Information Technology Security Specialist

About the role

The Information Technology Security Specialist will lead and manage enterprise cyber security operations across on‑premises, cloud, application and end‑user environments. This role is responsible for defining security strategies, handling incidents, managing vulnerabilities and ensuring compliance with global security frameworks.

Key responsibilities

• Lead cyber security operations and implement policies, standards and procedures aligned with business objectives.
• Manage security incident detection, analysis, containment, eradication, recovery and post‑incident review.
• Develop, test and maintain incident response plans, runbooks and playbooks.
• Own enterprise vulnerability management, conduct VAPT activities and drive patch management programs.
• Prioritise remediation based on risk exposure and validate effectiveness of security fixes.
• Conduct security risk assessments, ensure compliance with regulatory and internal requirements (e.g., ISO 27001, NIST, CERT‑IN, CEA, PDP).
• Support internal, external and customer audits and maintain security metrics and executive reporting.
• Manage MSSPs, OEMs and technology partners, establishing SLAs, SLOs and performance metrics.

Required profile

• Proven experience leading enterprise‑wide cyber security operations.
• Strong background in incident response, vulnerability management and risk assessment.
• Demonstrated ability to work with multiple stakeholders, including IT teams, MSSPs and external partners.
• Experience ensuring compliance with security frameworks and supporting audit processes.

Required skills

• NIST framework
• ISO 27001
• MITRE ATT&CK®
• COBIT
• ITIL
• Vulnerability Assessment and Penetration Testing (VAPT)
• Patch Management
• Security Incident Response
• Risk Management
• Compliance and Audit Support