We are seeking an experienced Manager – Host Security to lead endpoint security operations and strengthen the protection, resilience and compliance of the Bank’s endpoint ecosystem.

Key Responsibilities

- Lead the implementation and lifecycle management of endpoint security solutions, including antivirus, HIPS, EDR/XDR, application control and File Integrity Monitoring.
- Drive the deployment of endpoint security tools across Windows, Linux, macOS, mobile devices and cloud-based endpoints.
- Own the operating system and third-party application patch-management process.
- Define patch rollout schedules, verification mechanisms and vulnerability-remediation plans.
- Ensure endpoint logs are integrated with the enterprise SIEM for monitoring and threat detection.
- Govern secure VPN access, endpoint posture assessment, MFA integration and conditional-access controls.
- Implement role-based access, least-privilege and device-trust principles across endpoints.
- Oversee endpoint hardening, gold-image implementation and configuration-drift reviews.
- Manage MDM/UEM policies for corporate devices, BYOD and COPE environments.
- Lead containment, forensic triage and root-cause analysis for endpoint security incidents.
- Coordinate with SOC, infrastructure and business teams for incident remediation and regulatory reporting, where applicable.
- Track endpoint risks, unsupported operating systems and end-of-life migration plans.
- Maintain endpoint security metrics covering patch compliance,



malware alerts, policy violations and incident response.
- Support audit, vulnerability assessment and penetration-testing closure.
- Manage system integrators, security vendors, service-level agreements and team performance.
- Evaluate AI/ML capabilities within EDR/XDR platforms for anomaly detection and endpoint risk scoring.

Desired Candidate Profile

- Bachelor’s or master’s degree in Information Security, Computer Science or an equivalent discipline.
- Minimum 8 years of experience in endpoint or host security management, preferably within the BFSI sector.
- Deep working knowledge of EDR/XDR, endpoint protection, OS security, patch management, encryption, FIM, UEM and vulnerability management.
- Experience managing Windows, Linux, macOS, mobile and cloud endpoints.
- Robust understanding of Zero Trust, MFA, conditional access, least privilege and endpoint risk scoring.
- Experience in endpoint incident response, forensic readiness and root-cause analysis.
- Familiarity with RBI, CERT-In, IRDAI or other applicable regulatory expectations.
- Ability to manage a medium-sized technical team and coordinate cross-functional remediation.
- Strong vendor-management, operational-governance and executive-reporting capabilities.
- Vendor-specific certifications such as Microsoft Security, SentinelOne or Trend Micro are preferred.
- CEH, CISSP or CISM certification would be an added advantage.

📌 Manager – Host Security (Bengaluru)
🏢 Ujjivan Small Finance Bank
📍 Bengaluru