Senior Associate- IT Infra & Security

upGrad · India

The Senior Associate will be responsible for managing and strengthening the organization’s information security, Google Workspace environment, endpoint ecosystem, and core IT infrastructure . The role will support secure and reliable day-to-day technology operations, including the Microsoft 365 to Google Workspace migration, endpoint security, infrastructure management, compliance, incident response, vulnerability management, and technology improvements.

Key Responsibilities

1. IT Infrastructure & Operations

• Plan, implement, maintain, and monitor LAN/WAN, Wi-Fi, internet connectivity, servers, switches, routers, firewalls, VPNs, and other network infrastructure .
• Ensure availability, performance, scalability, and security of critical IT infrastructure and systems.
• Troubleshoot and resolve escalated hardware, software, network, internet, endpoint, and system-related issues.
• Establish and maintain monitoring, backup, disaster recovery, and business continuity practices.
• Manage infrastructure vendors, AMC/support contracts, licenses, and technology partners.
• Support infrastructure upgrades, office IT deployments, and technology migrations.

2. Endpoint Management & Security

• Manage the lifecycle of Windows, macOS, Android, and iOS devices , including enrollment, configuration, patching, application deployment, inventory, compliance monitoring, and secure decommissioning.
• Manage MDM/UEM, EDR, antivirus, anti-malware, firewall, disk encryption, device-control, and endpoint compliance solutions.
• Define and enforce secure configuration baselines for corporate and BYOD devices.
• Monitor endpoint alerts and investigate compromised, vulnerable, or non-compliant devices.
• Implement controls for removable media, local administration, browser security, application installation, and data transfer.
• Maintain accurate endpoint and asset records and establish secure onboarding, role-change, offboarding, data-removal, and device-lifecycle processes.

3. Security Operations, DLP & Incident Response

• Conduct security posture assessments and review security policies, configurations, risks, and remediation actions.
• Implement and manage DLP controls across email, web, cloud applications, and endpoints .
• Investigate DLP alerts and continuously refine security rules while minimizing false positives.
• Handle escalated security incidents, including phishing, compromised accounts, malware, endpoint compromise, and suspected data leakage.
• Coordinate incident containment, investigation, root-cause analysis, corrective actions, and lessons learned.
• Work with internal teams and security partners to strengthen the organization's overall security posture.

4. Google Workspace Administration & Security

• Administer Google Workspace , including users, Organizational Units, groups, domains, Shared Drives, licenses, administrative roles, Gmail, Drive, Calendar, Meet, Groups, and Google Vault.
• Configure and manage MFA, SSO, RBAC, access controls, external-sharing restrictions, retention policies, email security, audit logging, security alerts, investigation tools, eDiscovery, and legal holds .
• Support and manage the Microsoft 365 to Google Workspace migration , including user migration, security configuration, access management, troubleshooting, and post-migration stabilization.
• Conduct periodic reviews of privileged access, inactive accounts, external sharing, security configurations, and overall Workspace security posture.
• Resolve escalated administration, access, email delivery, and Google Workspace security issues.

5. VAPT, Vulnerability Management & Compliance

• Coordinate VAPT activities , including scope definition, access requirements, schedules, rules of engagement, evidence collection, remediation, retesting, and closure.
• Maintain vulnerability and risk registers and track remediation across endpoints, networks, servers, cloud platforms, and applications.
• Support ISO 27001, internal, customer, and regulatory audits .
• Coordinate evidence collection, control testing, risk assessments, non-conformities, corrective actions, and compliance documentation.
• Support continuous improvement of IT security policies, procedures, and controls.

6. VDI, Infrastructure Projects & Vendor Management

• Support secure and reliable office networks, servers, storage, backups, recovery readiness, and infrastructure upgrades.
• Evaluate and support implementation of VDI and secure-access solutions for remote work and BYOD environments.
• Assess solutions based on identity, data protection, device isolation, performance, scalability, security, and user experience.
• Coordinate technology vendors and service providers for evaluation, procurement, implementation, maintenance, escalations, and Proof of Concepts (POCs).