IT Security Compliance Lead

Location: Mumbai

Position : IT Security Compliance Lead / Security Compliance & Endpoint Security Lead

Experience : 8 to 12 years of relevant experience in IT Security, Endpoint Security, Security Compliance, Vulnerability Management, GRC, and Audit Management.

Job Summary

We are looking for an experienced IT Security Compliance Lead to manage and strengthen the organizations endpoint security, vulnerability management, security compliance, audit readiness, and security operations. The role will be responsible for ensuring compliance with security policies and standards, managing security tools and controls, coordinating audits, addressing security findings, and providing technical leadership to the security support team.

The ideal candidate should have strong hands-on experience with Microsoft Defender for Endpoint, Intune, Zscaler, vulnerability management, DLP, endpoint protection, patch management, SIEM/Security monitoring, and security audits.

Key Responsibilities

Security Compliance & Risk Management

- Own and manage IT security compliance activities across endpoints, servers, applications, and infrastructure.
- Monitor compliance against defined security policies, standards, controls, and regulatory requirements.
- Identify security gaps, weaknesses, and non-compliance issues and drive remediation with respective technology teams.
- Prepare and maintain security compliance reports, dashboards, evidence, and management reports.
- Support ISO, ITHC, internal, external, and client audits, including audit preparation, evidence collection, finding management, and closure.
- Coordinate with auditors, internal stakeholders, and technology teams for security findings and remediation.
- Maintain audit checklists, security documentation, procedures, and compliance records.

Endpoint Security
- Manage and monitor Microsoft Defender for Endpoint (MDE) as a subject matter expert.
- Manage endpoint security controls including EDR/XDR, Antivirus, BitLocker, Intune, Endpoint DLP, and security policies.
- Monitor endpoint security posture, health, alerts, incidents, and compliance.
- Perform policy tuning, troubleshooting, stabilization, and continuous improvement of endpoint security solutions.
- Work with infrastructure and application teams to remediate endpoint security vulnerabilities and configuration issues.

Vulnerability & Patch Management
- Manage vulnerability identification, assessment, prioritization, remediation, and reporting.
- Work with vulnerability assessment tools such as Nessus and other security scanning platforms.




- Coordinate OS and application patch management activities across servers and endpoints.
- Track vulnerabilities and security weaknesses through remediation and closure.
- Generate vulnerability, patch compliance, and risk reports for management and business stakeholders.
- Support security recommendations and remediation plans based on vulnerability and risk assessments.

Web, Email & Data Loss Prevention
- Administer and manage Zscaler Web Proxy policies, including URL filtering, user/group-based policies, and access controls.
- Manage and tune Web DLP, Endpoint DLP, and Email DLP policies.
- Monitor DLP incidents and coordinate investigation and remediation with relevant teams.
- Support implementation and enhancement of data protection and information security controls.

Security Infrastructure & Tools
- Monitor and maintain security platforms including:

- Microsoft Defender for Endpoint

- Microsoft Intune

- BitLocker

- Zscaler
- Nessus / Vulnerability Assessment tools
- Wiz.io / Cloud Security

- Microsoft Defender for Cloud

- SIEM solutions

- DLP solutions

- EDR/XDR platforms
- Ensure security tools are properly configured, monitored, upgraded, and maintained.
- Support security infrastructure migration, implementation, and technology transformation projects.
- Participate in disaster recovery planning and testing for critical security platforms.

Team & Stakeholder Management
- Lead and support security operations team members, including shift planning, workload allocation, escalations, and technical guidance.
- Handle escalated security and compliance issues, including VIP/PI user concerns.
- Coordinate with infrastructure, network, application, cloud, service desk, and other technology teams.
- Engage with clients and business stakeholders to ensure effective security service delivery and customer satisfaction.
- Act as a technical SME and escalation point for security compliance and endpoint security matters.

Process Improvement & Automation
- Develop and improve security processes, workflows, SOPs, and operational procedures.
- Identify opportunities for automation and process optimization.
- Develop security dashboards, reports,



and operational metrics.
- Drive continuous improvement in security compliance, endpoint protection, vulnerability management, and audit readiness.

Required Technical Skills
- Microsoft Defender for Endpoint (MDE) SME level
- Microsoft Intune
- Microsoft Defender for Cloud / MDC
- BitLocker
- Zscaler Web Proxy and Zscaler DLP
- Endpoint, Web, and Email DLP
- EDR / XDR / Antivirus solutions
- Vulnerability Assessment and Penetration Testing concepts
- Nessus or equivalent vulnerability management tools
- Wiz.io / Cloud Security
- SIEM and security monitoring concepts
- PAM / PIM
- Security compliance and technology risk management
- Patch management
- Security audits and audit evidence management
- ISO security audit/compliance
- ITHC / internal and external audit coordination
- KQL and security query/reporting concepts
- Basic scripting and automation
- Incident, vulnerability, and security finding management

Key Competencies
- Strong analytical and problem-solving skills
- Security risk and compliance mindset
- Excellent stakeholder and client management skills
- Strong communication and documentation skills
- Ability to manage multiple priorities and security initiatives
- Strong ownership and accountability
- Ability to lead a technical support/security team
- Proactive approach to identifying and mitigating security risks
- Ability to work independently and collaboratively in a quick-paced environment

Preferred Experience
- 812 years of overall IT experience with significant experience in IT Security / Security Compliance / Endpoint Security.
- Hands-on experience managing enterprise security tools and security policies.
- Experience in large enterprise environments with geographically distributed users/endpoints.
- Experience supporting ISO audits, ITHC, vulnerability management, patch compliance, and security remediation.
- Experience in security technology migration/transformation projects.
- Experience working with business stakeholders, clients, auditors, and technology teams.

Key Deliverables / Success Measures
- Improved endpoint security and compliance posture.
- Timely closure of security vulnerabilities and audit findings.
- High patch and security-control compliance across endpoints and servers.
- Effective management and optimization of security platforms.
- Successful completion of internal, external, ISO, and ITHC audits.
- Accurate and timely security compliance reporting.
- Reduced security risks through proactive monitoring, remediation, and process improvement.

📌 IT Security Compliance Lead (Mumbai)
🏢 Technosoft Services
📍 Mumbai