Bajaj Auto—L3 - Tech & Digital - IT Infra Security Lead - BACL

Job description

Description: Job Title IT Infrastructure Security Lead / Manager Location: Akurdi Pune Department: Technology & Digital Level – L3 Reports To: DGM (Technology & Digital) Role Purpose The IT Infrastructure Security Lead is responsible for end-to-end implementation, operation, and continuous improvement of infrastructure security controls across Data Center, Network, End User Computing, and Enterprise IT environments. Key Responsibilities 1. Infrastructure Security Implementation & Operations - Implement, manage, and continuously optimize security controls across: - Data Center infrastructure - Enterprise network - End-user computing environment 2. Vendor Coordination – Data Center Security - Act as the single point of contact for vendors implementing DC security tools: - Firewalls - WAF - SD-WAN - Load Balancers - Network segmentation controls - Review and approve: - Security design documents - Architecture diagrams - Rule sets and policy proposals - Ensure vendor implementations: - Follow approved security standards - Address audit and VAPT requirements - Are delivered within agreed timelines and SLAs - Validate implementation outcomes through: - Configuration reviews - Reports - Testing evidence 3. End User & Endpoint Security - Define security requirements for: - Antivirus / EDR - Endpoint hardening - NAC - Secure Wi-Fi - End User Support teams to ensure: - Organization-wide deployment coverage - Policy compliance - Timely remediation of endpoint risks - Review endpoint security dashboards and reports to: - Identify gaps - Drive corrective actions via vendors/support teams 4. Security Monitoring & Effectiveness Oversight - Oversee continuous monitoring of security tools by: - Reviewing alerts, dashboards, and health reports - Ensuring integration with SIEM / monitoring platforms - Track: - Repeated alerts - Misconfigurations - Policy violations - Drive vendors to: - Tune rules - Optimize policies - Reduce false positives and attack surface 5. Vulnerability Management & Audit Closure Ownership - Act as overall owner for closure of infrastructure-related audit findings, including: - Internal audits - External / regulatory audits - VAPT reports - Analyze findings to: - Identify ownership (DC, network, endpoint, vendor) - Define remediation approach - Coordinate with vendors and internal teams to: - Implement fixes - Provide evidence - Meet agreed SLAs - Validate closure through: - Re-testing - Audit confirmation - Maintain centralized audit tracking with: - Risk rating - Status - Aging - Dependencies 6. Incident Support & Corrective Action Tracking - Act as infrastructure security focal point during: - Security incidents - Investigations - Coordinate vendors for: - Immediate containment actions - Root cause analysis - Long-term corrective and preventive controls - Ensure learnings are: - Documented - Converted into updated standards or controls Required Skills & Experience: - 5–8 years of experience in IT Security and compliance roles. Preferred Qualifications: - Bachelor’s degree in computer science, Information Technology, or related field.