IT Manager

2070Health

Delhi

On-site

INR 1,500,000 - 2,500,000

Full time

14 days+

Get more replies from employers

Send a job-specific resume in minutes.

Job summary

A healthcare venture studio in Delhi seeks an IT Manager to oversee the entire IT infrastructure, ensure cybersecurity compliance, and support multi-location operations. The role demands expertise in IT operations, vendor management, and incident response. Ideal candidates will have 4-8 years of experience in IT administration, with strong skills in cybersecurity and asset management.

Qualifications

4–8 years in IT administration or IT infrastructure roles.
Multi-location IT operations experience.
Experience working in regulated industries is preferred.

Responsibilities

Manage and secure the entire IT infrastructure of the organization.
Ensure compliance with Cybersecurity & Cyber Resilience Framework.
Support employees across multiple office locations.
Administer critical SaaS tools and manage access controls.

Skills

Windows/macOS administration

Office 365/Google Workspace administration

Endpoint security tools

Network segmentation

Patch management

Asset management

VAPT coordination

Cybersecurity awareness training

Job description

About 2070Health

W Health has set up India’s first healthcare focused Venture Studio called 2070Health – an innovation platform that builds transformative healthcare companies from scratch by discovering disruptive opportunities in whitespaces. Distinct from the accelerator approach, our venture studio is closely involved in idea generation, day-to-day operations, and strategic decisions of growing the new business. Companies incubated in the last 24 months include Elevate Now, Nivaan Care, Reveal Healthtech, BabyMD and Everhope Oncology.

Role Overview

The IT Manager will be responsible for managing and securing the entire IT infrastructure of the organization, ensuring compliance with the Cybersecurity & Cyber Resilience Framework (CSCRF), and supporting employees across multiple office locations. This role covers IT operations, cybersecurity designing, implementation, asset management, networking, hardware/software lifecycle, vendor management, patching, backup, endpoint security, and user support.

The IT Manager will work on designing and implementation of all cybersecurity controls.

Key Responsibilities

1. IT Infrastructure & Operations

A. End-User & Hardware Management

Manage and support laptops, desktops, printers, peripherals for ~40 staff across multiple cities.
Enforce device hardening and security baselines (as per OS, endpoint, and network hardening policies).
Ensure secure device provisioning, configuration, updates, and decommissioning.

B. Network & Connectivity Management

Manage office networking setups across cities (LAN, WiFi, firewalls, switches, routers).
Ensure WPA3, VLAN segmentation, RBAC, and secure co‑working network controls.
Maintain VPN access, MFA enforcement, bandwidth policies, and network monitoring.

C. SaaS & Application Support

Administer critical SaaS tools (email, collaboration tools, cloud storage, CRM, monitoring tools).
Manage access provisioning, de‑provisioning, privilege controls, and license renewals.

2. Cybersecurity & CSCRF Compliance

A. Designing & Implementation of Cybersecurity Controls

Enforce all policies: Risk management, Asset management, Authentication & authorization, Data protection & encryption, Network security, Patch management, Incident response, VAPT & vulnerability management, Third‑party vendor security, Backup & disaster recovery.

B. Identity & Access Management (IAM)

Apply least privilege and time‑bound access principles.
Manage MFA for all critical systems and remote access points.
Review access logs and dormant accounts.

C. Incident Detection & Response

Monitor endpoint alerts, email security, network anomalies.
Log, elevate, and document security incidents as per incident management SOP.
Support forensic investigations, RCA, and SEBI reporting requirements.

D. Patch Management & Updates

Monitor OEM advisories, deploy updates as per severity timelines: Critical: 7 days, High: 15 days, Medium/Low: 30 days.
Maintain patch logs, testing records, and change control approvals.

E. Vulnerability Management

Coordinate VAPT activities with CERT‑In empanelled auditors.
Track remediation progress and ensure re‑validation.

3. Asset Management & Documentation

A. IT Inventory Ownership

Maintain a detailed asset register for all hardware, software, and cloud resources.
Track asset lifecycle from purchase to disposal.
Validate annual inventories and reconcile with physical assets.

B. Software Compliance

Maintain SBOMs for critical systems (as mandated in policy).
Ensure only licensed and approved software is installed.
Prevent unauthorized devices or applications.

4. Data Protection, Backup & DR

Implement daily/weekly backups for critical data and server images.
Manage off‑site/cloud backup storage.
Test restore procedures periodically to meet RPO/RTO targets.
Ensure encryption at rest and in transit for all sensitive data.

5. Vendor & Third‑Party Management

Ensure all IT vendors adhere to cybersecurity requirements.
Manage NDAs, MSAs, SLAs, and third‑party audit documentation.
Validate controls from co‑working space providers (network segregation, CCTV access, etc.).
Perform quarterly vendor security reviews.

6. Support & Employee Training

Provide L1/L2 support for IT issues, outages, and hardware failures.
Conduct employee cybersecurity awareness training (phishing, data handling, passwords).

Ensure HODs and teams are aligned with acceptable use policy.

Technical Skills