Information Security Manager

Larsen & Toubro (L&T); Mumbai; On-site; INR 2,800,000 - 5,200,000; Full time

Job summary

Larsen & Toubro Ltd, based in Powai, Mumbai, seeks a Cyber Security Specialist to oversee and advance security technologies across EDR, PIM/PAM, WAF, IDS/IPS, vulnerability management, and cloud security platforms. The role requires 4–8 years in security operations with hands-on CNAPP, CSPM, CWPP, DSPM, and KSPM across Azure, AWS, and GCP.

Work from office at the Corporate IT Headoffice to govern policy, risk assessment, data protection, and continuous monitoring, coordinating with governance

Qualifications

• Strong hands-on expertise across enterprise security technologies (EDR, PIM/PAM, WAF, IDS/IPS, Vulnerability Management, DLP, and cloud security platforms).
• Experience managing deployment, configuration, integration, health, coverage, and operational effectiveness of security controls.
• Hands-on knowledge of CNAPP, CSPM, CWPP, DSPM, and KSPM across Azure, AWS, and GCP.
• Strong understanding of vulnerability management, patch compliance, remediation tracking.

Responsibilities

• Oversee and maintain the maturity of security technologies against KPIs and KRIs.
• Manage deployment, configuration, integration, health, and operational effectiveness of enterprise security technologies.
• Drive remediation of vulnerabilities and misconfigurations.
• Define and track SecOps KPIs and KRIs including patch timelines and risk exemptions.
• Prepare cybersecurity dashboards, governance reports for leadership.
• Coordinate remediation of cloud misconfigurations and identity-control gaps.
• Manage remediation of audit and assessment findings with validation.
• Conduct periodic security-control validation and attack simulations.
• Monitor identity-security risks including MFA gaps and privileged-access exceptions.

Skills

EDR

PIM/PAM

WAF

IDS/IPS

Vulnerability Management

DLP

Cloud Security

CNAPP

CSPM

CWPP

DSPM

KSPM

Identity Security

Education

B.Tech/B.E./MCA In Cyber Security Specialization

Tools

Azure

AWS

GCP

Job description

About Organization:

Larsen & Toubro Ltd, commonly known as L&T, is an Indian multinational conglomerate company, with business interests in engineering, construction, manufacturing, technology, information technology and financial services, headquartered in Mumbai.

The company is counted among world's top five construction companies. The L&T Group comprises of 93 subsidiaries, 5 associate companies, 27 joint ventures and 35 jointly held operations, operating across basic and heavy engineering, construction, realty, manufacturing of capital goods, information technology, and financial services.

This role is based out of Corporate IT in Headoffice.

Job Location: Powai, Mumbai

Working Model: Work from office

Operating Model: 5 days (Alternate Saturdays working)

Educational Qualifications: B.Tech/B.E./MCA In Cyber Security Specialization,

Experience: 4-8 years in Security Technologies Operations Management.

Job Profile

• 1. Strong hands-on expertise across enterprise security technologies EDR, PIM/PAM, WAF, IDS/IPS, Vulnerability Management, DLP, and cloud security platforms.
• 2. Experience managing deployment, configuration, integration, health, coverage, and operational effectiveness of security controls against industry best practices, KPIs, and KRIs.
• 3. Hands-on knowledge of cloud security CNAPP, CSPM, CWPP, DSPM, and KSPM across Azure, AWS, and GCP, including remediation of misconfigurations and workload-hardening findings.
• 4. Strong understanding of vulnerability management, patch compliance, remediation tracking, and technology-obsolescence risk management.
• 5. Experience in identity-security risk monitoring, including excessive privileges, dormant and service accounts, MFA gaps, and privileged-access exceptions.
• 6. Ability to govern enterprise AI security frameworks covering policy, risk assessment, data protection, access control, compliance, and continuous monitoring.
• 7. Strong analytical, documentation, dashboards, reporting, and stakeholder-management skills, with knowledge of security frameworks such as NIST, CIS, and ISO 27001.

Job Responsibilities

• 1. Oversee and maintain the maturity of security technologies (EDR, PIM/PAM, WAF, IDS/IPS, Vulnerability Management, DLP, and cloud security platforms) against defined industry best practices, KPIs, and KRIs.
• 2. Manage the deployment, configuration, integration, health, coverage, and operational effectiveness of enterprise security technologies.
• 3. Drive remediation of vulnerabilities, security misconfigurations, unsupported technologies, and security control gaps.
• 4. Define and track SecOps KPIs and KRIs covering vulnerability ageing, patch compliance, security-tool coverage, remediation timelines, incidents, and risk exceptions.
• 5. Prepare cybersecurity dashboards, operational reports, and risk updates for governance and leadership teams.
• 6. Manage the effectiveness and coverage of cloud security deployments including CNAPP, CSPM, CWPP, DSPM, and KSPM across Azure, AWS, and GCP, and coordinate remediation of cloud misconfigurations, identity-control gaps, network-segmentation issues, encryption gaps, and workloadhardening findings.
• 7. Manage remediation of findings arising from audits, cybersecurity assessments, penetration tests, cloud reviews, compliance reviews, and operational-risk assessments, ensuring closure with appropriate technical validation and supporting evidence.
• 8. Conduct periodic security-control validation, attack simulations, and tabletop exercises.
• 9. Monitor identity-security risks, including excessive privileges, dormant accounts, service accounts, MFA gaps, and privileged-access exceptions.
• 10. Govern the enterprise AI security framework, including policies, risk assessment, data protection, access controls, compliance, and continuous monitoring.

CERTIFICATIONS

Preferred: CCSP, GCIH, GCIA, CRISC, CEH, CompTIA CySA+, or OSCP. Cloud Security: Microsoft Azure Security, AWS Security, or Google Professional Cloud Security Engineer. Equivalent certifications supported by relevant SecOps leadership and hands-on experience may also be considered.