Role Overview The IT Security Officer will be responsible for ensuring and continuously improving the IT security posture of Kotak Education Foundation KEF This role involves safeguarding KEF s IT infrastructure endpoints applications cloud setting and networks from cyber threats while ensuring compliance with security policies frameworks and regulatory requirements Key Responsibilities 1 Endpoint Device Security Manage and monitor Sophos Intercept X Advanced endpoint security across Windows and Ubuntu laptops Define policies for device hardening patch management and secure configuration Ensure data loss prevention malware protection and endpoint encryption are effectively enforced 2 Network Perimeter Security Administer and maintain Fortinet Firewalls FortiGate including IPS VPN with 2FA and web filtering Oversee Wi-Fi Cloud Access Points security including SSID management VLAN segregation and access controls Conduct regular audits of firewall and network security policies 3 Application Security Coordinate Vulnerability Assessment Penetration Testing VAPT for KEF applications ERPNext Moodle LMS HRMS CRM etc Implement secure development lifecycle SDLC practices in collaboration with application teams Manage application access controls and role-based access management 4 Cloud Data Security Secure KEF s cloud-hosted services ERP LMS HRMS Email - Google Workspace etc Monitor identity and access management IAM encryption and data residency controls Ensure compliance with DPDP Act ISO 27001 and NIST best practices 5 Security Monitoring Incident Response Implement centralized SIEM log management for proactive threat monitoring Develop and maintain Incident Response Plan IRP and lead investigations of security events Conduct root cause analysis and implement corrective actions 6 Policy Awareness Compliance Draft update and enforce IT Security Policies endpoint access mobile device cloud email Conduct security awareness training for staff and internal IT team Support audits vendor security assessments and compliance questionnaires Candidate Specification Educational Qualifications Bachelor s degree in Information Technology Computer Science Cybersecurity Preferred certifications CISM CISSP CEH Fortinet NSE Sophos Certified Engineer ISO 27001 LA LI Years of Experience 4-7 years of proven experience in IT security operations preferably in NGO education or mid-sized enterprise environments Hands-on experience with Sophos Intercept X Advanced and Fortinet Firewalls Exposure to Ubuntu Windows security hardening VAPT IAM and cloud security Technical Skills Strong knowledge of endpoint security firewalls SIEM VAPT tools IAM solutions Familiarity with Google Workspace security controls Understanding of compliance frameworks ISO 27001 DPDP Act NIST CSF Soft Skills Strong analytical and problem-solving skills Good communication and documentation ability Ability to train non-technical staff in cybersecurity hygiene Team player with vendor stakeholder coordination skills Hours Of Work 6 days 8 hours 2 Saturdays off every month in addition to the regular weekly off on Sundays Benefits Leave benefits from the date of joining Coverage under Health Medical Insurance for self family from date of joining Life Cover from date of joining Job Type Full-time Pay 450 000 00 - 900 000 00 per year Benefits Health insurance Life insurance Provident Fund Application Question s What is your current CTC Are you from Mumbai Specify Location Education Bachelor s Required Experience IT Security 4 years Required Work Location In person

📌 It Security Officer (Maharashtra)
🏢 Kotak Education Foundation, Chembur(Deonar)
📍 Maharashtra