Job Description -

We are seeking a strategic and technical leader to design, plan and oversee our IT Security and Cyber Security posture. This role is unique in its emphasis on offensive security-using Breach and Attack Simulations (BAS), Red Teaming, and Purple Teaming to proactively harden our defenses. The ideal candidate will ensure that our healthcare systems, HER Data and payment systems, networks and all IT applications remain resilient and protected against sophisticated threats while maintaining strict compliance with Indian data protection laws.

Roles Responsibilities -

1. Strategic Leadership Team Development
- Developing the Strategic Roadmap: Collaborate with senior management to develop and execute comprehensive IT security and cybersecurity strategies, using offensive security findings to prioritize and justify defensive investments.
- Provide Policy, Framework and Operational Plans for the Operational team to implement security strategies in and across the Networks, Servers and Endpoint elements in alignment with the organizational goals.
- Develop and implement security policies, including risk assessments, vulnerability scans, and network segmentation to manage BYODs and guest Wi-Fi from internal systems.
- Define KRAs for the SOC partner to ensure that there is effective monitoring, containment, resolution, preventive action and reporting of security incidents
- Mentorship Culture: Lead and mentor cross-functional teams, fostering a culture of accountability and continuous skill development in both infrastructure management and offensive security tactics.

- Offensive Security Risk Validation

- Plan and conduct risk assessments, vulnerability scans, and audits to identify and mitigate threats in IT infrastructure, including medical devices and networks.
- Governance,



Healthcare Compliance Privacy - Oversee access controls, firewalls, antivirus setups, and encryption for payment processing and guest data.
- BAS Program Management: Direct the implementation of a continuous Breach and Attack Simulation (BAS) program to proactively validate security control efficacy.
- Audit Readiness: Utilize penetration testing and BAS results to provide empirical evidence of control effectiveness for internal audits and external regulatory certifications.
- Integrate findings from penetration testing, red teaming, and BAS platforms into the organizations risk management and security improvement lifecycle.
- Vendor Management: Manage strategic relationships with infrastructure and security vendors, with a focus on specialized offensive security and BAS tooling.
- Manage incident response, including breach detection, containment, and notification protocols, disaster recovery, and data backups, ensuring quick recovery from breaches or outages in 24/7 environments and ransomware recovery plans through tabletop exercises.
- Regulatory Compliance: Ensure strict adherence to Indian healthcare data regulations, including the IT Rules (2011) and the Digital Personal Data Protection (DPDP) Act, 2023.
- Maintain awareness of Indias cybersecurity framework centers on the National Cyber Security Policy 2013, bolstered by key institutions like CERT-In and sector-specific guidelines
- Healthcare Systems Integrity:



Protect the confidentiality and integrity of Electronic Medical Records (EMR) and Hospital Information Systems (HIS) in alignment with NABH and HIPAA standards.
- Policy Development: Implement cybersecurity policies informed by real-world attack data, ensuring that organizational procedures evolve alongside the threat landscape.

Qualifications

Education

1. Required: Bachelor s degree in computer science, IT or a related technical field.
2. Preferred: Master s degree and/or certifications such as CEH, OSCP, CRTO, CISSP, CISM, or ISO 27001 Lead Implementer.

Experience

1. Years of Experience: Around 8 years in IT Infrastructure and Cybersecurity, with at least 3-5 years in a leadership role involving offensive security operations.
2. Technical Track Record: Proven experience managing complex IT environments and executing high-level Red Team or BAS programs. Exposure to Cloud and Zero Trust Architecture.
3. Strategic Communication: Demonstrated ability to translate technical vulnerabilities from offensive exercises into actionable business context for senior management.
4. Industry Expertise: Previous experience within a hospital or healthcare network-specifically navigating NABH, JCI, or SPDI Rules-is highly desirable.

Remuneration: As per industry standards

Why Join Us: At Sant Nirankari Health City, we offer a team-oriented and supportive work environment where your contributions are valued and recognized. Join us in our mission to deliver exceptional healthcare services while upholding the highest standards of quality and patient care.

Disclaimer: This job posting has been aggregated from external source. Role details, content, and availability are subject to change. Applicants are advised to confirm the latest information directly on the company website before applying.

📌 Manager - IT (New Delhi)
🏢 Sant Nirankari Health City
📍 New Delhi