Functional Manager - Infrastructure Security Risk

We are looking for a seasoned Infrastructure Security Manager to lead the protection of our enterprise IT infrastructure across on-premise, cloud (AWS/Azure), hybrid, and containerized environments. You will own the end-to-end security posture of networks, servers, endpoints, identity systems, and data centers — ensuring confidentiality, integrity, and availability while driving proactive threat prevention, compliance, and incident readiness.

This is a hands-on technical role that combines strategic vision with deep technical execution. You will partner closely with IT, DevOps, Cloud, and Application teams, and act as a key advisor to senior leadership on infrastructure risk.

Key Responsibilities

Strategy & Architecture

• Design and continuously evolve the infrastructure security strategy and roadmap aligned with business objectives and zero-trust principles.
• Architect secure infrastructure solutions for new Cyber solutions, cloud security, network segmentation, identity & access management (IAM), system security and endpoint protection.
• Lead the adoption of modern security controls (SASE, XDR, WAF, API security gateways, etc.).

Risk Management & Compliance

• Conduct regular risk assessments, threat modeling, and vulnerability management programs for all infrastructure components.
• Ensure compliance with global and Indian regulatory requirements (ISO 27001, SOC 2, PCI-DSS, GDPR, CERT-In, DPDP Act, RBI guidelines if applicable).
• Own the infrastructure portion of internal and external audits.

Incident Response & Operations

• Lead infrastructure-focused incident response, root-cause analysis, and post-incident improvements.
• Manage 24×7 security monitoring, SIEM/SOAR operations, and threat hunting.
• Define and maintain disaster recovery, business continuity, and backup security controls.

Team Leadership & Vendor Management

• Manage security tool vendors and negotiate contracts (SIEM, vulnerability scanners, cloud security posture management tools, etc.).
• Drive security awareness and training programs for IT and engineering teams.

Collaboration & Reporting

• Partner with various infra team for security controls
• Provide monthly security posture reports, KPI dashboards, and executive briefings to CISO and leadership.
• Stay ahead of emerging threats (ransomware, supply-chain attacks, cloud misconfigurations, AI-driven threats) and recommend proactive controls.

Required Qualifications

Education

• Bachelor’s degree in Computer Science, Information Technology, Cybersecurity, or related field (Master’s preferred).