Position Overview:

The Data & Infrastructure Security Manager is responsible for safeguarding the organizations data assets, cloud/on-prem infrastructure, and technology plaorms against security threats.

This role leads the design, implementation, and enforcement of security controls, governance frameworks, and risk management practices to ensure confidentality, integrity, and availability of systems and data.

Role & responsibilities

Data & Infrastructure Security

- Define and implement security strategies for data plaorms, applications, networks, and infrastructure (cloud and on-prem).
- Ensure protection of sensitive data through encryption, access controls, data loss prevention (DLP), and secure key management.
- Review and approve security architecture for new systems, data pipelines, and integrations.

Cloud & Plaorm Security

- Oversee security configurations and best practices across cloud plaorms (AWS, Azure, GCP) and hybrid environments.
- Implement identity and access management (IAM), network security, logging, and monitoring.
- Ensure secure DevOps and CI/CD pipelines (DevSecOps practices). Governance, Risk & Compliance
- Establish and maintain security policies, standards, and procedures in line with regulatory and industry requirements (e.g., ISO 27001, SOC 2, GDPR, PCI DSS).
- Conduct risk assessments, threat modeling, and security reviews for business initiatives.
- Support internal and external audits, regulatory reviews, and customer security assessments.

Incident Response & Monitoring

- Lead security incident response, escalation, containment, and root-cause analysis.
- Oversee vulnerability management, penetration testing,



and remediation tracking.
- Ensure continuous monitoring, alerting, and reporting of security posture.

Team & Stakeholder Management

- Lead and mentor security engineers, analysts, and infrastructure security specialists.
- Collaborate with IT, data, engineering, and business teams to embed security by design.
- Manage third-party security vendors, tools, and managed service providers

Awareness & Continuous Improvement

- Drive security awareness programs and best practices across the organization.
- Stay current with emerging threats, vulnerabilities, and security technologies.
- Recommend and implement improvements to enhance security maturity.

Required Skills & Qualifications

- Strong expertise in infrastructure, cloud, and data security.
- Experience with IAM, encryption, key management, network security, SIEM/SOC tools.
- Knowledge of DevSecOps, secure architecture, and vulnerability management.
- Understanding of data protection, privacy, and secure data lifecycle management.
- Solid risk assessment and decision-making abilities.
- Excellent communication skills with technical and non-technical stakeholders.
- Ability to influence without authority and drive security culture.
- Proven experience leading cross-functional teams.
- Bachelors or Masters degree in Computer Science, Cybersecurity, or related discipline.
- 8-12 years of experience in information security or infrastructure security roles, with 3+ years in a managerial or lead role.
- Hands-on experience securing enterprise-scale infrastructure and data plaorms

Intersted candiadtes can share your resume on [email protected].

📌 Data & Infrastructure Security Manager (Gurugram)
🏢 NITS Solutions
📍 Gurugram