ABOUT GLOBE CENTRIX Globe Centrix Associates is the India delivery center of Globe Centrix, a US healthcare Revenue Cycle Management (RCM) company that partners with cardiovascular and specialty physician practices across the United States. Our trained, dedicated teams work within our clients' systems every day, around the clock. As a result, security, system availability and compliance are central to how we serve our clients. We operate in line with HIPAA, SOC 2 and ISO/IEC 27001 requirements, and we are expanding into current Indian cities, with international delivery centers planned for the future. THE ROLE We are looking for a hands-on technology leader to take full ownership of our IT and information security function. While this is a leadership role, it requires direct technical involvement. You will set direction and lead the team, and you will also personally step in to resolve critical issues whenever they arise, including outside regular hours. You will manage and strengthen our current environment, and build a unified, scalable setup that supports our growth. As a growing organization, we value a resourceful approach: making the best use of available tools and budget, and focusing on results. WHAT YOU WILL OWN 1. Infrastructure and networks
• LAN/WAN, next-generation firewalls (Fortinet FortiGate or equivalent), IPsec and SSL VPN, site-to-site connectivity, switching, VLANs, Wi-Fi and ISP redundancy.
• Windows Server, Active Directory (AD), Group Policy (GPO), DNS and DHCP, plus Linux servers (Ubuntu) that run our security tooling.
• Servers, racks, endpoints and the full hardware lifecycle: sizing, procurement, vendor quotes, warranties and disposal.
• Backup, disaster recovery and business continuity (BCP/DR) that are tested regularly, not only documented. 2. One standard across every office
• Build a repeatable blueprint so every new city or delivery center goes live on the same network design, security baseline, naming convention and access model.
• Maintain a consistent, unified environment across all locations as we scale, within available budget. 3. Security operations
• Monitoring: SIEM and log management (Wazuh or similar open-source SIEM), file integrity monitoring, alerting and log retention.
• Endpoint: Endpoint protection / XDR and Data Loss Prevention (Trend Micro, CrowdStrike, Safetica or similar).
• Hygiene: Patch and endpoint management (Action1, ManageEngine, Microsoft Intune or similar), vulnerability management and CIS Benchmark hardening.
• Response: Incident detection, response, root cause analysis and lessons learned. 4. Identity, access and cloud
• Microsoft 365 and Microsoft Entra ID administration: MFA, Conditional Access and privileged access.
• The full joiner-mover-leaver access lifecycle, with periodic, documented access reviews.
• AWS: IAM, S3,



encryption key management and secure log archival, with responsible management of cloud costs. 5. Compliance, documentation and reporting
• Own the technical controls and audit evidence for HIPAA, SOC 2 and ISO/IEC 27001.
• Maintain up-to-date registers: asset inventory, risk register, access register, incident log, change log and vendor register.
• Lead internal audits, client security assessments and vendor questionnaires, and drive remediation to closure.
• Write and maintain IT and security policies, SOPs and network diagrams, and deliver a clear monthly IT and security report to leadership. 6. Client environments and telephony
• Keep our teams' access to client environments secure and reliable: remote desktops (RDP/RDS, Citrix, VMware Horizon), client VPNs, EHR/PM systems and payer portals.
• Handle client-specific security requirements such as MFA tokens and access restrictions, and serve as the technical point of contact for client IT teams.
• Own cloud telephony (Nextiva, RingCentral or similar): call quality, QoS, headsets and uptime. Telephony is business-critical for our operations. 7. Enabling automation
• Provide a secure, well-governed environment for automation and AI engineers: sandboxes, service accounts, least-privilege access, secrets management and change control.
• Evaluate new tools for HIPAA fit and Business Associate Agreements (BAAs), and recommend solutions suited to our needs. (Building automations is not part of this role.) 8. Lead the team
• Lead, mentor and manage the IT team, with clear accountability. Set SLAs, ticketing discipline, an on-call rotation and documentation standards.
• Build a culture of ownership, where work is considered complete when systems are stable and secure, not when a shift ends. YOUR FIRST 90 DAYS
• Day 30: Complete assessment of the environment: asset inventory, network diagrams, access review, open audit items and a ranked risk list. On-call and escalation process in place.
• Day 60: Highest-risk security and compliance items addressed. Standard office blueprint drafted. Monthly IT and security reporting established.
• Day 90: A 12-month IT and security roadmap with tiered budget options, and the team operating to defined SLAs. WHAT WE ARE LOOKING FOR
• Ownership: You treat IT as a 24/7 responsibility and respond promptly to critical issues, whenever they occur.
• Resourcefulness:



You have delivered strong security outcomes with limited budgets, using open-source and built-in tools first and recommending new spend only when justified.
• Documentation discipline: You maintain accurate registers, SOPs, diagrams and audit evidence as a standard part of your work.
• Clear communication: You can explain technical risk in simple business terms to leadership and clients.
• Long-term thinking: You design for standardization and scale rather than one-time fixes. MUST-HAVE EXPERIENCE
• 5 to 10 years of hands-on IT infrastructure and security experience, including at least 2 to 3 years owning an IT environment end to end or leading an IT team.
• Strong networking fundamentals: TCP/IP, routing, VLANs, firewalls (Fortinet preferred), VPNs and Wi-Fi.
• Windows Server, Active Directory, Group Policy and Microsoft 365 administration.
• Working Linux administration skills.
• Hands-on experience with SIEM, EDR/XDR, DLP and patch management tools.
• Direct involvement in at least one SOC 2, ISO/IEC 27001, HIPAA or similar audit, including evidence and documentation.
• Willingness to work the US shift and respond to critical incidents outside

working hours
.
• Bachelor's degree in IT, Computer Science or a related field, or equivalent experience. GOOD TO HAVE
• US healthcare, RCM, BPO or KPO experience, including PHI handling and HIPAA safeguards.
• Exposure to EHR/PM systems, payer portals and client remote desktop environments.
• Cloud telephony administration (Nextiva, RingCentral or similar).
• Microsoft Entra ID, Intune and Defender; AWS administration.
• Setting up new offices or multi-site networks from scratch.
• Scripting for administration (PowerShell, Bash).
• Certifications (preferred, not mandatory): Fortinet NSE 4 / FCP, CCNA, Microsoft (MD-102, AZ-104, SC-300, SC-200), CompTIA Security+, ISO/IEC 27001 Lead Implementer or Lead Auditor. CISSP or CISM is a bonus. WHY GLOBE CENTRIX
• Ownership: Build and lead the IT function, reporting directly to the Chief Operating Officer.
• Growth: Grow with the organization as we expand into new cities and international delivery centers.
• Impact: Your work directly protects patient data and the trust of our US healthcare clients.
• Agility: A responsive leadership team where decisions are made quickly and good ideas are implemented.
• Rewards: Competitive compensation and benefits.

HOW TO APPLY
Please share your updated resume along with a brief note (up to half a page) describing one infrastructure or security project you led end to end, covering the objective, the budget available, your approach and the outcome. Applications that include this note will be given priority. Globe Centrix Associates is an equal opportunity employer.

📌 IT & Information Security (Hyderabad)
🏢 Globe Centrix
📍 Hyderabad