Information Technology Security Manager

Advantmed; Pune District; Hybrid; INR 3,500,000 - 6,500,000; Full time

Job summary

Advantmed is seeking a hands-on Manager - IT Security to lead enterprise security architecture, cloud security, SOC operations, and product governance in a large enterprise environment. The role focuses on converting risk into practical controls, guiding technical teams, and strengthening security posture across cloud, endpoints, network, identity, and data protection.

The candidate will lead SOC operations, mentor cybersecurity staff, and coordinate with cloud, infrastructure, and compliance

Qualifications

• 12+ years of progressive experience in IT security, cybersecurity operations, or enterprise security architecture.
• Proven leadership in SOC operations, SIEM monitoring, threat detection, incident triage, escalation, and playbook development.
• Strong cloud security experience with Azure Defender, CSPM, and Microsoft 365 including identity controls and logging.

Responsibilities

• Own and improve SOC operations, including monitoring, threat detection, incident triage, escalation, playbooks, metrics, and continuous improvement.
• Manage and mentor a team of cybersecurity analysts, security engineers, and consultants.
• Oversee and manage multiple security projects across network/endpoint security, SIEM, cloud security, IAM/PAM, DLP, and risk management.

Skills

SOC operations

Cloud security

IAM / PAM

EDR / DLP

Security governance

Tools

Azure Defender

SIEM

CSPM

Job description

Below are the key details regarding the position:

Role : Manager -IT Security

Years Exp : 12+ Years(3+ yrs in leadership role)

Location : Ahmedabad/Gandhinagar/Pune/Remote

Mode of work : Hybrid/Remote

Employment type :Full Time

Reporting to :Sr. Director

Job Summary

We are looking for a hands-on Security Manager / Enterprise Security Architect to lead enterprise security architecture, cloud security, SOC operations, and security product governance across a large enterprise environment. This role is ideal for a security leader who can convert risk into practical controls, guide technical teams, improve detection and response, and strengthen security maturity across cloud, endpoint, network, identity, and data protection domains. This role is critical in strengthening our overall security posture, identifying gaps, and enhancing our defences through best practices and continuous improvement.

Key Responsibilities

• Own and improve SOC operations, including monitoring, threat detection, incident triage, escalation, playbooks, metrics, and continuous improvement.
• Manage and mentor a team of cybersecurity analysts, security engineers, and consultants.
• Oversee and manage projects across:

• Network and Endpoint Security, EDR, DLP
• SIEM, Security Operations
• Email Security
• Infrastructure Security, Cloud Security
• Identity and Access Management (IAM) and PAM
• VAPT
• Cyber Risk Management

• Partner with cloud, infrastructure, compliance, and business teams to embed security controls into projects and operations.
• Prepare clear security dashboards, risk updates, and executive summaries for leadership.
• Establish security policies, standards, and procedures based on industry frameworks (e.g., HITRUST/HIPAA, NIST, ISO 27001, CIS Controls).
• Coordinate incident response, RCA, lessons learned, and remediation tracking for security events.
• Identify security gaps, recommend practical remediation, and drive measurable improvement in the organization’s security posture.

Candidate Profile

• 12+ years of progressive experience in IT security, cybersecurity operations, or enterprise security architecture, preferably within a large enterprise environment.
• Proven experience leading or managing SOC operations, including SIEM monitoring, threat detection, incident triage, escalation, playbook development, and continuous improvement.
• Strong cloud security experience, preferably with Azure CSPM/Defender and Microsoft 365, including identity controls, secure configuration, logging, monitoring, and cloud security posture management.
• Hands-on exposure to enterprise security technologies such as EDR, DLP, endpoint security, firewalls, network security, email security, web gateway, SIEM, IAM, PAM/PIM, and cloud security platforms.
• Ability to design secure enterprise solutions, assess security controls, identify risk areas, and recommend practical remediation aligned with business and technology priorities.
• Working knowledge of security frameworks and standards such as NIST, ISO 27001, CIS Controls, MITRE ATT&CK, HIPAA, or HITRUST.
• Strong stakeholder management, vendor coordination, documentation, and executive communication skills.
• Relevant certifications such as CISA, CISM, CISSP, CCSP, Azure Security Engineer, or equivalent are preferred and will be considered an added advantage.