Lead Specialist - IT

Back to all rolesLead Specialist - ITApplyJob detailsAdmin / ITNoida-INDFull-timeRole OverviewWe are seeking a Senior / Lead Specialist – Enterprise Information Security & Operations to lead and continuously strengthen the security, governance, and operational resilience of enterprise IT, identity, cloud, and business application platforms. This is a hands-on leadership role spanning security engineering, SecOps/IR, enterprise application management, IAM/PAM operations, IT policies & processes and compliance, ensuring business continuity, a strong security posture, and audit readiness across the organization.The role requires demonstrated experience across Microsoft 365, Azure/Entra ID, enterprise SaaS applications, IAM/PAM, cloud security, ITSM (ITIL) processes, and regulatory compliance (e.g., ISO 27001, SOC 2, privacy laws). You will work cross-functionally with Product, Engineering, Sales & Marketing, Legal, Compliance etc. and executive stakeholders to translate risk into actionable controls and measurable outcomes.Key Responsibilities1. Enterprise Information Security Operations & GovernanceLead enterprise-wide security operations and governance across cloud, identity, endpoints, email, networks, and enterprise applications.Design, implement, and continuously improve security controls aligned to Zero Trust and Defense-in-Depth, including secure configuration standards and continuous control monitoring where applicable.Own the incident response (IR) lifecycle for security events, coordinating triage, investigation, containment, eradication, and root cause analysis (RCA) with internal teams, drive corrective and preventive actions.Own Security monitoring using SIEM/SOAR and EDR/XDR capabilities (e.g., Microsoft Defender), including alert triage, use-case tuning, and continuous improvement of detection coverage.Drive vulnerability and patch governance in partnership with IT and Engineering (prioritization, remediation SLAs, risk acceptance, and reporting).Maintain a strong security-by-design posture across IT and business application landscapes.2. Enterprise Application Management & SecurityOwn security and operational oversight of enterprise SaaS and business-critical applications (e.g., ERP/Finance, CRM, HRIS, Sales & Marketing tools, collaboration and analytics platforms) across departments.Lead application onboarding, access governance, and lifecycle management, ensuring least privilege and segregation of duties.Review and approve third-party integrations, OAuth permissions, APIs, and service accounts.Partner with application owners to ensure:Secure configuration baselinesLogging, monitoring, and audit trailsVendor risk and compliance alignment3. Identity, Access & Privileged Access Management (IAM/PAM)Participate in IAM strategy and operations across Entra ID (Azure AD) and integrated enterprise platforms, including identity lifecycle (joiner/mover/leaver) governance.Own RBAC models, Conditional Access, MFA, access reviews, and privileged access controls (e.g., PIM/PAM, break-glass accounts, just-in-time access) to enforce least privilege and segregation of duties.4. Microsoft 365, Cloud & Infrastructure SecurityProvide security leadership for Microsoft 365 (Exchange Online, Teams, SharePoint, OneDrive) and Azure workloads.Oversee:Email security, mail flow integrity, and threat protectionEndpoint and device security (Intune, Defender)Secure DNS, web traffic, CDN, and firewall services (e.g., Cloudflare)Implement and govern information protection controls across Microsoft 365 (e.g., DLP and data classification/labeling) and support secure collaboration and external sharing.Ensure cloud resources follow secure architecture patterns, centralized logging/telemetry, and monitoring standards to support detection, forensics, and audit requirements.5. Risk Management, Compliance & AuditOwn enterprise risk management processes covering IT, cloud, and applications.Lead internal and external audits including ISO 27001, SOC 2,...