: Senior Associate – Information Security & IT Infrastructure

Position Overview

We are seeking a skilled Senior Associate – Information Security & IT Infrastructure to manage and strengthen the organization’s information-security posture, Google Workspace environment, endpoint infrastructure, and related IT operations.

The role will be responsible for the planned migration from Microsoft 365 to Google Workspace, ongoing Google Workspace administration, endpoint management and security, security-policy implementation, incident management, DLP, VAPT coordination, audit support, and infrastructure enhancement.

The successful candidate must have hands-on experience across information security, Google Workspace, endpoint management, endpoint protection, identity and access management, networking, and IT infrastructure operations.

Key Responsibilities

1. Microsoft 365 to Google Workspace Migration

- Plan and execute the migration from Microsoft 365 to Google Workspace.
- Migrate email, calendars, contacts, files, shared drives, user accounts, groups, permissions, and other business data.
- Develop migration plans, user-mapping structures, data-validation processes, rollback procedures, and cutover schedules.
- Ensure data integrity, security, regulatory compliance, and minimal business disruption throughout the migration.
- Coordinate with internal stakeholders, implementation partners, and vendors during planning and execution.
- Provide post-migration support, issue resolution, user training, and adoption assistance.
- Decommission or optimize existing Microsoft services after successful migration, subject to business requirements.

2. Google Workspace Administration and Security

- Administer and secure the complete Google Workspace environment.
- Configure and manage users, organizational units, groups, domains, shared drives, licences, roles, and administrative privileges.
- Manage Gmail, Google Drive, Calendar, Meet, Groups, Vault, and other relevant Google Workspace services.
- Implement authentication, Multi-Factor Authentication, Single Sign-On, access-control, sharing, retention, and data-protection policies.
- Configure Google Workspace security controls, alerting, investigation rules, email protection, and audit logging.
- Manage Google Vault for retention, eDiscovery, legal holds, and compliance requirements.
- Conduct periodic reviews of user access, privileged accounts, external sharing, inactive accounts, and security configurations.
- Troubleshoot Google Workspace administration, security, access, email-delivery, and data-sharing issues.
- Monitor service health and coordinate with Google or implementation partners for escalated cases.

3. Endpoint Management

- Manage the complete lifecycle of organizational endpoints, including laptops, desktops, and mobile devices.
- Enrol, configure, monitor, update, and decommission endpoints using appropriate endpoint-management or MDM platforms.
- Implement device-configuration policies, application deployment, patch management, software inventory, and compliance monitoring.
- Maintain accurate asset records, device ownership information, warranty details, and endpoint lifecycle documentation.
- Establish secure processes for employee onboarding, device allocation, role changes, offboarding, and data removal.
- Define and enforce policies for corporate devices and BYOD environments.
- Evaluate and implement endpoint-management solutions aligned with the Google ecosystem and organizational requirements.

4. Endpoint Security

- Deploy, configure, and monitor endpoint detection and response, antivirus, anti-malware, firewall, disk encryption, and device-control solutions.
- Define endpoint-security baselines for Windows, macOS, mobile devices, and other supported platforms.
- Monitor endpoint alerts and investigate suspicious activity, malware, compromised devices, and policy violations.
- Ensure operating systems, browsers, applications, and security tools remain patched and updated.
- Implement controls for removable media, local administration, browser security, application installation, and data transfer.




- Track endpoint compliance and remediate devices that do not meet organizational security standards.
- Evaluate endpoint-security products, conduct proofs of concept, and recommend suitable solutions.
- Maintain appropriate integration between endpoint-security tools, identity systems, DLP platforms, and security-monitoring solutions.

5. Security Posture Verification and Enhancement

- Conduct periodic security-posture assessments across users, endpoints, cloud platforms, applications, and IT infrastructure.
- Review existing security policies and recommend improvements based on identified risks and business use cases.
- Work closely with security partners and vendors to verify security configurations and implement enhancements.
- Track security observations, vulnerabilities, remediation actions, owners, and closure timelines.
- Develop and maintain information-security policies, standards, procedures, and operational guidelines.
- Ensure security controls remain practical, scalable, and aligned with changing business requirements.

6. Identity and Access Management

- Manage identity, authentication, user provisioning, access rights, and privileged accounts across Google Workspace and other business applications.
- Implement and enforce MFA, role-based access controls, least-privilege principles, and secure administrative access.
- Conduct periodic user-access and privileged-access reviews.
- Ensure timely access provisioning, modification, and revocation during employee onboarding, transfers, and offboarding.
- Support the transition of identity and access controls from the Microsoft ecosystem to the Google ecosystem.
- Coordinate integrations between Google Workspace and third-party identity or SSO platforms where required.

