ASSISTANT MANAGER - IT

• IT Operations
  • Manage helpdesk, SLAs, incident/change management, escalations, user onboarding and offboarding.
• Infrastructure
  • Administer Windows/Linux servers, Active Directory / Entra ID, Microsoft 365 or Google Workspace, virtualization, network (firewall, VPN, LAN/Wi-Fi), backups, and DR drills.
• Information Security
  • Manage EDR/antivirus, email security, MDM, DLP, encryption, patching, vulnerability remediation, VAPT closure, and security incident response.
• Access Control
  • Own the joiner-mover-leaver process, RBAC and least privilege, MFA/SSO, privileged access, and periodic user access reviews with sign-off evidence.
• Compliance & Audit
  • Maintain ISMS policies, Statement of Applicability, risk register, and an audit-ready evidence repository.
  • Coordinate internal and external audits, respond to client security questionnaires, and track findings to closure (CAPA).
• Asset Management
  • Maintain hardware, software, and license inventory across the full lifecycle including secure disposal.
• Vendor Management
  • Manage vendors, AMCs, contracts, renewals, SLAs, and procurement; support IT budgeting.
• Projects & Team
  • Deliver IT projects end-to-end; supervise and mentor junior IT staff.

• Windows Server, Active Directory / Entra ID, Group Policy, DNS/DHCP; working Linux knowledge.
• Microsoft 365 or Google Workspace administration; exposure to Azure or AWS.
• Networking: TCP/IP, VLANs, routing/switching, firewall, VPN, Wi-Fi.
• Security tools: EDR/antivirus, MDM (Intune or equivalent), DLP, patch management, encryption.
• Backup, restore testing, and DR execution; virtualization (VMware/Hyper-V).
• ITSM tools (Freshservice, Jira SM, ServiceNow, ManageEngine).
• Strong documentation skills — policies, SOPs, registers, audit evidence.

Good to have: SIEM, vulnerability scanners (Nessus/Qualys), GRC platforms (Vanta/Drata/Sprinto), PowerShell or Python scripting.

Hands-on ownership — not peripheral support — of at least one of:

• ISO 27001 — ISMS implementation/maintenance, SoA, internal audits, Stage 1/2 and surveillance audits.
• SOC 2 — Type I and/or Type II, Trust Services Criteria, evidence over an observation period.
• GDPR — data mapping/RoPA, data subject rights, retention, breach notification.
• Client security audits — questionnaires, walkthroughs, and closing client-raised findings.

• Required: B.E. / B.Tech / MCA / B.Sc. IT or equivalent.
• Preferred certifications: ISO 27001 Lead Implementer or Lead Auditor, CISA, CISM, CompTIA Security+.
• Also valued: CISSP, Microsoft (MS-102 / AZ-104 / AZ-500 / SC-300), CCNA, ITIL v4, CEH.

• Ownership and accountability; hands-on execution.
• Meticulous documentation.
• Clear communication with auditors, clients, and non-technical stakeholders.
• Composure during incidents and audits.
• Integrity with confidential data, and the ability to mentor.