Location Gurugram, Haryana, India Category HR/Finance/IT Posted Date 03/11/2026 Job Id P-101062

Job Requirements

- Your key responsibilities will include:
- Implementation of Zero Trust Framework.
- Get ISO 27001 certification for the organization.
- Manage cyber security operations.
- Raise the awareness level of employees about cyber security.
- Regular reporting & dashboards

Implementation of Zero Trust Framework:

- Review the current IT & cyber security landscape, validate the current cyber security roadmap and make relevant changes as necessary.
- Evaluation, comparison, finalization and implementation of necessary tools, technologies and processes inline with Zero Trust framework.
- Assessment of current deployment and enhancement of Network Admission Control.
- Assessment of current deployment and enhancement of Privileged Access Management.
- Assessment of current deployment and enhancement of Identity & Access Management.
- Implementation of cloud security controls.
- Review the Operational Technology landscape & implementation of necessary tools & technologies for OT Security.
- Evaluate the SIEM (Security information & event Management) tools and managed SOC (Security operations Center) offering available in the market. Prepare comparative for decision making & enrollment.

Get ISO 27001 certification for the organization.

- Assess the current policies and procedures.
- Do the gap assessment from ISO 27001 perspective.
- Revision of policies in accordance with ISO 27001, rollout of policies, adoption, adherence and Internal audits against the policies.

Manage Cyber Security Operations.





- Get the vulnerability analysis and risk assessment performed regularly.
- Based on the assessment report, remediate the security issues using existing tools and technologies.
- Evaluation of available solutions in the industries to remediate the issues which can’t be fixed using the existing tools and technologies.
- Analyze architecture of application & infrastructure before any platform is brought into the ecosystem.
- Management & governance of cyber security operations handled by an outsourced agency.
- Regular monitoring & reporting of the health of Cyber Security.
- Ensure the adherence to the Security Policies and checklists before any application or platform is brought into the ecosystem.
- Manage Endpoint protection and Endpoint Detection & Remediation deployment & operations - ensuring complete coverage - installed on all endpoints and servers, updating prevention policies on a regular basis, Application whitelisting/blacklisting, vulnerability monitoring and reporting.
- Get the patching done on all endpoints and servers regularly based on the vulnerabilities detected by EPP and EDR tool, patches released by OEMs and other out of band patches.




- Define and document security Incident management process.
- Ensure the adherence to security Incident management process.
- In case of any security incident, immediate remedial action to be taken, regular updates to IT Leadership and management.
- Complete forensics of the incident to be performed, remedial action taken, root cause analysis done and corrective measures to be performed.
- Tracking and understanding emerging security practices and standards.

Raise the awareness level of Employees about Cyber Security.

- Regular user awareness drills.
- Regular communication to the employees.
- Conduct employee trainings on valuable cyber practices.

Regular reporting & dashboards.

- Monthly cyber security health report - Adoption and benefit realization against the investment made.
- Fortnightly dashboard to leadership team - Stats on Cyber defense, Incident.
- Project plan and status for cyber security projects

Work Experience

- 8-12 years of experience (manufacturing experience would be an added advantage).
- Technical knowledge on following technologies:

- Perimeter Firewalls - Cisco, Palo Alto, Fortinet

- NAC - Cisco ISE, Forescout

- EDR - Sentinel, CrowdStrike

- WAF - Akamai, Others

- SASE, CASB, CSPM, Cloud Security

- PAM - CyberArk, Arcos

- Extensive experience in information security and/or IT risk management with a focus on security, performance and reliability.
- Excellent written and verbal communication skills as well as business acumen and a commercial outlook.
- Ability to manage senior stakeholders

📌 IT Security Lead (Haryana)
🏢 Eicher
📍 Haryana