Cyber Security Lead

G R Infraprojects; Gurugram District; On-site; INR 2,500,000 - 4,200,000; Full time

Job summary

G R Infraprojects is seeking a senior cybersecurity architect to define and implement the organization's security strategy across IT infrastructure, applications, cloud environments, and EPC sites.

You will lead security operations, threat monitoring, incident response, and remediation activities, ensuring security is embedded in SAP, Microsoft 365, and project environments.

Qualifications

• Experience defining cybersecurity architecture aligned to business applications and infrastructure.
• Proven ability to implement threat detection, incident response, and vulnerability management.
• Knowledge of ISO 27001 standards and client-specific security clauses.

Responsibilities

• Define and maintain cybersecurity architecture, aligned to business applications and infrastructure footprint
• Enforce baseline security policies for endpoints, networks, cloud environments, and privileged access
• Ensure security is embedded in all IT projects, including SAP, collaboration tools and site mobilizations
• Implement and manage enterprise-wide threat detection and response systems
• Lead triage, containment and resolution for all cybersecurity incidents and breaches
• Conduct post-incident reviews and drive remediation actions
• Maintain incident logs and share learnings with relevant stakeholders
• Oversee endpoint protection measures across laptops, desktops, and mobile devices
• Monitor and enhance security controls for Microsoft 365, cloud storage, and email gateways
• Conduct vulnerability scans and hardening for critical systems
• Conduct periodic IT security risk assessments across corporate and project environments
• Ensure compliance with internal standards, ISO 27001 and client-specific security clauses in EPC contracts
• Support internal and external audits; maintain all required documentation and remediation logs

Skills

Cybersecurity strategy

Security architecture

Threat monitoring

Incident response

Vulnerability management

Policy enforcement

Risk assessment

ISO 27001 compliance

Endpoint security

Cloud security

SAP security

Microsoft 365 security

Tools

SAP

Microsoft 365

Job description

Role Summary:

Responsible for defining and implementing the organization's cybersecurity strategy, architecture, policies, and security controls across IT infrastructure, business applications, cloud environments, and project sites. Lead security operations, threat monitoring, incident response, vulnerability management, and remediation activities to protect organizational information assets. Ensuring security is integrated into IT projects, including SAP, Microsoft 365, and EPC project environments. Conduct IT security risk assessments, enforce endpoint and access security, and ensure compliance with ISO/IEC 27001, internal security policies, and client-specific contractual requirements. Coordinate security audits, manage cybersecurity risks, maintain documentation, and drive continuous improvement in the organization's overall security posture.

Responsibilities:

• Define and maintain cybersecurity architecture, aligned to business applications and infrastructure footprint
• Enforce baseline security policies for endpoints, networks, cloud environments, and privileged access
• Ensure security is embedded in all IT projects, including SAP, collaboration tools and site mobilizations
• Implement and manage enterprise-wide threat detection and response systems
• Lead triage, containment and resolution for all cybersecurity incidents and breaches
• Conduct post-incident reviews and drive remediation actions
• Maintain incident logs and share learnings with relevant stakeholders
• Oversee endpoint protection measures across laptops, desktops, and mobile devices
• Monitor and enhance security controls for Microsoft 365, cloud storage, and email gateways
• Conduct vulnerability scans and hardening for critical systems
• Conduct periodic IT security risk assessments across corporate and project environments
• Ensure compliance with internal standards, ISO 27001 and client-specific security clauses in EPC contracts
• Support internal and external audits; maintain all required documentation and remediation logs