Summary
This role entails leading a comprehensive cybersecurity program that encompasses governance, risk management, identity security, cloud protection, endpoint security, enterprise application security, third-party risk, and incident response. The position is pivotal in safeguarding organizational assets by establishing robust security frameworks, managing critical risks, and ensuring resilience against evolving threats. The successful candidate will drive strategic initiatives to protect data integrity, maintain compliance, and foster a culture of security awareness across the enterprise.

Responsibilities

- Develop, maintain, and update security policies, standards, risk registers, and a prioritized security roadmap.

- Conduct comprehensive risk assessments covering Dynamics, Zoho, Microsoft 365/Azure environments, endpoints, networks, integrations, and vendor ecosystems.

- Administer privileged access management, enforce multi-factor authentication (MFA), oversee joiner-mover-leaver processes, and conduct periodic access reviews.

- Lead efforts in system hardening, coordinate vulnerability scanning and penetration testing, and manage the remediation of identified security gaps.

- Supervise security monitoring activities, perform threat assessments,



manage alert escalation protocols, and direct incident investigations.

- Maintain and refine incident response plans, develop playbooks, organize security exercises, document evidence procedures, and conduct post-incident reviews.

- Evaluate security and privacy risks associated with new projects and changes, support security awareness training initiatives, and prepare management reports.

Requirements Requirements:

- Possess 8 to 10 years of cybersecurity experience, with demonstrated ownership of enterprise-level controls and incident response functions.

- Demonstrate deep expertise in identity, endpoint, network, cloud, application, data, and third-party security domains.

- Have proven experience in securing Microsoft 365/Azure environments and complex enterprise applications.

- Apply practical knowledge of frameworks such as NIST CSF and ISO/IEC 27001, with a focus on designing risk-based security controls.

- Exhibit robust investigative capabilities and the ability to communicate effectively with executive leadership.

- Hold relevant security certifications and possess knowledge of applicable Indian cybersecurity and privacy regulations (preferred).

📌 Cybersecurity Manager / Senior Cybersecurity Specialist (India)
🏢 GrowBeyond Tech
📍 India