Purpose of the job:

To safeguard Nuvoco's information assets, infrastructure, and data by owning the organization's cybersecurity posture end-to-end deploying and optimizing security technologies (EDR/XDR, PAM/IAM, DLP, email and network security), enforcing governance and compliance, leading incident response and threat management, and building a security-aware culture that keeps the business resilient against evolving cyber threats.

Job Description:

- Security Technology Management
- Deploy, manage, and optimize Endpoint Detection & Response (EDR) and Extended Detection & Response (XDR) solutions.
- Oversee the configuration and operation of Privileged Access Management (PAM) and Identity & Access Management (IAM) solutions.
- Implement and maintain Single Sign-On (SSO) and Multi-Factor Authentication (MFA) solutions for secure access management.
- Manage SD-WAN infrastructure to ensure secure, resilient, and optimized network connectivity.
- Lead the deployment and continuous improvement of Email Security solutions (anti-phishing, anti-spam, malware protection).
- Implement and enforce Data Classification, Data Loss Prevention (DLP), and Digital Rights Management (DRM) policies and tools.
- Oversee Data Security Posture Management (DSPM) initiatives to monitor and remediate data risks across cloud and on-premises environments.
- Integrate Threat Intelligence platforms to proactively identify, assess, and respond to emerging threats.




- Governance, Risk & Compliance
- Develop, update, and enforce cybersecurity policies, standards, and guidelines.
- Ensure compliance with legal, regulatory, and industry requirements (e.g., GDPR, IT Act).
- Conduct regular risk assessments, vulnerability scans, and penetration tests; ensure timely remediation of findings.
- Lead Business Continuity Planning (BCP) and Disaster Recovery (DR) exercises, ensuring readiness and resilience.
- Incident Response & Threat Management
- Develop and maintain incident response plans for advanced threats.
- Lead investigations and coordinate response to security incidents, including those detected by EDR/XDR and threat intelligence feeds.
- Document incidents, lessons learned, and drive continuous improvement.
- Security Awareness & Training
- Develop and deliver security awareness programs, focusing on advanced threats and social engineering.
- Promote a culture of security across all levels of the organization.
- Vendor & Project Management
- Manage relationships with security vendors and service providers.
- Evaluate and implement recent security technologies through POCs and pilot projects.
- Reporting & Communication
- Provide regular updates to senior management on security posture, incidents, and compliance status.
- Represent cybersecurity in cross-functional meetings and projects.

📌 Sr Manager - Info-Security Lead (Maharashtra)
🏢 Nuvoco Vistas Corporation (Nuvoco)
📍 Maharashtra