L3 - Tech & Digital - IT Infra Security Lead - BACL
Bajaj Auto · Akurdi (BACL)
Job Title
IT Infrastructure Security Lead / Manager
Location: Akurdi Pune
Department: Technology & Digital
Level – L3
Reports To: DGM (Technology & Digital)
Role Purpose
The IT Infrastructure Security Lead is responsible for end-to-end implementation, operation, and continuous improvement of infrastructure security controls across Data Center, Network, End User Computing, and Enterprise IT environments.
Key Responsibilities
1. Infrastructure Security Implementation & Operations
- Implement, manage, and continuously optimize security controls across:
- Data Center infrastructure
- Enterprise network
- End-user computing environment
2. Vendor Coordination – Data Center Security
- Act as the single point of contact for vendors implementing DC security tools:
- Firewalls
- WAF
- SD-WAN
- Load Balancers
- Network segmentation controls
- Review and approve:
- Security design documents
- Architecture diagrams
- Rule sets and policy proposals
- Ensure vendor implementations:
- Follow approved security standards
- Address audit and VAPT requirements
- Are delivered within agreed timelines and SLAs
- Validate implementation outcomes through:
- Configuration reviews
- Reports
- Testing evidence
3. End User & Endpoint Security
- Define security requirements for:
- Antivirus / EDR
- Endpoint hardening
- NAC
- Secure Wi-Fi
- End User Support teams to ensure:
- Organization-wide deployment coverage
- Policy compliance
- Timely remediation of endpoint risks
- Review endpoint security dashboards and reports to:
- Identify gaps
- Drive corrective actions via vendors/support teams
4. Security Monitoring & Effectiveness Oversight
- Oversee continuous monitoring of security tools by:
- Reviewing alerts, dashboards, and health reports
- Ensuring integration with SIEM / monitoring platforms
- Track:
- Repeated alerts
- Misconfigurations
- Policy violations
- Drive vendors to:
- Tune rules
- Optimize policies
- Reduce false positives and attack surface
5. Vulnerability Management & Audit Closure Ownership
- Act as overall owner for closure of infrastructure-related audit findings, including:
- Internal audits
- External / regulatory audits
- VAPT reports
- Analyze findings to:
- Identify ownership (DC, network, endpoint, vendor)
- Define remediation approach
- Coordinate with vendors and internal teams to:
- Implement fixes
- Provide evidence
- Meet agreed SLAs
- Validate closure through:
- Re-testing
- Audit confirmation
- Maintain centralized audit tracking with:
- Risk rating
- Status
- Aging
- Dependencies
6. Incident Support & Corrective Action Tracking
- Act as infrastructure security focal point during:
- Security incidents
- Investigations
- Coordinate vendors for:
- Immediate containment actions
- Root cause analysis
- Long-term corrective and preventive controls
- Ensure learnings are:
- Documented
- Converted into updated standards or controls
Required Skills & Experience:
- 5–8 years of experience in IT Security and compliance roles.
Preferred Qualifications:
- Bachelor’s degree in computer science, Information Technology, or related field.