Role & responsibilities Microsoft 365 Workplace Administration + Security l Day-to-day administration of Microsoft 365 Business Premium Entra ID (Azure AD), Intune MDM, Defender for Business / Defender XDR, Purview DLP, Exchange Online Protection l Operate policies defined by the Head of IT & Security Conditional Access, device compliance, data loss prevention, information protection labels l MFA rollout and enforcement across M365 and enterprise SaaS stack Endpoint & Device Management l Device lifecycle via Intune — enrolment, compliance enforcement, patching, EDR deployment, remote wipe l Laptop and mobile device compliance — BitLocker encryption, OS patching, antivirus / EDR, screen lock policies l BYOD policy enforcement for field and branch users l Imaging, deployment, decommissioning Email Security l Email security operations — SPF / DKIM / DMARC monitoring and enforcement, anti-phishing policies, DLP for customer PII l Phishing incident triage and response l Mailbox audit trails, retention, legal hold support Identity & Access Operations l User lifecycle management — joiner / mover / leaver workflows across M365, Entra, and enterprise SaaS applications l Periodic access reviews — flag over-permissioned accounts, enforce least-privilege l SSO rollout and ongoing maintenance across the SaaS stack Network, Office & Branch Security l Head office network — firewall configuration + maintenance, internal Wi-Fi security, VLAN segmentation l Branch network — Wi-Fi hardening across 50+ branches (WPA3 / robust WPA2, segregated guest SSID, DNS filtering, default credential removal)



l VPN administration — site-to-site and remote user VPN l Physical IT security — server room / network closet access control, CCTV coordination, access logs Security Monitoring + Incident Response l First responder on IT-side security alerts (phishing attempts, suspicious logins, Defender XDR detections, lost / stolen devices) l Incident triage, containment, and documentation l Support the dual-track incident reporting workflow — RBI DAKSH within 6 hours, DPDP Board within 72 hours l Security awareness training operations + phishing simulation delivery Audit & Compliance Execution l Collect audit evidence per ISO 27001 / RBI 2026 / DPDP Rules 2025 requirements (for IT scope) l Operate the GRC platform (Scrut or equivalent) — maintain control status, evidence collection, compliance dashboards for IT controls l Support external audits (ITGC, IS Audit) from the evidence collection + remediation side IT Asset & License Management l Hardware and software inventory — laptops, mobiles, peripherals, M365 and SaaS licenses l Procurement coordination with HR / Finance for new joiners l License tracking and renewal; cost visibility l Vendor coordination — ISP, telecom, hardware vendors,



device repair + warranty User Support (L2 / L3) l Resolve user issues — M365, endpoints, VPN, network, access provisioning l Support branch IT operations (device issues, connectivity, user onboarding) l Maintain self-service knowledge base + runbooks Requirements l 3–5 years in IT administration + workplace security execution roles l Preferably from a BFSI / NBFC / regulated fintech workplace with branch operations l Hands-on proficiency with: – Microsoft 365 Business Premium stack — Entra ID, Intune MDM, Defender XDR, Purview, Exchange Online Protection, Conditional Access – Endpoint security tooling (Defender, BitLocker, patch management, EDR) – MDM / BYOD policy enforcement at scale – Network security — firewall, VPN, Wi-Fi hardening at multi-location setups l Exposure to ISO 27001 / ISMS implementation (hands-on execution) l Working knowledge of RBI IT framework, DPDP Act, CERT-In requirements l Strong documentation, troubleshooting, and user communication skills l Appetite to grow into policy and framework ownership over time Preferred candidate profile l Prior experience executing ISO 27001 certification cycles (surveillance, recertification) l Exposure to GRC platforms (Scrut, Sprinto, Vanta, Drata) l Certifications: CEH, Microsoft SC-300 / SC-400, Azure Security Engineer, CCNA l SIEM operations experience (Wazuh, Sentinel, Splunk) l Scripting / automation — PowerShell, Python, Bash l Experience in an org going through its first ISO 27001 / audit cycle

📌 IT and Security Lead (Bengaluru)
🏢 Optimo Capital
📍 Bengaluru