Senior Manager - IT Security Operations
Virtuous Advisors and Resources Pvt. ltd. · Mumbai · onsite · Posted 44d ago
About a minute. You'll make an account on the way through.
About this role
Job Purpose
Protect endpoints, cloud, on-premise systems, network and third-party technology exposure through monitoring, incident response and control assurance.
Scope
- Endpoint security
- Cloud and on-premise security
- Network security monitoring
- SOC/SIEM coordination
- Vulnerability management
- Phishing response
- Third-party access management
- Audit evidence and compliance
Experience
- 15+ years of relevant experience.
Education / Certifications
- B.E. or B.Sc. with MCA.
Broad Role Parameters
- Strong experience in CCMP and CCI framework.
- Business Continuity Planning (BCP) and Disaster Recovery (DR) verification.
- Support for Vulnerability Assessment and Penetration Testing (VAPT).
- Blue teaming and red teaming.
- Vendor governance.
Essential Experience
- Hands-on experience in Security Operations, including:
- Security alert triage.
- EDR and SIEM tools.
- Vulnerability remediation and follow-up.
- Access review support.
- Log monitoring and review.
- Incident documentation.
- Ability to coordinate effectively with infrastructure, application and vendor teams.
Preferred Experience
- Experience with SIEM and SOC platforms.
- Awareness of ISO 27001 and CIS security standards.
- CEH, Security+, SC-200 or equivalent certification.
- Cloud security experience.
- Phishing investigation and response.
- BFSI/security audit exposure.
Governance & Control Expectations
- CSCRF awareness.
- CERT-In reporting coordination.
- Log readiness.
- SOC/M-SOC support.
- Third-party access reviews.
- Vulnerability SLA tracking.
- Security incident classification.
Key Responsibilities
- Monitor, triage and escalate security alerts while maintaining clear incident records and containment actions.
- Drive vulnerability remediation across endpoints, servers, cloud, network and applications, ensuring SLA adherence.
- Coordinate endpoint, network, cloud and on-premise security control evidence with infrastructure owners.
- Support third-party access reviews, outsourced SOC/vendor coordination and closure of security findings.
- Maintain incident response playbooks, phishing response procedures, threat advisories and monthly security dashboards.
- Support regulatory, internal, statutory and risk/compliance audit evidence requests.
Sourced from iimjobs