Job Title

IT Infrastructure Security Lead / Manager

Location: Akurdi Pune

Department: Technology & Digital

Level – L3

Reports To: DGM (Technology & Digital)

Role Purpose The IT Infrastructure Security Lead is responsible for end-to-end implementation, operation, and continuous improvement of infrastructure security controls across Data Center, Network, End User Computing, and Enterprise IT environments.

Key Responsibilities

1. Infrastructure Security Implementation & Operations

- Implement, manage, and continuously optimize security controls across:
- Data Center infrastructure
- Enterprise network
- End-user computing setting

2. Vendor Coordination – Data Center Security

- Act as the single point of contact for vendors implementing DC security tools:
- Firewalls
- WAF
- SD-WAN
- Load Balancers
- Network segmentation controls

- Review and approve:

- Security design documents
- Architecture diagrams
- Rule sets and policy proposals

- Ensure vendor implementations:

- Follow approved security standards
- Address audit and VAPT requirements
- Are delivered within agreed timelines and SLAs

- Validate implementation outcomes through:

- Configuration reviews
- Reports
- Testing evidence

3. End User & Endpoint Security

- Define security requirements for:
- Antivirus / EDR
- Endpoint hardening
- NAC
- Secure Wi-Fi

- End User Support teams to ensure:

- Organization-wide deployment coverage
- Policy compliance
- Timely remediation of endpoint risks

- Review endpoint security dashboards and reports to:

- Identify gaps
- Drive corrective actions via vendors/support teams





4. Security Monitoring & Effectiveness Oversight

- Oversee continuous monitoring of security tools by:
- Reviewing alerts, dashboards, and health reports
- Ensuring integration with SIEM / monitoring platforms

- Track:

- Repeated alerts
- Misconfigurations
- Policy violations

- Drive vendors to:

- Tune rules
- Optimize policies
- Reduce false positives and attack surface

5. Vulnerability Management & Audit Closure Ownership

- Act as overall owner for closure of infrastructure-related audit findings, including:
- Internal audits
- External / regulatory audits
- VAPT reports

- Analyze findings to:

- Identify ownership (DC, network, endpoint, vendor)
- Define remediation approach

- Coordinate with vendors and internal teams to:

- Implement fixes
- Provide evidence
- Meet agreed SLAs

- Validate closure through:

- Re-testing
- Audit confirmation

- Maintain centralized audit tracking with:

- Risk rating
- Status
- Aging
- Dependencies

6. Incident Support & Corrective Action Tracking

- Act as infrastructure security focal point during:
- Security incidents
- Investigations

- Coordinate vendors for:

- Immediate containment actions
- Root cause analysis
- Long-term corrective and preventive controls

- Ensure learnings are:

- Documented
- Converted into updated standards or controls

Required Skills & Experience:

- 5–8 years of experience in IT Security and compliance roles.

Preferred Qualifications:

- Bachelor’s degree in computer science, Information Technology, or related field.

📌 Tech & Digital - IT Infra Security Lead - BACL (India)
🏢 Bajaj Auto
📍 India