7. Data Loss Prevention

- Implement and manage DLP controls for email, cloud applications, web activity, and endpoints.
- Define policies for monitoring and protecting confidential, personal, financial, and business-sensitive information.
- Evaluate full-stack DLP and employee internet-usage monitoring solutions.
- Conduct vendor evaluations and proofs of concept to identify suitable DLP technologies.
- Monitor DLP alerts, investigate violations, document findings, and coordinate remediation.
- Periodically review DLP rules to reduce false positives while maintaining effective protection.

8. Security Incident Management

- Monitor, investigate, document, and coordinate the resolution of information-security incidents.
- Manage escalated security-related calls and ensure timely containment, remediation, and closure.
- Perform initial incident analysis and coordinate with internal teams, vendors, and leadership where required.
- Maintain incident records, root-cause analyses, corrective actions, and lessons learned.
- Support phishing investigations, compromised-account response, endpoint isolation, malware response, and data-leak investigations.
- Assist in developing and testing incident-response procedures and escalation matrices.

9. VAPT and Vulnerability Management

- Coordinate Vulnerability Assessment and Penetration Testing activities with internal stakeholders and external vendors.
- Finalize testing scope, access requirements, timelines, rules of engagement, and supporting documentation.
- Review findings, validate risks, assign remediation owners, and track observations through closure.
- Coordinate retesting and ensure timely submission of closure evidence.
- Maintain vulnerability registers and provide periodic management updates.
- Support continuous vulnerability identification and remediation across endpoints, networks, servers, cloud environments, and applications.

10. ISO 27001 and Audit Support

- Support ISO 27001 certification, surveillance audits, internal audits,



and customer or regulatory assessments.
- Coordinate with internal teams and external auditors for scope, evidence, access, interviews, and closure requirements.
- Maintain relevant policies, procedures, risk registers, audit evidence, and control documentation.
- Track non-conformities, observations, corrective actions, and improvement opportunities.
- Assist with risk assessments, control testing, compliance reviews, and management reporting.

11. IT Infrastructure and Network Support

- Support the setup, maintenance, security, and enhancement of office network, server, storage, internet, and related infrastructure.
- Monitor the availability, performance, capacity, and security of infrastructure components.
- Coordinate infrastructure upgrades, office migrations, and technology-refresh initiatives.
- Work with vendors and service providers for procurement, implementation, maintenance, and escalated support.
- Maintain infrastructure diagrams, configuration records, inventories, credentials, licences, and operational documentation.
- Assist in ensuring backup availability, recovery readiness, business continuity, and infrastructure resilience.

12. Operational Escalations and Collaboration

- Manage escalated IT infrastructure and information-security issues and coordinate their resolution.
- Collaborate with the IT team, business stakeholders, vendors, and management on technical and security matters.
- Support ongoing infrastructure improvements, security-policy enhancements, and implementation of new solutions.
- Evaluate recent technologies and recommend solutions that improve security, scalability, reliability, and operational efficiency.
- Prepare periodic reports covering security posture, endpoint compliance, incidents, vulnerabilities, audit actions, and migration progress.
- Create and maintain SOPs, troubleshooting guides, handover documents, and technical records.

Required Skills and Experience

- Relevant experience in information security, IT infrastructure, endpoint administration, or a similar role.
- Strong hands-on expertise in Google Workspace administration and security.
- Demonstrated experience in Microsoft 365 and Google Workspace migrations.
- Strong knowledge of Gmail, Drive, Shared Drives, Google Vault, Google Admin Console, Google endpoint management, and Google Workspace security controls.
- Experience with endpoint-management, MDM, EDR, antivirus, patch-management, and device-compliance platforms.
- Working knowledge of Windows, macOS, Android, and iOS endpoint administration.
- Experience with identity and access management, MFA, SSO, RBAC, and privileged-access controls.
- Knowledge of DLP, incident response, vulnerability management, VAPT, and information-security operations.
- Familiarity with ISO 27001 controls, audit coordination, risk management, and compliance documentation.
- Understanding of networking, firewalls, VPNs, servers, storage, backups, and cloud infrastructure.
- Experience conducting vendor evaluations, proofs of concept, tool implementations, and security reviews.
- Strong troubleshooting, documentation, coordination, and stakeholder-management skills.

Preferred Qualifications

- Bachelor’s degree in Information Technology, Computer Science, Cybersecurity, or a related discipline.
- Google Workspace Administrator or Google Cloud certification – not mandatory
- Microsoft 365, Microsoft Entra ID, or Microsoft security experience will be beneficial for managing the transition.
- Experience working with security vendors, managed service providers, auditors, and distributed business teams.

Key Competencies

- Strong ownership and accountability.
- Structured problem-solving and incident-management abilities.
- Security-first approach with practical business awareness.
- Ability to independently manage projects and operational responsibilities.
- Strong communication and cross-functional collaboration.
- Attention to detail and disciplined documentation.
- Ability to manage multiple priorities and escalations effectively.
- Commitment to maintaining confidentiality and protecting organizational information.

📌 Senior Associate – Information Security & IT Infrastructure (Mumbai)
🏢 upGrad
📍 Mumbai