L3 - Tech & Digital - IT Infra Security Lead - BACL

Job Title

IT Infrastructure Security Lead / Manager

Location: Akurdi Pune
Department: Technology & Digital

Level – L3
Reports To: DGM (Technology & Digital)

Role Purpose

The IT Infrastructure Security Lead is responsible for end-to-end implementation, operation, and continuous improvement of infrastructure security controls across Data Center, Network, End User Computing, and Enterprise IT environments.

Key Responsibilities

1. Infrastructure Security Implementation & Operations

• Implement, manage, and continuously optimize security controls across:
• Data Center infrastructure
• Enterprise network
• End-user computing environment

2. Vendor Coordination – Data Center Security

• Act as the single point of contact for vendors implementing DC security tools:
• Firewalls
• WAF
• SD-WAN
• Load Balancers
• Network segmentation controls
• Review and approve:
• Security design documents
• Architecture diagrams
• Rule sets and policy proposals
• Ensure vendor implementations:
• Follow approved security standards
• Address audit and VAPT requirements
• Are delivered within agreed timelines and SLAs
• Validate implementation outcomes through:
• Configuration reviews
• Reports
• Testing evidence

3. End User & Endpoint Security

• Define security requirements for:
• Antivirus / EDR
• Endpoint hardening
• NAC
• Secure Wi-Fi
• End User Support teams to ensure:
• Organization-wide deployment coverage
• Policy compliance
• Timely remediation of endpoint risks
• Review endpoint security dashboards and reports to:
• Identify gaps
• Drive corrective actions via vendors/support teams

4. Security Monitoring & Effectiveness Oversight

• Oversee continuous monitoring of security tools by:
• Reviewing alerts, dashboards, and health reports
• Ensuring integration with SIEM / monitoring platforms
• Track:
• Repeated alerts
• Misconfigurations
• Policy violations
• Drive vendors to:
• Tune rules
• Optimize policies
• Reduce false positives and attack surface

5. Vulnerability Management & Audit Closure Ownership

• Act as overall owner for closure of infrastructure-related audit findings, including:
• Internal audits
• External / regulatory audits
• VAPT reports
• Analyze findings to:
• Identify ownership (DC, network, endpoint, vendor)
• Define remediation approach
• Coordinate with vendors and internal teams to:
• Implement fixes
• Provide evidence
• Meet agreed SLAs
• Validate closure through:
• Re-testing
• Audit confirmation
• Maintain centralized audit tracking with:
• Risk rating
• Status
• Aging
• Dependencies

6. Incident Support & Corrective Action Tracking

• Act as infrastructure security focal point during:
• Security incidents
• Investigations
• Coordinate vendors for:
• Immediate containment actions
• Root cause analysis
• Long-term corrective and preventive controls
• Ensure learnings are:
• Documented
• Converted into updated standards or controls

Required Skills & Experience:

• 5–8 years of experience in IT Security and compliance roles.

Preferred Qualifications:

• Bachelor’s degree in computer science, Information Technology, or related field.