Cybersecurity Manager / Senior Cybersecurity Specialist

GrowBeyond Tech Private Limited; Bengaluru; On-site; INR 3,500,000 - 7,000,000; Full time

Job summary

GrowBeyond Tech Private Limited is seeking a Cybersecurity Manager / Senior Cybersecurity Specialist to lead our enterprise security program, spanning governance, risk, identity, cloud, endpoints, and data protection. You will shape strategy and drive resilience across the organization.

Applicants should have 8–10 years of cybersecurity experience, deep expertise in Microsoft 365/Azure, networks, applications, and third‑party risk, plus strong communication with executives.

Qualifications

• 8–10 years of cybersecurity experience with ownership of enterprise-level controls and incident response functions.
• Deep expertise in identity, endpoint, network, cloud, application, data, and third-party security domains.
• Proven experience securing Microsoft 365/Azure environments and complex enterprise applications.
• Practical knowledge of frameworks such as NIST CSF and ISO/IEC 27001, with focus on risk-based security controls.
• Strong investigative capabilities and ability to communicate effectively with executive leadership.
• Relevant security certifications and knowledge of Indian cybersecurity and privacy regulations (preferred).

Responsibilities

• Develop, maintain, and update security policies, standards, risk registers, and a prioritized security roadmap.
• Conduct comprehensive risk assessments covering Dynamics, Zoho, Microsoft 365/Azure environments, endpoints, networks, integrations, and vendor ecosystems.
• Administer privileged access management, enforce MFA, oversee joiner-mover-leaver processes, and conduct periodic access reviews.
• Lead efforts in system hardening, coordinate vulnerability scanning and penetration testing, and manage remediation of security gaps.
• Supervise security monitoring activities, perform threat assessments, manage alert escalation protocols, and direct incident investigations.
• Maintain and refine incident response plans, develop playbooks, organize security exercises, document evidence procedures, and conduct post-incident reviews.
• Evaluate security and privacy risks associated with new projects and changes, support security awareness training initiatives, and prepare management reports.

Tools

Microsoft 365/Azure

Job description

Cybersecurity Manager / Senior Cybersecurity Specialist

This role entails leading a comprehensive cybersecurity program that encompasses governance, risk management, identity security, cloud protection, endpoint security, enterprise application security, third-party risk, and incident response. The position is pivotal in safeguarding organizational assets by establishing robust security frameworks, managing critical risks, and ensuring resilience against evolving threats. The successful candidate will drive strategic initiatives to protect data integrity, maintain compliance, and foster a culture of security awareness across the enterprise.

Responsibilities

• Develop, maintain, and update security policies, standards, risk registers, and a prioritized security roadmap.
  
• Conduct comprehensive risk assessments covering Dynamics, Zoho, Microsoft 365/Azure environments, endpoints, networks, integrations, and vendor ecosystems.
  
• Administer privileged access management, enforce multi-factor authentication (MFA), oversee joiner-mover-leaver processes, and conduct periodic access reviews.
  
• Lead efforts in system hardening, coordinate vulnerability scanning and penetration testing, and manage the remediation of identified security gaps.
  
• Supervise security monitoring activities, perform threat assessments, manage alert escalation protocols, and direct incident investigations.
  
• Maintain and refine incident response plans, develop playbooks, organize security exercises, document evidence procedures, and conduct post-incident reviews.
  
• Evaluate security and privacy risks associated with new projects and changes, support security awareness training initiatives, and prepare management reports.
  

Requirements

Requirements:

• Possess 8 to 10 years of cybersecurity experience, with demonstrated ownership of enterprise-level controls and incident response functions.
  
• Demonstrate deep expertise in identity, endpoint, network, cloud, application, data, and third-party security domains.
  
• Have proven experience in securing Microsoft 365/Azure environments and complex enterprise applications.
  
• Apply practical knowledge of frameworks such as NIST CSF and ISO/IEC 27001, with a focus on designing risk-based security controls.
  
• Exhibit strong investigative capabilities and the ability to communicate effectively with executive leadership.
  
• Hold relevant security certifications and possess knowledge of applicable Indian cybersecurity and privacy regulations (preferred).