Cyber Security Manager

Company Description

Desoft Consultancy is a talent solutions firm specializing in delivering top-quality recruitment services across IT and non-IT domains in India. By connecting businesses with skilled and pre-evaluated candidates, Desoft ensures reliable and efficient hiring processes. The company is committed to transparency and maintains a client-focused approach to meeting diverse recruitment needs. With a trusted reputation, Desoft consistently strives to provide exceptional talent solutions that empower organizations to succeed.

Role Description

This is a full-time on-site role for a Cyber Security Manager located in Pune. Key responsibilities include overseeing cybersecurity measures, implementing robust security protocols, managing network and application security, conducting vulnerability assessments, and ensuring compliance with information security standards. This role will involve identifying potential risks, developing solutions to mitigate vulnerabilities, and staying updated on the latest security trends to protect the organization's assets and data effectively.

Qualifications

Job Description

Position Title: Manager – Cyber Security

________________________________________

Position Overview

The Manager of Cyber Security is responsible for leading the enterprise cyber security strategy, operations, and governance across on-premises and cloud environments. This role oversees a dedicated cyber security team responsible for protecting infrastructure (Windows/Linux servers, cloud platforms: Oracle, AWS, Azure, Kubernetes clusters, enterprise networking, and databases such as Oracle, PostgreSQL, MSSQL, MySQL, CouchDB).

The Manager ensures compliance with industry regulations, reduces cyber risks, and implements proactive security measures to safeguard critical business systems and data.

________________________________________

Key Responsibilities

Strategic & Governance

• Develop and implement the organization's cyber security roadmap aligned with business and regulatory requirements.

• Establish security policies, standards, and procedures across infrastructure, cloud, and application environments.

• Collaborate with the Manager of Cloud & Infrastructure Services or Technology Infrastructure Manager to embed security into system and network architecture.

• Manage security budgets, vendor relationships, and third-party risk assessments.

• Ensure compliance with standards such as ISO 27001, NIST, GDPR, HIPAA, or local regulatory requirements.

Operational Security

• Oversee Security Operations Center (SOC) activities, including monitoring, threat detection, and incident response.

• Manage vulnerability assessments, penetration testing, and remediation plans.

• Implement and maintain security controls for servers, networks, cloud services, Kubernetes, and databases.

• Lead incident response and forensic investigations, ensuring timely resolution and root cause analysis.

• Ensure strong identity and access management (IAM), privilege escalation control, and zero-trust practices.

Risk Management & Assurance

• Conduct regular risk assessments and security audits across IT infrastructure and applications.

• Manage enterprise endpoint protection, intrusion detection/prevention (IDS/IPS), and SIEM platforms.

• Drive awareness and training programs to promote a strong cyber security culture across the organization.

• Oversee data protection measures, encryption standards, and backup/recovery procedures.

Team Leadership

• Lead and mentor a dedicated cyber security team including analysts, engineers, and incident responders.

• Define KPIs and success metrics for cyber defense and resilience.

• Provide continuous skill development to stay ahead of evolving threats and technologies.

________________________________________

Qualifications & Skills

Education & Experience

• Bachelor's degree in Cyber Security, Information Technology, or related field (Master's preferred).

• 8+ years of IT security experience, with at least 3+ years in a managerial role.

• Strong background securing Windows/Linux servers, cloud (AWS, Azure, Oracle), and enterprise networks.

• Hands-on experience with Kubernetes security, container hardening, and cloud-native security tools.

• Knowledge of enterprise databases (Oracle, PostgreSQL, MSSQL, MySQL, CouchDB) and their security best practices.

Certifications (Preferred)

• CISSP, CISM, CISA, CEH, CCSP, or equivalent industry certifications.

• Cloud security certifications (AWS Security Specialty, Azure Security Engineer, Oracle Security).

• Kubernetes Security Specialist (CKS) is a plus.

Leadership & Soft Skills

• Strong ability to balance security with business priorities.

• Excellent communication and stakeholder engagement skills.

• Proven track record in leading incident response and crisis management.

• Strategic mindset with the ability to influence executive decisions.

________________________________________

Performance Metrics

• Reduction in security incidents, vulnerabilities, and audit findings.

• Compliance with regulatory and industry frameworks.

• Mean time to detect/respond (MTTD/MTTR) for security incidents.

• Security awareness adoption across the organization.

• Alignment of cyber security strategy with business goals.