It Security Manager

Globalstep; Pune District; Hybrid; INR 900,000 - 1,300,000; Full time

Job summary

GlobalStep in Pune is seeking an experienced Manager IT Security to design, build, and operate a scalable security program across a distributed hybrid environment. You will own security architecture, drive Zero Trust, lead SOC capabilities, and collaborate with IT, network, and product teams to protect high-value game IP and client data.

This role offers exposure to global audits, client security questionnaires, and a clear path to senior leadership.

Qualifications

• 8-15 years of experience in cybersecurity.
• Proven experience building or scaling security programs.
• Strong hands-on expertise in SIEM / SOC operations.
• Incident response experience.
• Identity & access management experience.
• Experience working cross-functionally with IT, network, and cloud teams.

Responsibilities

• Design end-to-end security architecture across identity, devices, network, data, and monitoring.
• Lead and mature SOC/NOC capabilities and threat-hunting.
• Drive Zero Trust aligned access models and JML lifecycle controls.
• Collaborate with IT, network, and cloud teams for secure deployments.
• Own security policies, audits, and client security questionnaires.

Skills

Cybersecurity leadership

Security program building

SIEM / SOC operations

Incident response

Identity & access management

Cross-functional collaboration

Stakeholder management

Team leadership

Tools

Microsoft Entra ID

CrowdStrike

Microsoft Intune

Microsoft Sentinel

Splunk

QRadar

DLP tools

Job description

Manager IT Security - Pune Magarpatta

About GlobalStep

GlobalStep is a global creative and technology services company in the video games industry, supporting leading game developers and publishers across studios in the USA, Canada, UK, Romania, Portugal, and India.

We partner deeply in the game development lifecyclehandling pre-release game builds, assets, and sensitive IP across services including art production, engineering, QA, localization, and player engagement.

With a distributed studio model, hybrid workforce, and high-value client IP, security is mission-critical to our business and growth.

Why This Role

• Greenfield opportunity to build and scale a global security program
• Own end-to-end security architecture and implementation
• Build and mature a SOC from the ground up
• Direct exposure to global clients, audits, and publisher expectations
• Work in a high-impact, IP-sensitive environment
• Strong pathway toward Head of Security / CISO roles

Role Purpose

This role is responsible for designing, building, and operationalizing GlobalSteps cybersecurity program across a distributed, hybrid, and high-growth environment.

You will act as the single-threaded owner of security, while working closely with internal IT teams and external partners to implement scalable, enterprise-grade security controls.

Key Responsibilities

1. Security Architecture & Strategy

• Design and implement end-to-end security architecture across:
  • Identity & Access
  • Endpoints & Devices
  • Network & Segmentation
  • Logging & Monitoring
  • Data Protection
• Establish identity as the primary control plane:
  • MFA, RBAC, PAM, Conditional Access
• Drive Zero Trust-aligned access models
• Implement client/project-level environment segregation

2. Cross-Functional Collaboration

• Work closely with:
  • Network Administrators (segmentation, firewall policies, VPN)
  • M365 / Identity specialists (Entra ID, Conditional Access, collaboration security)
• Align security architecture with IT infrastructure and cloud strategy
• Act as the bridge between security and IT operations teams

3. Identity & Access Management (Critical Focus Area)

• Manage access for a high-churn workforce (FTEs, contractors, freelancers)
• Implement strong JoinerMoverLeaver (JML) lifecycle controls
• Enforce:
  • Least privilege access
  • Privileged access separation
  • Elimination of orphaned accounts
• Align access provisioning with project-based roles and groups

4. Endpoint, Device & BYOD Security

• Define and enforce controls for:
  • Corporate devices
  • Lab/testing devices
  • BYOD endpoints
• Implement:
  • Endpoint detection & response (EDR)
  • Device compliance and hardening
• Establish differentiated trust models:
  • Full access managed devices
  • Restricted access BYOD

5. Security Monitoring, SIEM & SOC

• Select, deploy, and operationalize SIEM platform
• Onboard logs across identity, endpoint, network, and infrastructure systems
• Design and build a multi-tier SOC, including:
  • Tier 1 monitoring
  • Tier 2 investigation
  • Detection engineering
  • Threat hunting
• Develop detection use cases and response playbooks

6. SOC/NOC Leadership & Capability Building

• Lead and manage a team of network and security professionals supporting:
  • SOC (Security Operations)
  • NOC (Network Operations)
• Define:
  • Roles and responsibilities
  • Escalation models
  • Performance metrics
  • Career paths through skill gap analysis and focused training programs
• Ensure 24x7 monitoring readiness as the program matures

7. Incident Response & Threat Management

• Lead response to:
  • Security incidents
  • Threats and vulnerabilities
• Develop playbooks for:
  • Ransomware
  • Account compromise
  • Data exfiltration / IP leakage
• Drive root cause analysis and continuous improvement

8. Data & Game IP Protection (Core Business Risk)

• Design and implement controls to protect high-value game IP
• Implement:
  • Data Loss Prevention (DLP)
  • File access monitoring
  • Access traceability
• Enforce:
  • USB restrictions
  • Screen capture controls
• Monitor for unusual data access and movement patterns

9. Network & Infrastructure Security

• Work with network teams to implement studio-level segmentation
• Reduce lateral movement and enforce controlled east-west traffic
• Secure remote access (VPN and evolving models)

10. Vendor & Partner Management

• Engage with third-party vendors and service providers for:
  • Security tool deployment
  • Implementation support
  • Ongoing platform management
• Evaluate vendors and ensure alignment with security architecture and standards

11. Governance, Risk & Compliance

• Develop and enforce security policies and procedures
• Own:
  • Client security audits
  • Questionnaires
  • Compliance requirements
• Interface with client security stakeholders

12. Security Operations & Scaling

• Support a centralized security operations model (Pune hub)
• Build systems that scale from ~1400 to ~2800 users
• Embed security into business and IT processes

Candidate Profile

Must-Have

• 8-15 years of experience in cybersecurity
• Proven experience building or scaling security programs
• Strong hands-on expertise in:
• SIEM / SOC operations
• Incident response
• Identity & access management
• Experience working cross-functionally with IT, network, and cloud teams
• Experience managing or leading SOC/NOC or security operations teams
• Experience building team capability, training frameworks, or career paths
• Experience working with external vendors / implementation partners
• Strong understanding of:
• Network security and segmentation
• Access control models
• Excellent communication and stakeholder management skills

Good-to-Have

• Experience with:
• Microsoft Entra ID
• CrowdStrike (or similar EDR)
• Microsoft Intune
• Microsoft Sentinel / Splunk / QRadar
• DLP / data protection tools
• Experience in:
• Gaming, media, VFX, or IP-sensitive industries
• Familiarity with:
• Zero Trust architectures
• BYOD security models
• Certifications:
• CISSP, CISM, CEH or equivalent

Success Metrics

• Improvement in security maturity and visibility
• Effective incident detection and response
• Reduction in risk of IP leakage
• Successful rollout of security tools and platforms
• Strong SOC/NOC performance and team capability growth
• Clear career progression and upskilling within the security team
• Positive outcomes in client audits and security reviews

Location

Pune | Shift: 3 PM - 12 AM