Senior Manager - IT Security Operations

Job Purpose

Protect endpoints, cloud, on-premise systems, network and third-party technology exposure through monitoring, incident response and control assurance.

Scope

- Endpoint security

- Cloud and on-premise security

- Network security monitoring

- SOC/SIEM coordination

- Vulnerability management

- Phishing response

- Third-party access management

- Audit evidence and compliance

Experience

- 15+ years of relevant experience.

Education / Certifications

- B.E. or B.Sc. with MCA.

Broad Role Parameters

- Strong experience in CCMP and CCI framework.

- Business Continuity Planning (BCP) and Disaster Recovery (DR) verification.

- Support for Vulnerability Assessment and Penetration Testing (VAPT).

- Blue teaming and red teaming.

- Vendor governance.

Essential Experience

- Hands-on experience in Security Operations, including:

- Security alert triage.

- EDR and SIEM tools.

- Vulnerability remediation and follow-up.

- Access review support.

- Log monitoring and review.

- Incident documentation.

- Ability to coordinate effectively with infrastructure, application and vendor teams.

Preferred Experience

- Experience with SIEM and SOC platforms.

- Awareness of ISO 27001 and CIS security standards.

- CEH, Security+, SC-200 or equivalent certification.

- Cloud security experience.

- Phishing investigation and response.

- BFSI/security audit exposure.

Governance & Control Expectations

- CSCRF awareness.

- CERT-In reporting coordination.

- Log readiness.

- SOC/M-SOC support.

- Third-party access reviews.

- Vulnerability SLA tracking.

- Security incident classification.

Key Responsibilities

- Monitor, triage and escalate security alerts while maintaining clear incident records and containment actions.

- Drive vulnerability remediation across endpoints, servers, cloud, network and applications, ensuring SLA adherence.

- Coordinate endpoint, network, cloud and on-premise security control evidence with infrastructure owners.

- Support third-party access reviews, outsourced SOC/vendor coordination and closure of security findings.

- Maintain incident response playbooks, phishing response procedures, threat advisories and monthly security dashboards.

- Support regulatory, internal, statutory and risk/compliance audit evidence requests.