Information Technology Security Manager

Advantmed India LLP; Pune District; Hybrid; INR 2,000,000 - 4,000,000; Full time

Job summary

Advantmed India LLP in Pune seeks a hands-on Security Manager / Enterprise Security Architect to lead enterprise security architecture, cloud security, SOC operations, and security product governance across a large enterprise environment.

The role requires converting risk into practical controls, guiding technical teams, and strengthening security posture across cloud, endpoint, network, identity, and data protection domains. Hybrid/Remote work offered.

Qualifications

• 12+ years in IT security, cybersecurity operations or enterprise security architecture.
• Experience leading SOC operations including SIEM monitoring, threat detection, and incident triage.
• Strong cloud security experience, especially with Azure and Microsoft 365.
• Hands-on exposure to enterprise security tech such as EDR, DLP, endpoint security, firewalls, and IAM.
• Familiarity with standards like NIST, ISO 27001, CIS Controls, HIPAA, HITRUST.

Responsibilities

• Own and improve SOC operations, including monitoring, detection, incident triage, escalation, playbooks, and metrics.
• Manage and mentor cybersecurity analysts, security engineers, and consultants.
• Oversee and manage projects across network and endpoint security, EDR, and DLP.
• Coordinate with cloud, infra, compliance, and business teams to embed security controls.
• Prepare security dashboards, risk updates, and executive summaries for leadership.
• Establish security policies and procedures based on industry frameworks.

Skills

SOC operations

Threat detection

Incident triage

Cloud security

Executive communication

Stakeholder mgmt

Tools

Azure Defender/CSPM

Microsoft 365

EDR

DLP

IAM/PAM/PIM

SIEM

Job description

Below are the key details regarding the position:

Years Exp : 12+ Years(3+ yrs in leadership role)

Mode of work : Hybrid/Remote

Employment type :Full Time

Reporting to :Sr. Director

Job Summary

We are looking for a hands-on Security Manager / Enterprise Security Architect to lead enterprise security architecture, cloud security, SOC operations, and security product governance across a large enterprise environment. This role is ideal for a security leader who can convert risk into practical controls, guide technical teams, improve detection and response, and strengthen security maturity across cloud, endpoint, network, identity, and data protection domains. This role is critical in strengthening our overall security posture, identifying gaps, and enhancing our defences through best practices and continuous improvement.

Key Responsibilities

• Own and improve SOC operations, including monitoring, threat detection, incident triage, escalation, playbooks, metrics, and continuous improvement.
• Manage and mentor a team of cybersecurity analysts, security engineers, and consultants.
• Oversee and manage projects across:
• Network and Endpoint Security, EDR, DLP
• SIEM, Security Operations
• Email Security
• Identity and Access Management (IAM) and PAM
• VAPT
• Partner with cloud, infrastructure, compliance, and business teams to embed security controls into projects and operations.
• Prepare clear security dashboards, risk updates, and executive summaries for leadership.
• Establish security policies, standards, and procedures based on industry frameworks (e.g., HITRUST/HIPAA, NIST, ISO 27001, CIS Controls).
• Coordinate incident response, RCA, lessons learned, and remediation tracking for security events.
• Identify security gaps, recommend practical remediation, and drive measurable improvement in the organization’s security posture.

Candidate Profile

• 12+ years of progressive experience in IT security, cybersecurity operations, or enterprise security architecture, preferably within a large enterprise environment.
• Proven experience leading or managing SOC operations, including SIEM monitoring, threat detection, incident triage, escalation, playbook development, and continuous improvement.
• Strong cloud security experience, preferably with Azure CSPM/Defender and Microsoft 365, including identity controls, secure configuration, logging, monitoring, and cloud security posture management.
• Hands-on exposure to enterprise security technologies such as EDR, DLP, endpoint security, firewalls, network security, email security, web gateway, SIEM, IAM, PAM/PIM, and cloud security platforms.
• Ability to design secure enterprise solutions, assess security controls, identify risk areas, and recommend practical remediation aligned with business and technology priorities.
• Working knowledge of security frameworks and standards such as NIST, ISO 27001, CIS Controls, MITRE ATT&CK, HIPAA, or HITRUST.
• Strong stakeholder management, vendor coordination, documentation, and executive communication skills.
• Relevant certifications such as CISA, CISM, CISSP, CCSP, Azure Security Engineer, or equivalent are preferred and will be considered an added advantage.