Incred (IFSL)- IT Lead

Nexthire; United States; On-site; USD 120,000 - 170,000; Full time

Job summary

Nexthire is seeking a Senior Google Workspace Administrator for a Banking & NBFC environment. You will design, deploy, and secure the Google Workspace stack, ensuring alignment with regulatory requirements, data privacy, and cyber incident frameworks.

You will work across IT Infrastructure, InfoSec, and Internal Audit to keep Gmail, Drive, Meet, Chat, and AppSheet productive while enforcing access controls, DLP, encryption, and AI governance.

Qualifications

• 4–8 years of hands-on Google Workspace administration in enterprise environments.
• Certifications: Google Professional Workspace Administrator preferred.
• Experience with SAML SSO, OAuth 2.0, and zero-trust architectures.
• Strong understanding of data protection, DLP, and regulatory requirements for financial services.

Responsibilities

• Design, deploy, and secure Google Workspace with IAM, SSO, and MFA controls.
• Enforce context-aware access, DLP policies, and data privacy across Workspace apps.
• Audit readiness with Google Vault, eDiscovery, and logging for compliance.
• Lead automation via Apps Script and AppSheet for lifecycle processes.
• Collaborate with InfoSec, Risk, and Audit to meet RBI/SEBI/GDPR-type requirements.
• Train IT staff and create internal learning content for Google Workspace administration.

Skills

Google Workspace administration

IAM & SSO

MFA & 2SV

DLP & data security

CIS Benchmarks

AppSheet & Apps Script

AI governance

GCP knowledge

Education

Bachelor's degree in Computer Science or related field

Tools

AppSheet

Google Apps Script

GCP

Job description

Job Title: Senior Google Workspace Administrator (Banking & NBFC)

Department: Information Technology

Reports To: Lead — IT Infrastructure / CISO

Summary:

We are seeking a Senior Google Workspace Administrator with deep expertise in financial enterprise environments. In this role, you will design, deploy, and secure our Google Workspace ecosystem while ensuring strict alignment with banking regulations, data privacy mandates, and cyber incident frameworks.

You will work at the intersection of IT Infrastructure, InfoSec, and Internal Audit, ensuring seamless productivity tools (Gmail, Drive, Meet, Chat, AppSheet) while maintaining robust access controls, encryption, and DLP enforcement.

Key Focus:

Enterprise Google Workspace management, security architecture, RBI/NBFC compliance readiness, and identity governance.

Certifications Preferred: Google Professional Workspace Administrator, GCP Security Engineer, or CISSP/CISA.

Scope:

End-to-end administration, AppSheet/Apps Script automation, MDM/BYOD governance, and audit-ready security logging.

AI Governance & Administration:

• Hands-on experience configuring Google Gemini enterprise settings, AI access policies, and data boundaries

  within the Google Admin console.

Team Lead & Training:

• Lead and Train existing IT Staff in Google Workspace Administration.

  Should be able to create Content for internal Learning Modules for Employee Training.

Responsibilities:

Security, IAM & Identity Governance

• Design and maintain Identity & Access Management (IAM), Single Sign-On (SAML/SSO),

  Multi-Factor Authentication (2SV/Hardware Keys), and OAuth application approvals.

• Manage Context-Aware Access (CAA) to restrict workspace access based on IP, geo-location, device

  compliance, and user roles.

• Enforce granular Data Loss Prevention (DLP) policies across Drive, Gmail, and Chat to prevent

  unauthorized leakage of Sensitive Personal Data (PII, Financial records, Credit card numbers).

• Implement Best Practices and align to CIS Benchmarks.

• Enforce AI Data Governance & Privacy Controls via the Workspace Admin Console to ensure

  internal company data/PII is protected and never used to train public generative AI models.

Audit, Compliance & Regulatory Readiness

• Partner with InfoSec and Risk teams to ensure compliance with financial guidelines (RBI Cyber

  Security Framework, CERT-In, SEBI, GDPR, ISO 27001).

• Maintain complete operational readiness for internal/external audits, keeping immutable logs via

  Google Vault, eDiscovery rules, and retention policies.

• Configure, export, and monitor log forwarding from Workspace Admin Console to corporate SIEM /

  SOC tools for real-time threat detection.

• Familiarity with deploying AI-assisted classification, automated DLP rule generation, and smart features

  governance.

• Monitor and audit generative AI usage metrics and logs via the Google Admin AI Control Center to

  ensure alignment with IT/Sec policies and regulatory standards

Mobile Device Management (MDM) & Endpoint Security

• Oversee corporate and BYOD mobile management (Android Enterprise, iOS) via Google Endpoint Management or 3rd-party MDMs (Manage Engine)

• Implement remote wipe, encrypted containerization, certificate management, and app whitelisting for employee endpoints.

Mail Routing, Cloud Infrastructure & Automation

• Manage complex email routing, SPF, DKIM, DMARC, ARC, and advanced phishing/spam filtering configurations.

• Build low-code/no-code operational scripts using Google Apps Script and AppSheet to automate user lifecycle processes (onboarding, offboarding, access reviews).

• Manage integrated GCP projects supporting Workspace applications, API credentials, service accounts, and cloud resource boundaries.

• Oversee and configure AI-driven Threat Defense in Gmail to block sophisticated spear-phishing, deepfake/spoofing attempts, and zero-day malware attacks targeting financial staff.

Required Skills & Qualifications

Technical & Domain Experience

• Experience: 4–8 years of hands-on experience managing Google Workspace in enterprise environments (preferably within Banking, NBFC, Fintech, or Financial Services).

• Certifications: Google Professional Workspace Administrator (Required/Highly Preferred).

• Identity & Security: Hands-on experience with SAML SSO (Okta, Azure AD/Entra ID, Ping), OAuth 2.0 app governance, zero-trust architectures, and PKI/certificate deployment.

• Automation: Proficiency in Google Apps Script, Python, or low-code frameworks like AppSheet for IT workflow automation.

• Mail & Routing: Deep knowledge of MX, SPF, DKIM, DMARC, inbound/outbound gateways, and TLS enforcement.

• GCP Knowledge: Basic to intermediate experience managing GCP projects tied to Workspace APIs and Service Accounts.

• AI Governance & Administration: Hands-on experience configuring Google Gemini enterprise settings, AI access policies, and data boundaries within the Google Admin console.

• Automated Data Protection: Familiarity with deploying AI-assisted classification, automated DLP rule generation, and smart features governance.

• Next-Gen Automation: Proficiency in writing/debugging Google Apps Script using generative AI assistance and creating automated workflows using AppSheet Gemini.

Soft Skills & Strategic Alignmen(t)

• Strong ability to translate complex InfoSec policies into practical end-user Workspace configurations.

• Clear communicator capable of leading technical discussions with CISO, CTO, Audit, and external regulatory bodies.

• Knowledge of MS365 Admin Console Netskope and CASB architecture along with a good understanding of Networking will be an added advantage.