Information & Cyber Security

Role & responsibilities

• Design, implement, and manage

  Microsoft Purview (Information Protection and DLP)

  solutions.
• Oversee

  SIEM

  and

  EDR

  operations for proactive threat detection and incident response.

• Execute and manage end-to-end Vulnerability Assessment and Penetration Testing (VAPT)

  for applications, networks, and infrastructure including planning, execution, reporting, and remediation tracking.
• Develop and maintain

  security dashboards, KPIs, and metrics

  for management reporting.
• Ensure

  compliance with ISO 27001

  and other relevant cybersecurity frameworks and policies.
• Drive continuous improvement in

  security posture, data protection, and incident response

  processes.
• Support awareness, training, and compliance initiatives across the organization.

Required Skills and Experience:

• Proven hands-on experience in

  Microsoft Purview (Information Protection and DLP)

  implementation and management.
• Expertise in

  SIEM

  (e.g., Microsoft Sentinel, QRadar) and

  EDR

  (e.g., CrowdStrike, Defender for Endpoint) operations.
• Strong hands-on experience in

  executing VAPT

  using commercial and open-source tools (e.g., Burp Suite, Nessus, Nmap, Metasploit) with ability to prepare detailed technical reports and recommend remediations.
• In-depth understanding of

  information security frameworks

  including

  ISO 27001

  and best practices.
• Minimum

  58 years

  of relevant experience in Information Security operations, VAPT, and data protection.
• Excellent analytical, documentation, and stakeholder management skills.

Preferred candidate profile

• Bachelors degree in Computer science, Information Technology, Cybersecurity, or a related field.
• 5 to 8 years of hands-on experience in Information Security Operations, SIEM, and EDR platforms and executing VAPT.
• Strong expertise in Microsoft Purview Information Protection and DLP – mandatory.
• In-depth understanding of incident response, malware analysis, and threat detection processes.
• Familiarity with ISO 27001 controls, risk management, and audit processes.
• Good knowledge of network security, endpoint security, and cloud security fundamentals.
• Strong analytical, investigative, and problem-solving abilities.
• Excellent written and verbal communication skills to articulate findings and coordinate with cross-functional teams.
• Ability to work independently and manage multiple priorities in a fast-paced environment.

Preferred Certifications (Good to Have):

• CEH / CHFI / CompTIA Security+ / CISSP

• ISO 27001 Lead Implementer / Lead Auditor