Senior Associate- IT Infra & Security

The Senior Associate will be responsible for managing and strengthening the organization's information security, Google Workspace environment, endpoint ecosystem, and core IT infrastructure. The role will support secure and reliable day-to-day technology operations, including the Microsoft 365 to Google Workspace migration, endpoint security, infrastructure management, compliance, incident response, vulnerability management, and technology improvements.

Key Responsibilities

1. IT Infrastructure & Operations

• Plan, implement, maintain, and monitor LAN/WAN, Wi-Fi, internet connectivity, servers, switches, routers, firewalls, VPNs, and other network infrastructure.
• Ensure availability, performance, scalability, and security of critical IT infrastructure and systems.
• Troubleshoot and resolve escalated hardware, software, network, internet, endpoint, and system-related issues.
• Establish and maintain monitoring, backup, disaster recovery, and business continuity practices.
• Manage infrastructure vendors, AMC/support contracts, licenses, and technology partners.
• Support infrastructure upgrades, office IT deployments, and technology migrations.

2. Endpoint Management & Security

• Manage the lifecycle of Windows, macOS, Android, and iOS devices, including enrollment, configuration, patching, application deployment, inventory, compliance monitoring, and secure decommissioning.
• Manage MDM/UEM, EDR, antivirus, anti-malware, firewall, disk encryption, device-control, and endpoint compliance solutions.
• Define and enforce secure configuration baselines for corporate and BYOD devices.
• Monitor endpoint alerts and investigate compromised, vulnerable, or non-compliant devices.
• Implement controls for removable media, local administration, browser security, application installation, and data transfer.
• Maintain accurate endpoint and asset records and establish secure onboarding, role-change, offboarding, data-removal, and device-lifecycle processes.

3. Security Operations, DLP & Incident Response

• Conduct security posture assessments and review security policies, configurations, risks, and remediation actions.
• Implement and manage DLP controls across email, web, cloud applications, and endpoints.
• Investigate DLP alerts and continuously refine security rules while minimizing false positives.
• Handle escalated security incidents, including phishing, compromised accounts, malware, endpoint compromise, and suspected data leakage.
• Coordinate incident containment, investigation, root-cause analysis, corrective actions, and lessons learned.
• Work with internal teams and security partners to strengthen the organization's overall security posture.

4. Google Workspace Administration & Security

• Administer Google Workspace, including users, Organizational Units, groups, domains, Shared Drives, licenses, administrative roles, Gmail, Drive, Calendar, Meet, Groups, and Google Vault.
• Configure and manage MFA, SSO, RBAC, access controls, external-sharing restrictions, retention policies, email security, audit logging, security alerts, investigation tools, eDiscovery, and legal holds.
• Support and manage the Microsoft 365 to Google Workspace migration, including user migration, security configuration, access management, troubleshooting, and post-migration stabilization.
• Conduct periodic reviews of privileged access, inactive accounts, external sharing, security configurations, and overall Workspace security posture.
• Resolve escalated administration, access, email delivery, and Google Workspace security issues.

5. VAPT, Vulnerability Management & Compliance

• Coordinate VAPT activities, including scope definition, access requirements, schedules, rules of engagement, evidence collection, remediation, retesting, and closure.
• Maintain vulnerability and risk registers and track remediation across endpoints, networks, servers, cloud platforms, and applications.
• Support ISO 27001, internal, customer, and regulatory audits.
• Coordinate evidence collection, control testing, risk assessments, non-conformities, corrective actions, and compliance documentation.
• Support continuous improvement of IT security policies, procedures, and controls.

6. VDI, Infrastructure Projects & Vendor Management

• Support secure and reliable office networks, servers, storage, backups, recovery readiness, and infrastructure upgrades.
• Evaluate and support implementation of VDI and secure-access solutions for remote work and BYOD environments.
• Assess solutions based on identity, data protection, device isolation, performance, scalability, security, and user experience.
• Coordinate technology vendors and service providers for evaluation, procurement, implementation, maintenance, escalations, and Proof of Concepts (POCs).