IT Security and Governance Lead

BHIVE Workspace; Bengaluru; On-site; INR 4,000,000 - 6,000,000; Full time

Job summary

BHIVE Workspace in Bengaluru seeks a senior IT Security & Governance Lead to own BHIVE's end-to-end cybersecurity posture, spanning workplace platforms, endpoints, networks, and cloud environments. Reporting to the SVP – IT, you will design, implement, and operationalise security controls and governance across the organisation.

You will author policies, run incident response, oversee risk registers, and drive regulatory readiness including DPDP Act, CERT-In, AI governance, and vendor security

Qualifications

• 8–12 years of IT/Security experience with 4–6 years in dedicated cybersecurity, governance, or infrastructure security.
• Education includes a Bachelor’s in CS/IT/Engineering; a Master’s/MBA is an advantage.

Responsibilities

• Workplace Platform & Email Security: govern Microsoft 365, MFA, Conditional Access, Defender suite.
• Cybersecurity Governance, Policy & Compliance: build governance framework, risk registers, SOPs; lead DPDP & compliance programs.
• Network & Infrastructure Security: embed security in design, zero-trust, firewall governance, secure remote access.
• Endpoint, MDM & Detection Controls: deploy and manage MDM/EDR/XDR; enforce baselines and DLP; threat visibility.
• Vendor, Software & Third-Party Governance: third-party access governance, vendor contracts security, audit trails.
• AI Governance & Emerging Tech: define AI governance policy for tools like Copilot, ChatGPT; monitor regulatory impact.
• Security Awareness & Incident Response: run awareness programs; own IR plan and risk dashboards.

Skills

IT Security

Governance

Policy & Documentation

Incident Response

Vendor & Third-Party Governance

AI Governance

Regulatory Compliance (DPDP, CERT-In)

Education

Bachelor's degree in Computer Science, IT, Engineering or related field

Master's degree or MBA (IT/Systems) an advantage

Tools

Microsoft 365 Security

MDM/EDR/XDR

ISO 27001 & NIST frameworks

Data Loss Prevention (DLP)

Job description

The IT Security & Governance Lead will be BHIVE Group's dedicated security and governance role, reporting directly to the SVP – IT. This is a senior contributor role that combines strategic governance ownership with hands-on technical execution. The incumbent will be responsible for designing, implementing, and operationalising BHIVE's end-to-end cybersecurity posture — spanning workplace platforms, endpoints, network infrastructure, cloud environments, and emerging technology adoption.

Beyond technical controls, this role is central to BHIVE's regulatory readiness (DPDP Act, CERT-In), AI governance, and the formulation of policies, SOPs, and documentation that embed security into every layer of the organisation. The right person will be equally comfortable writing a security policy, leading an incident response, presenting a risk register.

1)Workplace Platform & Email Security

• Secure and govern the Microsoft 365 environment — including identity protection, MFA enforcement, Conditional Access, and Microsoft Defender suite administration.
• Own email security governance and share point governance, ensuring robust data protection and domain integrity across all BHIVE platforms.

2) Cybersecurity Governance, Policy & Compliance

• Build and maintain BHIVE's cybersecurity governance framework — policies, risk registers, SOPs, and control documentation — aligned to ISO 27001 & NIST obligations.
• Lead the organisation's DPDP Act compliance programme, conduct periodic security posture assessments, and present prioritised remediation roadmaps.

3)Network & Infrastructure Security

• Embed security principles into network design and architecture reviews — covering segmentation, zero-trust, firewall governance, and secure remote access.
• Own vulnerability management from scanning through remediation, ensuring continuous coverage across all network-connected assets and cloud workloads.

4)Endpoint, MDM & Detection Controls

• Evaluate, deploy, and manage MDM and EDR/XDR solutions; enforce endpoint hardening baselines and DLP controls across corporate and BYOD devices.
• Maintain end-to-end threat visibility — tuning detection rules, triaging alerts, and driving timely response across all endpoint environments.

5)Vendor, Software & Third-Party Governance

• Own third-party and vendor access governance — risk assessments, JIT access controls, SaaS subscription management, and shadow IT mitigation.
• Collaborate with procurement and legal on security requirements in vendor contracts, and govern ERP access controls and audit trail configuration.

6) AI Governance & Emerging Technology

• Develop and operationalise BHIVE's AI Governance Policy, defining acceptable use, data handling guardrails, and risk controls for tools such as Microsoft Copilot ,ChatGPT,Claude etc.
• Monitor the evolving regulatory and threat landscape (DPDP, CERT-In, RBI guidelines) and brief on implications for BHIVE's security posture.

7) Security Awareness & Incident Response

• Run the organisation-wide security awareness programme — phishing simulations, role-based training to build a security-first culture.
• Own the Incident Response Plan; coordinate incident response, and deliver regular security dashboards and risk reports to the SVP-IT.

Required QualificationsEducation Bachelor's degree in Computer Science, Information Technology, Engineering, or a related technical field. Master's degree or MBA (IT/Systems) is an advantage.Experience 8 – 12 years of overall IT/Security experience with a minimum of 4 –6 years in a dedicated cybersecurity, governance, or infrastructure security role