The Senior Associate will be responsible for managing and strengthening the organization’s information security, Google Workspace environment, endpoint ecosystem, and core IT infrastructure

. The role will support secure and reliable day-to-day technology operations, including the Microsoft 365 to Google Workspace migration, endpoint security, infrastructure management, compliance, incident response, vulnerability management, and technology improvements.

Key Responsibilities

1. IT Infrastructure &
- Operations

- Plan, implement, maintain, and monitor

LAN/WAN, Wi-Fi, internet connectivity, servers, switches, routers, firewalls, VPNs, and other network infrastructure

.

- Ensure availability, performance, scalability, and security of critical IT infrastructure and systems.

- Troubleshoot and resolve escalated hardware, software, network, internet, endpoint, and system-related issues.

- Establish and maintain monitoring, backup, disaster recovery, and business continuity practices.

- Manage infrastructure vendors, AMC/support contracts, licenses, and technology partners.

- Support infrastructure upgrades, office IT deployments, and technology migrations.

1. Endpoint Management &
- Security

- Manage the lifecycle of

Windows, macOS, Android, and iOS devices

, including enrollment, configuration, patching, application deployment, inventory, compliance monitoring, and secure decommissioning.

- Manage MDM/UEM, EDR, antivirus, anti-malware, firewall, disk encryption, device-control, and endpoint compliance solutions.

- Define and enforce secure configuration baselines for corporate and BYOD devices.

- Monitor endpoint alerts and investigate compromised, vulnerable, or non-compliant devices.

- Implement controls for removable media, local administration,



browser security, application installation, and data transfer.

- Maintain accurate endpoint and asset records and establish secure onboarding, role-change, offboarding, data-removal, and device-lifecycle processes.

1. Security Operations, DLP &
- Incident Response

- Conduct security posture assessments and review security policies, configurations, risks, and remediation actions.

- Implement and manage

DLP controls across email, web, cloud applications, and endpoints

.

- Investigate DLP alerts and continuously refine security rules while minimizing false positives.

- Handle escalated security incidents, including phishing, compromised accounts, malware, endpoint compromise, and suspected data leakage.

- Coordinate incident containment, investigation, root-cause analysis, corrective actions, and lessons learned.

- Work with internal teams and security partners to strengthen the organization's overall security posture.

1. Google Workspace Administration &
- Security

- Administer

Google Workspace

, including users, Organizational Units, groups, domains, Shared Drives, licenses, administrative roles, Gmail, Drive, Calendar, Meet, Groups, and Google Vault.

- Configure and manage

MFA, SSO, RBAC, access controls, external-sharing restrictions, retention policies, email security, audit logging, security alerts, investigation tools, eDiscovery, and legal holds

.





- Support and manage the

Microsoft 365 to Google Workspace migration

, including user migration, security configuration, access management, troubleshooting, and post-migration stabilization.

- Conduct periodic reviews of privileged access, inactive accounts, external sharing, security configurations, and overall Workspace security posture.

- Resolve escalated administration, access, email delivery, and Google Workspace security issues.

1. VAPT, Vulnerability Management &
- Compliance

- Coordinate

VAPT activities

, including scope definition, access requirements, schedules, rules of engagement, evidence collection, remediation, retesting, and closure.

- Maintain vulnerability and risk registers and track remediation across endpoints, networks, servers, cloud platforms, and applications.

- Support

ISO 27001, internal, customer, and regulatory audits

.

- Coordinate evidence collection, control testing, risk assessments, non-conformities, corrective actions, and compliance documentation.

- Support continuous improvement of IT security policies, procedures, and controls.

1. VDI, Infrastructure Projects &
- Vendor Management

- Support secure and reliable office networks, servers, storage, backups, recovery readiness, and infrastructure upgrades.

- Evaluate and support implementation of

VDI and secure-access solutions for work from home and BYOD environments.

- Assess solutions based on identity, data protection, device isolation, performance, scalability, security, and user experience.

- Coordinate technology vendors and service providers for evaluation, procurement, implementation, maintenance, escalations, and Proof of Concepts (POCs).

📌 Senior Associate- IT Infra & Security (Mumbai)
🏢 upGrad
📍 Mumbai