Assistant Manager - Information Security

Larsen & Toubro; Mumbai; On-site; INR 2,500,000 - 4,200,000; Full time

Job summary

Larsen & Toubro is seeking a Senior Security Architect to lead enterprise security across EDR, PAM/PIM, cloud security, and vulnerability management in Mumbai. You will align controls with KPI/KRI frameworks and coordinate cross-functional teams to safeguard critical assets.

The role emphasizes cloud security governance (CNAPP, CSPM, CWPP, DSPM, KSPM), identity-risk monitoring, incident readiness, and periodic validation through drills and audits within a large, diverse technology landscape.

Qualifications

• Experience deploying and operating security controls aligned to KPIs and KRIs.
• Hands-on expertise with EDR, PAM/PIM, WAF, IDS/IPS, DLP and cloud security platforms.
• Knowledge of CNAPP, CSPM, CWPP, DSPM and KSPM across major clouds.
• Strong experience in vulnerability management and patch remediation.
• Experience in identity-security risk monitoring and MFA gaps.
• Ability to govern AI security frameworks (policy, data protection, access control).
• Familiarity with NIST, CIS and ISO 27001 frameworks.
• Analytical mindset with strong documentation and reporting skills.
• Stakeholder management across governance, security, and risk teams.
• Ability to drive security-control validation and tabletop exercises.

Responsibilities

• Oversee and maintain the maturity of security technologies against KPIs/KRIs.
• Manage deployment, configuration, integration, and health of controls.
• Drive remediation of vulnerabilities, misconfigurations, and gaps.
• Define and track SecOps KPIs/KRIs including patch timelines and risk exceptions.
• Prepare cyber dashboards, reports, and risk updates for leadership.
• Manage cloud security deployments across CNAPP, CSPM, CWPP, DSPM, and KSPM.
• Coordinate remediation of cloud misconfigurations and identity-control gaps.
• Close findings from audits and assessments with evidence.
• Conduct periodic validation, attack simulations, and tabletop exercises.

Skills

EDR

PIM/PAM

WAF

IDS/IPS

Vulnerability Management

DLP

Cloud security platforms

CNAPP

CSPM

CWPP

Job description

Job Description

Skills Required

Strong hands-on expertise across enterprise security technologies EDR, PIM/PAM, WAF, IDS/IPS, Vulnerability Management, DLP, and cloud security platforms.

• 1 Experience managing deployment, configuration, integration, health, coverage, and operational effectiveness of security controls against industry best practices, KPIs, and KRIs.
• 2 Hands-on knowledge of cloud security CNAPP, CSPM, CWPP, DSPM, and KSPM across Azure, AWS, and GCP, including remediation of misconfigurations and workload-hardening findings.
• 3 Strong understanding of vulnerability management, patch compliance, remediation tracking, and technology-obsolescence risk management.
• 4 Experience in identity-security risk monitoring, including excessive privileges, dormant and service accounts, MFA gaps, and privileged-access exceptions.
• 5 Ability to govern enterprise AI security frameworks covering policy, risk assessment, data protection, access control, compliance, and continuous monitoring.
• 6 Strong analytical, documentation, dashboarding, reporting, and stakeholder-management skills, with knowledge of security frameworks such as NIST, CIS, and ISO 27001.

Job Responsibilities

• 1 Oversee and maintain the maturity of security technologies (EDR, PIM/PAM, WAF, IDS/IPS, Vulnerability Management, DLP, and cloud security platforms) against defined industry best practices, KPIs, and KRIs.
• 2 Manage the deployment, configuration, integration, health, coverage, and operational effectiveness of enterprise security technologies.
• 3 Drive remediation of vulnerabilities, security misconfigurations, unsupported technologies, and securitycontrol gaps.
• 4 Define and track SecOps KPIs and KRIs covering vulnerability ageing, patch compliance, security-tool coverage, remediation timelines, incidents, and risk exceptions.
• 5 Prepare cybersecurity dashboards, operational reports, and risk updates for governance and leadership teams.
• 6 Manage the effectiveness and coverage of cloud security deployments including CNAPP, CSPM, CWPP, DSPM, and KSPM across Azure, AWS, and GCP, and coordinate remediation of cloud misconfigurations, identity-control gaps, network-segmentation issues, encryption gaps, and workloadhardening findings.
• 7 Manage remediation of findings arising from audits, cybersecurity assessments, penetration tests, cloud reviews, compliance reviews, and operational-risk assessments, ensuring closure with appropriate technical validation and supporting evidence.
• 8 Conduct periodic security-control validation, attack simulations, and tabletop exercises.
• 9 Monitor identity-security risks, including excessive privileges, dormant accounts, service accounts, MFA gaps, and privileged-access exceptions.
• 10 Govern the enterprise AI security framework, including policies, risk assessment, data protection, access controls, compliance, and continuous monitoring.