Associate Manager – IT Security

About the role

We are seeking a highly motivated Associate Manager – IT Security to lead and strengthen our Security Operations, Product Security, Vulnerability Management, and Security Compliance initiatives. The role combines hands‑on technical work with leadership of cross‑functional security teams to continuously improve the organization’s cyber‑posture.

Key responsibilities

• Lead day‑to‑day SOC activities, including security monitoring, threat detection, investigation, and incident response.
• Develop and maintain SIEM use cases, correlation rules, and detection mechanisms across platforms such as Splunk, Microsoft Sentinel or QRadar.
• Oversee security technologies (EDR/XDR, IDS/IPS, DLP, Email and Cloud Security) and drive proactive threat hunting.
• Conduct security reviews of applications, APIs, cloud‑native solutions and embed security controls into the Secure SDLC.
• Manage vulnerability assessment programs, prioritize remediation based on risk, and track remediation activities with stakeholders.
• Drive compliance with ISO 27001, SOC 2, PCI‑DSS, NIST CSF, GDPR, HIPAA and coordinate internal and external audits.
• Mentor security analysts and engineers, manage vendors, and promote a security‑first culture across the organization.

Required profile

• 8‑12+ years of experience in IT security, cybersecurity or security operations.
• Proven track record leading security initiatives and working with cross‑functional teams.
• Strong understanding of threat detection, incident response, vulnerability management and secure software development lifecycle.
• Experience with product/application security, threat modelling and security architecture assessments.
• Solid knowledge of security frameworks, compliance standards and risk management.
• BE/B.Tech in Computer Science, Information Technology, Cybersecurity or a related discipline.

Required skills

• SIEM platforms – Splunk, Microsoft Sentinel, QRadar.
• EDR/XDR tools – CrowdStrike, Defender, SentinelOne.
• Vulnerability management tools – Tenable, Qualys, Rapid7.
• SAST/DAST/SCA tools, container security (Kubernetes, Docker) and API security solutions.
• Cloud security – AWS, Azure, GCP.
• Threat hunting, incident response and security monitoring.
• Security compliance frameworks – ISO 27001, SOC 2, PCI‑DSS, NIST CSF, CIS Controls, GDPR, HIPAA.