Cybersecurity & Email Infrastructure Manager

Ishvara Tech Consulting Pvt Ltd; Khordha; On-site; INR 1,800,000 - 3,200,000; Full time

Benefits offered by this job

Night shift allowance

Flexible remote work environment

Performance incentives

Growth opportunities

Job summary

Ishvara Tech Consulting Pvt Ltd is seeking a Cybersecurity & Email Infrastructure Manager to establish and maintain a robust security framework, focusing on data protection and email infrastructure across cloud and on‑prem environments.

The role requires hands-on leadership to implement phishing defenses, DLP, MFA, and RBAC, while coordinating with external providers and ensuring compliance with IT laws and privacy standards.

Qualifications

• Bachelor's or Master's in CS, Cybersecurity, IT, or related field.
• Hands-on leadership in security operations and incident response.
• Experience in email security and data protection best practices.

Responsibilities

• Establish and maintain the company security framework.
• Secure data assets and email infrastructure across cloud and on-prem.
• Oversee phishing prevention, impersonation protection, DLP, and access controls.
• Implement RBAC, MFA, SSO, and audit user permissions.
• Lead vulnerability assessments, pen tests, and patch management.
• Coordinate with external providers and ensure regulatory compliance.

Skills

Analytical skills

Detail-oriented

Documentation

Communication skills

Coordination

Security leadership

Education

Bachelor's or Master's in CS/Cybersecurity/IT

Tools

SIEM systems

Endpoint protection

Firewalls

VPN

Google Workspace Admin Console

Job description

Summary

The Cybersecurity & Email Infrastructure Manager will be responsible for establishing and maintaining the company's information security framework, securing data assets, and ensuring the reliability and integrity of the email and communication infrastructure.

This role demands a hands-on technical leader who can configure, monitor, and continuously improve the company's data and network security posture - covering areas like phishing prevention, impersonation protection, data leakage control, and multi-level access management across internal and client-facing systems.

Job Description

• Data & Infrastructure Security
• Design, implement, and oversee end-to-end data protection protocols across servers, workstations, and cloud platforms (GCP, AWS, Azure).
• Regularly conduct vulnerability assessments, penetration testing, and patch management for company systems.
• Enforce encryption standards, secure backups, and controlled data retention practices.
• Manage endpoint security (EDR/AV tools), and implement real-time monitoring for intrusion and anomaly detection.
• Email Infrastructure Management
• Administer and secure the company's email systems (Google Workspace / Microsoft 365 / custom SMTP).
• Configure and maintain DNS-level authentication records - SPF, DKIM, DMARC - ensuring proper mail delivery and protection against spoofing or impersonation.
• Manage SMTP routing, relay settings, and email relay servers to ensure optimal deliverability and reputation.
• Implement and monitor anti-spam, anti-malware, and phishing filters, and maintain block/allow lists.
• Oversee email archiving, backup, retention, and DLP policies to prevent sensitive information leaks.
• Ensure proper setup of email routing for multiple domains, subdomains, and alias-based groups (internal + client communication).
• Coordinate with external hosting providers, ESPs, and DNS registrars to resolve deliverability or reputation issues (e.g., IP warming, sender score management).
• Ensure that all company users adhere to email usage protocols and two-factor authentication on corporate accounts.
• Phishing, Impersonation & Threat Defense
• Deploy and manage anti-phishing and impersonation prevention systems (e.g., Barracuda, Mimecast, Proofpoint, Google Advanced Protection).
• Monitor for domain spoofing, look-alike domains, and unauthorized mail relays.
• Conduct regular phishing simulation exercises and employee awareness campaigns.
• Investigate any suspicious activity, compromised credentials, or unauthorized access attempts.
• Multi-Level Access Control & Identity Governance
• Establish and maintain Role-Based Access Control (RBAC) and Multi-Factor Authentication (MFA) across all company tools and data systems.
• Audit and review user permissions across GitHub, internal dashboards, APIs, CRMs, and third-party integrations.
• Manage employee onboarding/offboarding security workflows including credential revocation and data access deactivation.
• Implement SSO and password policy standards company-wide.
• Data Leakage Prevention & Compliance
• Deploy and monitor Data Loss Prevention (DLP) tools across endpoints, cloud drives, and email systems.
• Establish data classification and handling protocols based on sensitivity levels.
• Ensure compliance with Indian IT Act, ISO 27001, and global privacy frameworks (GDPR, SOC 2) relevant to client data handling.
• Generate periodic security audit reports and maintain documentation for compliance and internal review.
• Incident Response & Security Operations
• Create and manage an Incident Response Plan (IRP) for handling breaches, leaks, and ransomware threats.
• Perform forensic analysis of compromised systems and ensure fast containment and remediation.
• Maintain detailed logs, timelines, and post-incident review documents.
• Report high-risk vulnerabilities or breaches directly to the CTO and leadership team.
• Training & Awareness
• Conduct internal workshops on phishing identification, safe email practices, and data handling.
• Publish periodic security advisories and actionable checklists for employees.
• Foster a culture of security awareness and accountability across departments.

Technical Skills

• Deep understanding of email security (SPF, DKIM, DMARC, MTA/SMTP routing, mail relay servers).
• Strong grasp of SIEM systems, endpoint protection, firewalls, VPN, and identity management tools.
• Experience with Google Workspace Admin Console, Microsoft Exchange, DNS, and Cloudflare Security.

Familiarity with phishing detection tools, threat intelligence systems, and incident response workflows.

High integrity, confidentiality, and accountability for information protection.

Soft Skills

• Analytical and detail-oriented mindset.
• Excellent documentation and reporting ability.
• Strong communication and coordination skills across tech and non-tech teams.

Preferred Qualification

Qualifications & Skills

Education

Bachelor's or Master's in Computer Science, Cybersecurity, Information Technology, or related field.

Certifications (Preferred)

CEH / CISSP / CompTIA Security+ / ISO 27001 Lead Implementer / Google Workspace Admin Certification.

Why Join Us

• Competitive salary with performance incentives.
• Night shift allowance.
• Flexible remote working environment.
• Opportunities for growth and skill development.
• Collaborative and dynamic team culture.