Senior Associate- IT Infra & Security

upGrad; Mumbai; On-site; INR 900,000 - 1,300,000; Full time

Job summary

upGrad is seeking a Senior Associate to strengthen information security, Google Workspace, endpoint ecosystem, and core IT infrastructure. The role supports secure day-to-day tech operations, including M365 to Google Workspace migration, endpoint security, and compliance.

The candidate will manage vulnerability management, incident response, and continuous security improvements across on-premises and cloud environments, aligning with ISO 27001 standards.

Qualifications

• Security, reliability, and governance of IT infra and data assets.
• Experience with Google Workspace administration and security controls.
• Managing endpoint security, vulnerability management, and incident response.

Responsibilities

• Plan, implement, maintain and monitor network infrastructure and services.
• Ensure availability, performance, scalability, and security of IT systems.
• Troubleshoot hardware, software, network, and endpoint issues.
• Maintain backup, disaster recovery, and business continuity practices.
• Manage lifecycle of devices across Windows, macOS, Android and iOS.
• Define secure configuration baselines for devices and monitor compliance.

Skills

Information security

Google Workspace

Endpoint security

VAPT

ISO 27001

Tools

MDM/UEM

EDR

Firewall

VPN

Job description

The Senior Associate will be responsible for managing and strengthening the organization’s information security, Google Workspace environment, endpoint ecosystem, and core IT infrastructure. The role will support secure and reliable day-to-day technology operations, including the Microsoft 365 to Google Workspace migration, endpoint security, infrastructure management, compliance, incident response, vulnerability management, and technology improvements.

Key Responsibilities

1. IT Infrastructure & Operations

• Plan, implement, maintain, and monitor LAN/WAN, Wi-Fi, internet connectivity, servers, switches, routers, firewalls, VPNs, and other network infrastructure.
• Ensure availability, performance, scalability, and security of critical IT infrastructure and systems.
• Troubleshoot and resolve escalated hardware, software, network, internet, endpoint, and system-related issues.
• Establish and maintain monitoring, backup, disaster recovery, and business continuity practices.
• Manage infrastructure vendors, AMC/support contracts, licenses, and technology partners.
• Support infrastructure upgrades, office IT deployments, and technology migrations.
• Manage the lifecycle of Windows, macOS, Android, and iOS devices, including enrollment, configuration, patching, application deployment, inventory, compliance monitoring, and secure decommissioning.
• Manage MDM/UEM, EDR, antivirus, anti-malware, firewall, disk encryption, device-control, and endpoint compliance solutions.
• Define and enforce secure configuration baselines for corporate and BYOD devices.
• Monitor endpoint alerts and investigate compromised, vulnerable, or non-compliant devices.
• Maintain accurate endpoint and asset records and establish secure onboarding, role-change, offboarding, data-removal, and device-lifecycle processes.

3. Security Operations, DLP & Incident Response

• Conduct security posture assessments and review security policies, configurations, risks, and remediation actions.
• Implement and manage DLP controls across email, web, cloud applications, and endpoints.
• Investigate DLP alerts and continuously refine security rules while minimizing false positives.
• Handle escalated security incidents, including phishing, compromised accounts, malware, endpoint compromise, and suspected data leakage.
• Coordinate incident containment, investigation, root-cause analysis, corrective actions, and lessons learned.
• Work with internal teams and security partners to strengthen the organization's overall security posture.

4. Google Workspace Administration & Security

• Administer Google Workspace, including users, Organizational Units, groups, domains, Shared Drives, licenses, administrative roles, Gmail, Drive, Calendar, Meet, Groups, and Google Vault.
• Configure and manage MFA, SSO, RBAC, access controls, external-sharing restrictions, retention policies, email security, audit logging, security alerts, investigation tools, eDiscovery, and legal holds.
• Support and manage the Microsoft 365 to Google Workspace migration, including user migration, security configuration, access management, troubleshooting, and post-migration stabilization.
• Conduct periodic reviews of privileged access, inactive accounts, external sharing, security configurations, and overall Workspace security posture.
• Resolve escalated administration, access, email delivery, and Google Workspace security issues.

5. VAPT, Vulnerability Management & Compliance

• Coordinate VAPT activities, including scope definition, access requirements, schedules, rules of engagement, evidence collection, remediation, retesting, and closure.
• Maintain vulnerability and risk registers and track remediation across endpoints, networks, servers, cloud platforms, and applications.
• Support ISO 27001, internal, customer, and regulatory audits.
• Coordinate evidence collection, control testing, risk assessments, non-conformities, corrective actions, and compliance documentation.
• Support continuous improvement of IT security policies, procedures, and controls.
• Support secure and reliable office networks, servers, storage, backups, recovery readiness, and infrastructure upgrades.
• Evaluate and support implementation of VDI and secure-access solutions for remote work and BYOD environments.
• Assess solutions based on identity, data protection, device isolation, performance, scalability, security, and user experience.
• Coordinate technology vendors and service providers for evaluation, procurement, implementation, maintenance, escalations, and Proof of Concepts (POCs).