It Security Lead

National Peroxide Limited; Thane; On-site; INR 1,800,000 - 3,600,000; Full time

Job summary

National Peroxide Limited in Thane, India seeks an experienced IT Security Lead to strengthen cyber defenses, manage risk, and drive security initiatives across the enterprise. You will lead governance, operations, and incident response, partnering with IT and business teams to protect critical data and systems.

The role requires 7+ years in IT with 5+ years in security, strong knowledge of SIEM, EDR, IAM, and cloud security, and certifications like CISSP or CISM.

Qualifications

• Bachelor's degree in computer science or information technology (Master's preferred).
• 7+ years of overall IT experience with at least 5 years in information security or cybersecurity.
• Experience managing enterprise security infrastructure and compliance programs.
• Strong stakeholder management, incident response, and crisis management capabilities.

Responsibilities

• Develop and implement the organization's cybersecurity strategy aligned with business objectives.
• Lead security operations including threat monitoring, incident detection, and response.
• Oversee IAM, MFA, PAM, and SSO implementations with least-privilege principles.
• Coordinate security audits, risk assessments, and vendor risk management.
• Ensure ISO 27001, DPDP and related standards compliance.

Skills

7+ years IT experience

Security incident response

Risk assessment & analysis

Stakeholder management

Communication & presentation

Leadership of cross-functional teams

Education

Bachelor's degree in CS/IT

Master's degree preferred

Tools

Microsoft Sentinel

QRadar

Splunk

Microsoft Defender

CrowdStrike

SentinelOne

DLP solutions

Job description

Position Summary

NPL is seeking an experienced and proactive IT Security Lead to strengthen the organization's cybersecurity posture, manage information security risks, ensure regulatory compliance, and safeguard critical business systems and data. The incumbent will be responsible for driving cybersecurity initiatives, implementing security frameworks, managing security operations, and leading incident response and risk management programs across the enterprise.

Key Responsibilities

Cybersecurity Governance & Strategy

• Develop and implement the organization's cybersecurity strategy aligned with business objectives.
• Establish and maintain information security policies, standards, procedures, and controls.
• Drive cybersecurity awareness programs across the organization.
• Conduct security risk assessments and recommend mitigation measures.

Security Operations & Monitoring

• Lead Security Operations activities including threat monitoring, incident detection, and response.
• Manage SIEM, EDR, SOC, DLP, and endpoint security solutions.
• Monitor security events, vulnerabilities, and emerging cyber threats.
• Coordinate with internal teams and external partners during security incidents.

Infrastructure & Network Security

• Ensure security of firewalls, switches, routers, VPNs, wireless networks, and internet-facing systems.
• Manage network security controls including IPS/IDS, WAF, and secure remote access.
• Review and approve security architecture for new projects and infrastructure deployments.

Identity & Access Management

• Oversee user access management processes.
• Implement least-privilege and role-based access controls.
• Manage Multi-Factor Authentication (MFA), Privileged Access Management (PAM), and SSO solutions.

Vulnerability Management

• Conduct regula vulnerability assessments and penetration testing.
• Track remediation activities and ensure closure within defined SLAs.
• Coordinate periodic security audits and compliance reviews.

Compliance & Risk Management

• Ensure compliance with ISO 27001, DPDP, and other applicable standards.
• Manage third-party security assessments and vendor risk management.
• Support internal and external audits.

Incident Response & Business Continuity

• Lead cybersecurity incident investigations and root cause analysis.
• Develop and maintain Incident Response Plans and Cybersecurity Playbooks.
• Collaborate with IT teams on Disaster Recovery (DR) and Business Continuity Planning (BCP).

Security Projects

• Drive implementation of cybersecurity projects and technologies.
• Evaluate and recommend security tools, platforms, and services.
• Prepare budgets and manage cybersecurity-related procurement.

Required Technical Skills

Security Technologies

• SIEM (Microsoft Sentinel, QRadar, Splunk)
• EDR/XDR (Microsoft Defender, CrowdStrike, Sentinel One)
• DLP Solutions
• Email Security Platforms
• WAF and Network Security Solutions
• Vulnerability Management Tools understanding

Infrastructure & Cloud Security

• Microsoft 365 Security Stack
• Azure Security Center / Defender for Cloud
• Active Directory & Entra ID
• Firewall Management (Fortinet, Palo Alto, Sophos, Check Point)
• VPN & Remote Access Security
• Cloud Security Controls (Azure)

Security Frameworks

• ISO 27001
• Zero Trust Architecture
• DID ( Defence and Depth Model)

Qualifications

• Bachelors degree in computer science, Information Technology.
• Master's Degree preferred.

Desired Certifications

• CISSP
• CISM

Experience Requirements

• 7+ years of overall IT experience.
• Minimum 5 years in Information Security or Cybersecurity roles.
• Experience in managing enterprise security infrastructure and compliance programs.

Key Competencies

• Strong stakeholder management.
• Incident response and crisis management skills.
• Risk assessment and analytical thinking.
• Excellent communication and presentation skills.
• Ability to lead cross-functional teams and drive security culture.