Information Technology Security Specialist

Senvion India; Mumbai; On-site; INR 2,500,000 - 4,200,000; Full time

Job summary

Senvion India is seeking a senior security leader to oversee enterprise cybersecurity operations across on‑premises, cloud, and end‑user environments, defining strategies and governance aligned with business goals.

You will drive incident response, vulnerability management, risk assessments, audits, and compliance programs, coordinating with MSSPs, OEMs, and partners to strengthen resilience and security maturity.

Qualifications

• Experience leading enterprise cybersecurity operations across on-premises, cloud, applications and endpoints.
• Define and implement cybersecurity strategies, policies, and procedures aligned with business objectives.
• Adherence to governance frameworks including NIST, ISO 27001, MITRE ATT&CK®, COBIT, ITIL and other industry best practices

Responsibilities

• Lead security operations and incident response program across the organization.
• Develop and test incident response plans, runbooks, and playbooks.
• Coordinate with MSSPs, OEMs and partners during security incidents.
• Ensure timely reporting, escalation and communication of security incidents per escalation matrices.
• Conduct root cause analysis and implement preventive controls to reduce recurrence of incidents.

Skills

Cybersecurity leadership

Security operations management

Incident response leadership

Governance & compliance

Job description

• Lead and manage enterprise cyber security operations across on-premises infrastructure, cloud platforms, applications, and end-user environments.
• Define and implement cyber security strategies, policies, standards, and operational procedures aligned with business objectives.
• Ensure adherence to security governance frameworks including NIST, ISO 27001, MITRE ATT&CK®, COBIT, ITIL, and other industry best practices
• Drive continuous improvement initiatives to enhance organizational cyber resilience and security maturity.

Security Incident Response

• Lead cyber security incident detection, analysis, containment, eradication, recovery, and post-incident review activities.
• Develop, maintain, and periodically test incident response plans, runbooks, and playbooks.
• Coordinate with business stakeholders, IT teams, MSSPs, and external partners during security incidents.
• Ensure timely reporting, escalation, and communication of security incidents according to defined escalation matrices.
• Conduct root cause analysis and implement preventive controls to reduce recurrence of security incidents.

Vulnerability Management & Security Assurance

• Own and manage enterprise vulnerability management programs across infrastructure, applications, cloud platforms, and endpoints.
• Conduct and oversee Vulnerability Assessment and Penetration Testing (VAPT) activities.
• Drive operating system, infrastructure, and application patch management programs.
• Prioritize remediation activities based on business impact and risk exposure.
• Validate security fixes and remediation effectiveness through regular assessments and reviews.
• Identify security weaknesses and recommend risk mitigation strategies.

Risk Management, Compliance & Audits

• Conduct enterprise security risk assessments and security reviews.
• Ensure compliance with regulatory, legal, and internal security requirements.
• Support internal audits, external audits, customer audits, and certification activities for ISO 27001:2022.
• Establish and maintain security controls to protect organizational assets and sensitive information.
• Develop security metrics, dashboards, and executive-level reporting.

Risk Management, Compliance & Audits

• Conduct enterprise security risk assessments and security reviews.
• Ensure compliance with regulatory, legal, and internal security requirements viz CERT in, CEA,PDP, ISO 27001 etc
• Support internal audits, external audits, customer audits, and certification activities for ISO 27001:2022.
• Establish and maintain security controls to protect organizational assets and sensitive information.
• Develop security metrics, dashboards, and executive-level reporting.
• Manage MSSPs, OEMs, consultants, and technology partners.
• Establish and govern security service delivery processes, SLAs, SLOs, and performance metrics.
• Conduct regular service reviews and ensure contractual compliance.

Drive partner accountability for security deliverables and operational effectiveness.