The Senior Associate will be responsible for managing and strengthening the organization’s information security, Google Workspace workplace, endpoint ecosystem, and core IT infrastructure . The role will support secure and reliable day-to-day technology operations, including the Microsoft 365 to Google Workspace migration, endpoint security, infrastructure management, compliance, incident response, vulnerability management, and technology improvements.
nKey Responsibilities
n
n1. IT Infrastructure & Operations
n
n
- Plan, implement, maintain, and monitor LAN/WAN, Wi-Fi, internet connectivity, servers, switches, routers, firewalls, VPNs, and other network infrastructure .
n
- Ensure availability, performance, scalability, and security of critical IT infrastructure and systems.
n
- Troubleshoot and resolve escalated hardware, software, network, internet, endpoint, and system-related issues.
n
- Establish and maintain monitoring, backup, disaster recovery, and business continuity practices.
n
- Manage infrastructure vendors, AMC/support contracts, licenses, and technology partners.
n
- Support infrastructure upgrades, office IT deployments, and technology migrations.
n
n
n2. Endpoint Management & Security
n
n
- Manage the lifecycle of Windows, macOS, Android, and iOS devices , including enrollment, configuration, patching, application deployment, inventory, compliance monitoring, and secure decommissioning.
n
- Manage MDM/UEM, EDR, antivirus, anti-malware, firewall, disk encryption, device-control, and endpoint compliance solutions.
n
- Define and enforce secure configuration baselines for corporate and BYOD devices.
n
- Monitor endpoint alerts and investigate compromised, vulnerable, or non-compliant devices.
n
- Implement controls for removable media, local administration,
browser security, application installation, and data transfer.
n
- Maintain accurate endpoint and asset records and establish secure onboarding, role-change, offboarding, data-removal, and device-lifecycle processes.
n
n
n3. Security Operations, DLP & Incident Response
n
n
- Conduct security posture assessments and review security policies, configurations, risks, and remediation actions.
n
- Implement and manage DLP controls across email, web, cloud applications, and endpoints .
n
- Investigate DLP alerts and continuously refine security rules while minimizing false positives.
n
- Handle escalated security incidents, including phishing, compromised accounts, malware, endpoint compromise, and suspected data leakage.
n
- Coordinate incident containment, investigation, root-cause analysis, corrective actions, and lessons learned.
n
- Work with internal teams and security partners to strengthen the organization's overall security posture.
n
n
n4. Google Workspace Administration & Security
n
n
- Administer Google Workspace , including users, Organizational Units, groups, domains, Shared Drives, licenses, administrative roles, Gmail, Drive, Calendar, Meet, Groups, and Google Vault.
n
- Configure and manage MFA, SSO, RBAC, access controls, external-sharing restrictions, retention policies, email security, audit logging, security alerts, investigation tools, eDiscovery, and legal holds .
n
- Support and manage the Microsoft 365 to Google Workspace migration , including user migration, security configuration, access management, troubleshooting, and post-migration stabilization.
n
- Conduct periodic reviews of privileged access, inactive accounts, external sharing, security configurations, and overall Workspace security posture.
n
- Resolve escalated administration, access, email delivery, and Google Workspace security issues.
n
n
n5. VAPT, Vulnerability Management & Compliance
n
n
- Coordinate VAPT activities , including scope definition, access requirements, schedules, rules of engagement, evidence collection, remediation, retesting, and closure.
n
- Maintain vulnerability and risk registers and track remediation across endpoints, networks, servers, cloud platforms, and applications.
n
- Support ISO 27001, internal, customer, and regulatory audits .
n
- Coordinate evidence collection, control testing, risk assessments, non-conformities, corrective actions, and compliance documentation.
n
- Support continuous improvement of IT security policies, procedures, and controls.
n
n
n6. VDI, Infrastructure Projects & Vendor Management
n
n
- Support secure and reliable office networks, servers, storage, backups, recovery readiness, and infrastructure upgrades.
n
- Evaluate and support implementation of VDI and secure-access solutions for remote work and BYOD environments.
n
- Assess solutions based on identity, data protection, device isolation, performance, scalability, security, and user experience.
n
- Coordinate technology vendors and service providers for evaluation, procurement, implementation, maintenance, escalations, and Proof of Concepts (POCs).
n
n
📌 Senior Associate- IT Infra & Security (Mumbai)
🏢 upGrad
📍 Mumbai