IT Security & Compliance Lead

Overview

Lead IT security and compliance for the organization, covering cybersecurity operations, cloud security, compliance initiatives and security governance.

What you'll do

• Lead security compliance enablement aligned with ISO 27001 and the NIST Cybersecurity Framework, including risk assessments, internal audits, policy management, vendor security reviews and security awareness programs.
• Manage Microsoft 365 security, including Microsoft Entra ID, Conditional Access, MFA, Microsoft Defender, Purview, DLP, email security and audit monitoring.
• Manage endpoint security solutions, EDR platforms, device compliance, encryption and vulnerability remediation.
• Respond to audit queries from clients and align with product teams to maintain compliance and audit drives.
• Lead the IPO-related security work and enable it across country-specific regulations.
• Conduct vulnerability assessments, coordinate penetration testing, manage patching and track remediation activities.
• Implement and maintain network security controls, including firewalls, VPNs, IDS/IPS, DNS security and network segmentation.
• Manage Identity & Access Management, including RBAC, privileged access management, user lifecycle management and periodic access reviews.
• Perform security architecture reviews, application security assessments, cloud security reviews and secure configuration management, and support DevSecOps initiatives.
• Maintain security documentation and risk registers, and continuously improve the organization's security posture.

What you'll need

• Bachelor's degree in Computer Science, Information Technology, Cybersecurity or a related field.
• Minimum 3 years of relevant work experience.
• Hands-on experience in security operations, Microsoft 365 security, vulnerability management, endpoint protection, identity and access management, and ISO/NIST compliance frameworks.

Nice to have

• ISO 27001 Lead Implementer / Lead Auditor.
• Microsoft Certified: Cybersecurity Architect Expert / Security Administrator.
• CompTIA Security+.
• Certified Information Systems Security Professional (CISSP).
• Certified Ethical Hacker (CEH).
• SC-200 / SC-300 / AZ-500.

Details

• Location: Chennai, Tamil Nadu, India.