Assistant Manager - Information Security

Larsen & Toubro; Mumbai; On-site; INR 1,500,000 - 2,500,000; Full time

Job summary

Larsen & Toubro in Mumbai seeks a senior security program leader to oversee enterprise security technologies and drive policy-aligned risk management. You will ensure EDR, IAM, WAF, vulnerability management and cloud platforms are effectively deployed and monitored.

Responsibilities include defining SecOps KPIs, coordinating cloud security across Azure, AWS and GCP, and leading audits, risk assessments, tabletop exercises, and AI security governance.

Qualifications

• Experience managing deployment, configuration, integration, health, coverage and operation of security controls.
• Hands-on knowledge of CNAPP, CSPM, CWPP, DSPM, and KSPM across Azure, AWS, GCP.
• Strong understanding of vulnerability management, patch compliance and remediation tracking.
• Experience in identity-security risk monitoring including MFA gaps and privileged-access issues.
• Governing AI security frameworks: policy, risk assessment, data protection, access control and monitoring.
• Knowledge of NIST, CIS and ISO 27001; strong analytical and documentation skills.

Responsibilities

• Oversee and maintain maturity of security technologies against KPIs and KRIs.
• Manage deployment, configuration, integration, health, coverage of enterprise security tech.
• Drive remediation of vulnerabilities, misconfigurations, and obsolete technologies.
• Define and track SecOps KPIs and KRIs including patching and risk exceptions.
• Prepare cybersecurity dashboards, operational reports and risk updates for leadership.
• Coordinate cloud security deployments across Azure, AWS, GCP and remediate misconfigurations.
• Remediate findings from audits, assessments, and tests with validation evidence.
• Conduct periodic security-control validation, attack simulations and tabletop exercises.
• Monitor identity-security risks including privileged access and MFA gaps.
• Govern enterprise AI security framework and continuous monitoring.

Skills

EDR

PIM/PAM

WAF

IDS/IPS

Vulnerability Management

DLP

Cloud security platforms

CNAPP

CSPM

CWPP

DSPM

KSPM

Azure

AWS

GCP

Job description

Skills Required

Strong hands-on expertise across enterprise security technologies EDR, PIM/PAM, WAF, IDS/IPS, Vulnerability Management, DLP, and cloud security platforms.

1. 2 Experience managing deployment, configuration, integration, health, coverage, and operational effectiveness of security controls against industry best practices, KPIs, and KRIs.
2. 3 Hands-on knowledge of cloud security CNAPP, CSPM, CWPP, DSPM, and KSPM across Azure, AWS, and GCP, including remediation of misconfigurations and workload-hardening findings.
3. 4 Strong understanding of vulnerability management, patch compliance, remediation tracking, and technology-obsolescence risk management.
4. 5 Experience in identity-security risk monitoring, including excessive privileges, dormant and service accounts, MFA gaps, and privileged-access exceptions.
5. 6 Ability to govern enterprise AI security frameworks covering policy, risk assessment, data protection, access control, compliance, and continuous monitoring.
6. 7 Strong analytical, documentation, dashboarding, reporting, and stakeholder-management skills, with knowledge of security frameworks such as NIST, CIS, and ISO 27001.

Job Responsibilities

1. 1 Oversee and maintain the maturity of security technologies (EDR, PIM/PAM, WAF, IDS/IPS, Vulnerability Management, DLP, and cloud security platforms) against defined industry best practices, KPIs, and KRIs.
2. 2 Manage the deployment, configuration, integration, health, coverage, and operational effectiveness of enterprise security technologies.
3. 3 Drive remediation of vulnerabilities, security misconfigurations, unsupported technologies, and securitycontrol gaps.
4. 4 Define and track SecOps KPIs and KRIs covering vulnerability ageing, patch compliance, security-tool coverage, remediation timelines, incidents, and risk exceptions.
5. 5 Prepare cybersecurity dashboards, operational reports, and risk updates for governance and leadership teams.
6. 6 Manage the effectiveness and coverage of cloud security deployments including CNAPP, CSPM, CWPP, DSPM, and KSPM across Azure, AWS, and GCP, and coordinate remediation of cloud misconfigurations, identity-control gaps, network-segmentation issues, encryption gaps, and workloadhardening findings.
7. 7 Manage remediation of findings arising from audits, cybersecurity assessments, penetration tests, cloud reviews, compliance reviews, and operational-risk assessments, ensuring closure with appropriate technical validation and supporting evidence.
8. 8 Conduct periodic security-control validation, attack simulations, and tabletop exercises.
9. 9 Monitor identity-security risks, including excessive privileges, dormant accounts, service accounts, MFA gaps, and privileged-access exceptions.
10. 10 Govern the enterprise AI security framework, including policies, risk assessment, data protection, access controls, compliance, and continuous monitoring.