IT & Information Security Manager
About Acuver
At Acuver Consulting Pvt. Ltd., were redefining how supply chains operate — helping global enterprises become faster, smarter, and more resilient. Founded in 2013 and headquartered in New Delhi, we are one of India’s fastest-growing players in the supply chain technology space.
Our strength lies in four core areas: Strategic Consulting, Enterprise Solutions, Bespoke Development, and Integration Services. Whether it’s implementing enterprise-grade Order Management Systems (OMS), Warehouse Management Systems (WMS), and Commerce platforms or delivering large-scale digital transformation programs, we focus on creating measurable business outcomes.
With a strong culture of innovation, customer-centricity, and engineering excellence, Acuver has earned the trust of Fortune 500 enterprises and industry recognition including Great Place to Work®, India 5000 Best MSME Award, and Forbes India Select 200.
At Acuver, we do not just implement technology — we transform supply chain and commerce operations to help businesses stay ahead in a rapidly evolving digital world.
Role Overview
IT & Information Security Manager with 12+ years of experience
We are seeking This dual-role position requires a proactive leader who can manage our active compliance frameworks (SOC 2 and ISO), administer our Microsoft Enterprise ecosystem, and govern our IT security infrastructure. The ideal candidate will bridge the gap between technical IT management and strategic risk management, ensuring our data, systems, and personnel are protected against evolving cyber threats while seamlessly enabling business operations and customer trust.
Key Responsibilities
Information Security Posture & Strategy
Compliance & Framework Management:
Maintain and oversee our SOC 2 and ISO certifications. Utilize Scrut Automation
to continuously monitor compliance, manage evidence collection, and streamline audit workflows.Customer Trust & Security Questionnaires:
Serve as the primary subject matter expert for customer trust. Collaborate seamlessly with internal teams (such as sales, engineering, and legal) to accurately and efficiently complete client security questionnaires, RFPs, and vendor assessments.Risk & Vulnerability Management:
Conduct regular internal risk assessments. Manage engagements with external third-party vendors for penetration testing, overseeing the process and translating their findings into strategic remediation plans.Incident Response:
Lead the Incident Response Team (IRT). Develop and test incident response plans, ensuring swift mitigation, root-cause analysis, and reporting of security breaches.Security Awareness:
Design and manage company-wide security awareness training programs, conducting regular phishing simulations and educating staff on best practices.Audit & Governance:
Act as the primary internal point of contact for external security audits. Ensure continuous compliance and manage third-party vendor risk assessments.
IT Security & Operations Management
Microsoft Enterprise Administration:
Oversee our Microsoft Enterprise environment, including Entra ID (Azure AD), managing secure configurations, policies, and overarching M365 architecture.Endpoint & Infrastructure Security:
Manage and monitor our endpoint detection and response via EDR solutions. Ensure secure configuration of networks, firewalls, and overarching cloud infrastructure.IT Operations & Patch Management:
Manage daily IT operations and software patch management, ensuring all workstations and servers remain up-to-date and secure. Oversee hardware asset management and Help Desk/IT support escalations.Identity & Access Management (IAM):
Manage user provisioning, role-based access controls (RBAC), Single Sign-On (SSO), and Multi-Factor Authentication (MFA) across the corporate stack.Data Protection & Disaster Recovery:
Design and test Business Continuity Plans (BCP) and Disaster Recovery (DR) strategies. Manage secure backup systems and data loss prevention (DLP) protocols.
Qualifications & Requirements
Education & Experience
- Bachelor’s degree in Computer Science, Information Security, Information Technology, or a related field.
- 5+ years of combined experience in Information Security and IT Operations management.
- Proven track record of managing and maintaining
SOC 2
and ISO
certifications (experience with Scrut Automation
or similar compliance platforms is highly preferred). - Strong hands-on administrative experience within a
Microsoft Enterprise
environment (M365, Entra ID, Intune). - Hands-on experience managing patch management and RMM tools (specifically
Action1
) and Endpoint Detection and Response platforms (specifically Kaspersky EDR
). - Demonstrated experience managing third-party security vendors (such as penetration testing firms) and responding to complex enterprise security questionnaires.
Preferred Certifications
Active credentials in one or more of the following are highly preferred:
- CISSP (Certified Information Systems Security Professional)
- CISM (Certified Information Security Manager)
- CISA (Certified Information Systems Auditor)
- CompTIA Security+ / CySA+
- Microsoft Certified: Identity and Access Administrator or Security Operations Analyst
Key Competencies
Cross-Functional Collaboration:
Highly capable of partnering with sales, engineering, and operations teams to translate complex security postures into client-facing reassurances.Strategic & Hands-On:
Ability to present security metrics to the executive board while being technical enough to oversee patch schedules, endpoint alerts, or M365 tenant configurations.Crisis Management:
Calm under pressure with a decisive approach during security incidents or network outages.Communication:
Exceptional ability to translate complex technical security concepts into understandable terms for non-technical employees, stakeholders, and external clients.
