Senior Executive – IT Security GRC and Network

Senior Executive – IT Security GRC and Network

Experience: 2–3 Years

Location: Pune

Report to: Head - IT Infrastructure and Administration

Role Summary

We are seeking a multi-skilled IT & Information Security professional with hands-on experience in Security governance GRC, IT support, and network operations. The role bridges day-to-day IT security management, risk, compliance, and audit readiness, supporting a future Security Manager / CISO track.

Key Responsibilities

Security Governance, Risk & Architecture (CISSP / CISM Aligned)

• Support implementation of information security governance frameworks, policies, and procedures
• Conduct risk assessments, vulnerability analysis, and impact assessments across office
• Track security risks, controls, and remediation actions using risk registers and dashboards
• Provide security metrics and reports to management and leadership teams

Security Management & GRC (CISM Aligned)

• Support ISMS implementation and maintenance (ISO 27001, SOC 2, internal controls)
• Coordinate with internal teams to ensure policy adherence and control effectiveness
• Participate in incident response, root-cause analysis, and corrective actions

Audit, Compliance & Assurance (CISA Aligned)

• Support internal and external IT/security audits
• Collect audit evidence, track observations, and support remediation plans
• Maintain compliance documentation, SOPs, and audit reports

IT Support & Infrastructure Operations

• Provide L2/L3 IT support for end-user systems (Windows/macOS), enterprise applications, and collaboration tools
• Manage user lifecycle activities: onboarding, offboarding, access control, and privilege management
• Troubleshoot system, hardware, and software issues with focus on availability, performance, and security
• Ensure IT operations follow security policies and compliance requirements

Network & Systems Administration

• Monitor and manage internet service.
• Support network security controls
• Ensure network uptime, performance, and secure configuration

Certifications (Preferred)

• CISSP (ISC²) – Governance, risk, and security architecture
• CISM – Security management & governance
• CISA – IT audit, compliance & risk
• CompTIA A+ / Network+ / Security+ (Foundational advantage)