitycontrol gaps.
• 4 Define and track SecOps KPIs and KRIs covering vulnerability ageing, patch compliance, security-tool coverage, remediation timelines, incidents, and risk exceptions.
• 5 Prepare cybersecurity dashboards, operational reports, and risk updates for governance and leadership teams.
• 6 Manage the effectiveness and coverage of cloud security deployments including CNAPP, CSPM, CWPP, DSPM, and KSPM across Azure, AWS, and GCP, and coordinate remediation of cloud misconfigurations, identity-control gaps, network-segmentation issues, encryption gaps, and workloadhardening findings.
• 7 Manage remediation of findings arising from audits, cybersecurity assessments, penetration tests, cloud reviews, compliance reviews, and operational-risk assessments, ensuring closure with appropriate technical validation and supporting evidence.
• 8 Conduct periodic security-control validation, attack simulations, and tabletop exercises.
• 9 Monitor identity-security risks, including excessive privileges, dormant accounts, service accounts, MFA gaps, and privileged-access exceptions.
• 10 Govern the enterprise AI security framework, including policies, risk assessment, data protection, access controls, compliance, and continuous monitoring.