IT Admin

YAAS!; Bengaluru; On-site; INR 1,500,000 - 2,500,000; Full time

Job summary

YAAS! seeks a security infrastructure professional to keep our environment secure, audit-ready, and resilient while enabling fast creative workflows.

You will implement coverage for users, devices, applications and privileged accounts, ensure device compliance, test backups, manage vulnerability remediation, and coordinate incident response with stakeholders. Strong Windows/macOS admin, IAM, and network basics are essential, plus hands-on risk judgment.

Qualifications

• 3 to 5 years of IT infrastructure and information security experience.
• Strong Windows and macOS administration skills (MDM, patching, disk encryption).
• IAM experience with Google Workspace or similar cloud platform.
• Networking knowledge: Wi‑Fi, firewalls, VLANs, NAS permissions.
• Backup and recovery experience with NAS and cloud backups.
• Vulnerability management and security operations familiarity.
• Excellent written communication and ability to work with auditors and vendors.
• Judgment to strengthen security without disrupting production workflows.

Responsibilities

• Ensure coverage for in-scope users, devices, apps and privileged accounts.
• Maintain device compliance baselines including MDM, encryption, and patching.
• Test backups and recovery procedures quarterly; document results.
• Triage and remediate high-risk vulnerabilities and audit findings.
• Coordinate incident management with stakeholders.
• Keep audit evidence current, retrievable and well-organized.

Skills

Windows administration

macOS administration

MDM management

Patching

Disk encryption

Endpoint protection

IAM management

MFA enforcement

Networking basics

Backup & recovery

Vulnerability management

Security operations

Documentation

Communication

Risk-based judgement

Education

Tools

SureMDM

TP-Link Omada

NAS administration

AWS S3/Glacier

Job description

In this role, you will help ensure that YAAS Media’s environment remains secure, resilient and audit-ready, while supporting the speed and flexibility required by creative and production teams.

Your key success measures will include:

• Coverage: All in-scope users, devices, critical applications and privileged accounts have a named owner and an up-to-date status.
• Device compliance: Managed devices meet the agreed baseline for MDM, disk encryption, antivirus or EDR, patching and screen-lock controls. Any exceptions are documented, approved and time-bound.
• Recovery: Backups and recovery procedures for critical systems are tested at least quarterly, with results, issues and remediation actions documented.
• Remediation: Critical and high-risk vulnerabilities and audit findings are resolved within agreed timelines or covered by formally accepted, time-bound treatment plans.
• Incident management: Security incidents are triaged promptly, documented consistently and followed by appropriate corrective actions.
• Audit evidence: Security and compliance evidence remains current, traceable and easy to retrieve, without last-minute collection exercises.

What You Bring:

• Experience: 3 to 5 years of experience across IT infrastructure, endpoint administration and information security within a small or mid-sized organization.
• Endpoint management: Strong Windows and macOS administration skills, including MDM, patching, disk encryption, endpoint protection, local administrator control and troubleshooting.
• Identity and access management: Practical experience managing Google Workspace or a comparable cloud productivity platform, including user accounts, groups, sharing permissions and MFA.
• Networking: Working knowledge of office networks, Wi-Fi, firewalls, routers, VLANs, NAS or shared-folder permissions and secure remote administration.
• Backup and recovery: Experience managing NAS and cloud backup environments, including restore testing, retention policies and recovery procedures.
• Vulnerability management: Ability to conduct or coordinate vulnerability scans, interpret findings, priorities remediation and track issues through to closure.
• Security operations: Familiarity with incident response, log review, access reviews, risk registers and audit evidence collection.
• Communication: Strong written documentation skills and the confidence to work directly with users, management, auditors and external vendors.
• Judgment: A practical, risk-based mindset that strengthens security controls without unnecessarily disrupting legitimate creative and production workflows.

Good to Have:

• Experience with SureMDM or a comparable Windows and macOS device-management platform.
• Experience with TP-Link Omada or a similar network-management platform.
• Hands-on experience administering NAS environments.
• Familiarity with AWS S3, Glacier or comparable cloud backup and archival services.
• Knowledge of security frameworks such as ISO 27001, CIS Controls or NIST Cybersecurity Framework.
• Experience supporting enterprise or third-party risk assessments.
• Exposure to data loss prevention, application allow listing, email security, open-source software governance and vendor-risk management..
• Experience supporting media, design, video-production or other BYOD-heavy environments.