Assistant Manager - Information Security...

PeopleStrong; Mumbai; On-site; INR 1,500,000 - 2,100,000; Full time

Job summary

PeopleStrong is seeking an Assistant Manager for Information Security in Mumbai to lead security technologies, drive vulnerability management and ensure alignment with industry standards. The candidate will oversee EDR, PAM, WAF, IDS/IPS, and cloud security platforms, while coordinating risk-based remediation and security controls across the enterprise.

The role requires hands-on experience with CNAPP, CSPM, CWPP, DSPM, and KSPM across major cloud platforms, plus strong KPI/KRIs, reporting, and

Qualifications

• Hands-on expertise across enterprise security technologies including EDR, PIM/PAM, WAF, IDS/IPS, DLP and cloud security platforms.
• Experience managing deployment, configuration and operational effectiveness of security controls.
• Knowledge of CNAPP/CSPM/CWPP/DSPM across Azure, AWS and GCP with remediation of misconfigurations.

Responsibilities

• Oversee and maintain maturity of security technologies against KPIs and KRIs.
• Manage deployment, configuration, integration and health of enterprise security technologies.
• Drive remediation of vulnerabilities, misconfigurations and security gaps.
• Define and track SecOps KPIs and KRIs for vulnerability ageing, patch compliance and risk.
• Prepare cybersecurity dashboards and risk updates for governance and leadership.
• Coordinate remediation of cloud misconfigurations and identity-control gaps.
• Ensure closure with evidence for audits and assessments.
• Conduct periodic security-control validation and tabletop exercises.
• Monitor identity-security risks including MFA gaps and privileged-access exceptions.

Skills

EDR

PIM/PAM

WAF

IDS/IPS

Vulnerability Management

DLP

CNAPP

CSPM

CWPP

DSPM

KSPM

MFA gaps

Education

Bachelor of Technology (BTech)

Job description

Assistant Manager - Information Security...

LNT/AM-IS/1889385

• HOSC-Head Office
• AMN Tower, Powai

Posted On 09 Oct 2026

End Date 07 Apr 2027

Required Experience 3 - 7 years

Skills

Knowledge & Posting Location

Information Security

Bachelor of Technology (BTech)

Job Description

Skills required:

• 1 Strong hands-on expertise across enterprise security technologies EDR, PIM/PAM, WAF, IDS/IPS, Vulnerability Management, DLP, and cloud security platforms.
• 2 Experience managing deployment, configuration, integration, health, coverage, and operational effectiveness of security controls against industry best practices, KPIs, and KRIs.
• 3 Hands-on knowledge of cloud security CNAPP, CSPM, CWPP, DSPM, and KSPM across Azure, AWS, and GCP, including remediation of misconfigurations and workload-hardening findings.
• 4 Strong understanding of vulnerability management, patch compliance, remediation tracking, and technology-obsolescence risk management.
• 5 Experience in identity-security risk monitoring, including excessive privileges, dormant and service accounts, MFA gaps, and privileged-access exceptions.
• 6 Ability to govern enterprise AI security frameworks covering policy, risk assessment, data protection, access control, compliance, and continuous monitoring.
• 7 Strong analytical, documentation, dashboarding, reporting, and stakeholder-management skills, with knowledge of security frameworks such as NIST, CIS, and ISO 27001.

Job responsibilities:

• 1 Oversee and maintain the maturity of security technologies (EDR, PIM/PAM, WAF, IDS/IPS, Vulnerability Management, DLP, and cloud security platforms) against defined industry best practices, KPIs, and KRIs.
• 2 Manage the deployment, configuration, integration, health, coverage, and operational effectiveness of enterprise security technologies.
• 3 Drive remediation of vulnerabilities, security misconfigurations, unsupported technologies, and securitycontrol gaps.
• 4 Define and track SecOps KPIs and KRIs covering vulnerability ageing, patch compliance, security-tool coverage, remediation timelines, incidents, and risk exceptions.
• 5 Prepare cybersecurity dashboards, operational reports, and risk updates for governance and leadership teams.
• 6 Manage the effectiveness and coverage of cloud security deployments including CNAPP, CSPM, CWPP, DSPM, and KSPM across Azure, AWS, and GCP, and coordinate remediation of cloud misconfigurations, identity-control gaps, network-segmentation issues, encryption gaps, and workload-hardening findings.
• 7 Manage remediation of findings arising from audits, cybersecurity assessments, penetration tests, cloud reviews, compliance reviews, and operational-risk assessments, ensuring closure with appropriate technical validation and supporting evidence.
• 8 Conduct periodic security-control validation, attack simulations, and tabletop exercises.
• 9 Monitor identity-security risks, including excessive privileges, dormant accounts, service accounts, MFA gaps, and privileged-access exceptions.
• 10 Govern the enterprise AI security framework, including policies, risk assessment, data protection, access controls, compliance, and continuous monitoring.