IT Manager – Infrastructure & Information Security

CERF Solutions Pvt. Ltd. · Uttar pradesh, India

Job Description: IT Manager – Infrastructure & Information Security

Location: Noida (Onsite)

Experience: 6–8 Years

Role Overview

The IT Manager will be responsible for three critical areas:

• Internal IT Operations – managing corporate IT assets, user access, endpoints, and productivity systems.
• Information Security – implementing and maintaining security controls aligned with ISO 27001, SOC 2, and DPDP requirements.
• Infrastructure & Cloud Management – ensuring the reliability, scalability, monitoring, and security of infrastructure hosted on AWS.

This is a hands-on leadership role requiring both operational execution and strategic planning.

Key Responsibilities

1. Internal IT Management

• Manage laptops, desktops, networks, Wi-Fi, VPN, and IT assets across offices.
• Administer Microsoft 365/Google Workspace, email, identity, and access management.
• Implement onboarding/offboarding processes and role-based access controls.
• Maintain IT inventory, asset lifecycle, software licensing, and vendor management.
• Provide L2/L3 support for internal technology issues.

2. Infrastructure & Cloud Management (DataRakshaq)

• Manage AWS infrastructure, including EC2, RDS, S3, VPC, IAM, WAF, CloudWatch, and Backup services.
• Ensure high availability, performance, and disaster recovery readiness of the platform.
• Monitor infrastructure utilization, uptime, capacity planning, and cost optimization.
• Coordinate production deployments with DevOps and Engineering teams.
• Maintain backup, restore, and business continuity procedures.

3. Information Security

• Own implementation of internal security policies and technical controls.
• Manage IAM, MFA, endpoint security, EDR, vulnerability management, and patching.
• Coordinate VAPT remediation, security audits, and compliance evidence collection.
• Support ISO 27001. ISO 27701, SOC 2, and DPDP compliance initiatives.
• Monitor security incidents and lead incident response and root-cause analysis.

Required Skills & Experience

• 6–8 years of experience in IT Infrastructure and Information Security.
• Strong hands-on experience with AWS cloud infrastructure.
• Experience managing enterprise identity and access management (IAM).
• Knowledge of network security, firewalls, VPNs, endpoint security, and EDR solutions.
• Experience with VAPT remediation and vulnerability management.
• Familiarity with ISO 27001, SOC 2, and data protection best practices.
• Good understanding of Linux and Windows server administration.
• Experience with monitoring and logging tools such as CloudWatch, Grafana, or similar

Preferred Qualifications

• AWS Certified Solutions Architect or SysOps Administrator.
• ISO 27001 Lead Implementer/Lead Auditor certification.
• Experience with SIEM and security monitoring platforms.
• Knowledge of Kubernetes, Docker, and CI/CD infrastructure is an added advantage.

Function & Responsibility

Internal IT : End-user IT, assets, access, productivity systems

AWS Infrastructure : Availability, monitoring, backup, DR, cost optimization

Information Security : IAM, VAPT, endpoint security, incident response

Compliance : ISO 27001, SOC 2, DPDP technical controls

Vendor Management :IT procurement, licenses, security tools