It Security Lead

National Peroxide Limited; Mumbai City; In loco; INR 2.800.000 - 3.800.000; Tempo pieno

Descrizione del lavoro

National Peroxide Limited seeks an experienced IT Security Lead to strengthen the organization’s cybersecurity posture, drive risk management, and ensure regulatory compliance across enterprise systems.

The role oversees security operations, IAM, vulnerability management, and incident response, coordinating with IT and business teams to safeguard critical data and infrastructure.

Competenze

• Bachelor's degree in computer science or information technology; Master’s preferred.
• CISSP and/or CISM certifications are desirable.
• 7+ years IT experience and 5+ years in information security/cybersecurity.

Mansioni

• Develop and implement the organization’s cybersecurity strategy and governance.
• Establish policies, standards, procedures, and controls for security.
• Lead incident response, threat monitoring, and security operations.
• Oversee IAM, MFA, PAM, and SSO implementations.
• Manage vulnerability management and periodic security audits.

Conoscenze

Cybersecurity governance

Incident response

SIEM

EDR/XDR

Identity & access management

Vulnerability management

Cloud security

Threat monitoring

Security architectures

Regulatory compliance

Formazione

Bachelor's degree in CS/IT

Master's degree preferred

Strumenti

Microsoft Sentinel

QRadar

Splunk

EDR/XDR platforms

DLP solutions

Descrizione del lavoro

Position Summary

NPL is seeking an experienced and proactive IT Security Lead to strengthen the organization's cybersecurity posture, manage information security risks, ensure regulatory compliance, and safeguard critical business systems and data. The incumbent will be responsible for driving cybersecurity initiatives, implementing security frameworks, managing security operations, and leading incident response and risk management programs across the enterprise.

Key Responsibilities

Cybersecurity Governance & Strategy

• Develop and implement the organization's cybersecurity strategy aligned with business objectives.
• Establish and maintain information security policies, standards, procedures, and controls.
• Drive cybersecurity awareness programs across the organization.
• Conduct security risk assessments and recommend mitigation measures.

Security Operations & Monitoring

• Lead Security Operations activities including threat monitoring, incident detection, and response.
• Manage SIEM, EDR, SOC, DLP, and endpoint security solutions.
• Monitor security events, vulnerabilities, and emerging cyber threats.
• Coordinate with internal teams and external partners during security incidents.

Infrastructure & Network Security

• Ensure security of firewalls, switches, routers, VPNs, wireless networks, and internet-facing systems.
• Manage network security controls including IPS/IDS, WAF, and secure remote access.
• Review and approve security architecture for new projects and infrastructure deployments.

Identity & Access Management

• Oversee user access management processes.
• Implement least-privilege and role-based access controls.
• Manage Multi-Factor Authentication (MFA), Privileged Access Management (PAM), and SSO solutions.

Vulnerability Management

• Conduct regula vulnerability assessments and penetration testing.
• Track remediation activities and ensure closure within defined SLAs.
• Coordinate periodic security audits and compliance reviews.

Compliance & Risk Management

• Ensure compliance with ISO 27001, DPDP, and other applicable standards.
• Manage third-party security assessments and vendor risk management.
• Support internal and external audits.

Incident Response & Business Continuity

• Lead cybersecurity incident investigations and root cause analysis.
• Develop and maintain Incident Response Plans and Cybersecurity Playbooks.
• Collaborate with IT teams on Disaster Recovery (DR) and Business Continuity Planning (BCP).

Security Projects

• Drive implementation of cybersecurity projects and technologies.
• Evaluate and recommend security tools, platforms, and services.
• Prepare budgets and manage cybersecurity-related procurement.

Required Technical Skills

Security Technologies

• SIEM (Microsoft Sentinel, QRadar, Splunk)
• EDR/XDR (Microsoft Defender, CrowdStrike, Sentinel One)
• DLP Solutions
• Email Security Platforms
• WAF and Network Security Solutions
• Vulnerability Management Tools understanding

Infrastructure & Cloud Security

• Microsoft 365 Security Stack
• Azure Security Center / Defender for Cloud
• Active Directory & Entra ID
• Firewall Management (Fortinet, Palo Alto, Sophos, Check Point)
• VPN & Remote Access Security
• Cloud Security Controls (Azure)

Security Frameworks

• ISO 27001
• Zero Trust Architecture
• DID ( Defence and Depth Model)

Qualifications

• Bachelors degree in computer science, Information Technology.
• Master's Degree preferred.

Desired Certifications

• CISSP
• CISM

Experience Requirements

• 7+ years of overall IT experience.
• Minimum 5 years in Information Security or Cybersecurity roles.
• Experience in managing enterprise security infrastructure and compliance programs.

Key Competencies

• Strong stakeholder management.
• Incident response and crisis management skills.
• Risk assessment and analytical thinking.
• Excellent communication and presentation skills.
• Ability to lead cross-functional teams and drive security culture.