Job Title: Manager, IT Security Operations
Location: Pune India
Department: Information Technology
Reports to: Director, IT Security

Job Summary:
Reporting to the Chief Information Security Officer, the Manager of IT Security Operations is responsible for overseeing the day-to-day operations of the organization's IT security infrastructure. The Manager will assist in advising the company on strategy to avoid security threats. This role involves ensuring the confidentiality, integrity, and availability of the company’s information assets. The Manager will lead a team of IT security professionals to monitor, detect, respond to, and mitigate security threats. Additionally, the role involves managing security tools, conducting security assessments, and ensuring compliance with industry regulations and company policies.

Key Responsibilities:

• Security Operations Management:
  • Lead and manage the IT security operations team, including incident response, threat intelligence, vulnerability management, and security monitoring.
  • Develop and maintain standard operating procedures (SOPs) for IT security operations.
  • Oversee the deployment, integration, and initial configuration of new security solutions and enhancements.
• Incident Response:
  • Coordinate and manage security incidents, ensuring timely response, investigation, and resolution.
  • Conduct post-incident analysis and develop strategies to prevent future incidents.
  • Maintain an incident response plan and conduct regular drills.
• Vulnerability Management:
  • Oversee vulnerability scanning and penetration testing activities.
  • Ensure timely remediation of identified vulnerabilities across all systems and networks.
  • Work with IT teams to prioritize and apply security patches.
• Security Monitoring and Reporting:
  • Monitor security alerts and manage security information and event management (SIEM) systems.
  • Generate regular reports on security posture, incidents, and vulnerabilities for senior management.
  • Develop key performance indicators (KPIs) to measure the effectiveness of security operations.
• Compliance and Audit:
  • Ensure compliance with relevant industry standards, regulations, and frameworks (e.g., ISO 27001, NIST, GDPR).
  • Prepare for and participate in internal and external security audits.
  • Develop and implement security policies, standards, and guidelines.
• Team Leadership and Development:
  • Mentor and guide team members, fostering a culture of continuous improvement and professional development.
  • Conduct performance reviews, set objectives, and provide feedback to the IT security team.
  • Stay current with emerging security threats, trends, and technologies, and ensure the team is similarly informed.
• Collaboration and Communication:
  • Assist in advising the company on avoiding security threats.
  • Work closely with other IT teams, business units, and stakeholders to integrate security into all aspects of the organization’s IT environment.
  • Communicate effectively with non-technical stakeholders, providing clear explanations of security issues and risk mitigation strategies.
  • Liaise with external security vendors and service providers.

Qualifications:

• Education:
  • Bachelor’s degree in Information Security, Computer Science, Information Technology, or a related field. A Master’s degree is a plus.
• Experience:
  • 9+ years of experience in IT security, with at least 3 years in a leadership or management role.
  • Hands-on experience with security technologies such as firewalls, SIEM, IDS/IPS, DLP, endpoint protection, and encryption.
  • Proven experience in incident response, vulnerability management, and security operations.
• Certifications:
  • Relevant certifications such as CISSP, CISM, CEH, or equivalent are highly desirable.
• Skills:
  • Strong analytical and problem-solving skills.
  • Excellent leadership and team management abilities.
  • Strong communication skills, with the ability to convey complex security concepts to a non-technical audience.
  • Proficiency in risk assessment and management.
  • Ability to work under pressure and manage multiple tasks simultaneously.

Working Conditions:

• This role may require occasional travel.
• Availability for on-call support as needed for critical security incidents.