Skip to content
CV Rocket
Get started
How it worksThe enginePricingBlogContactSign in

Open nowPosted 156 days ago

Lead Specialist - IT

ComplianceQuest8 open roles

Where
Noida-IND
Get the CV for this job

From $25 per CV, paid once. No subscription.

Your applicationOpen nowLead Specialist - ITComplianceQuest · Noida-IND

  1. YouYes, apply to this one.

  2. CV RocketCV written for this posting.

  3. 25 readersRecruiter, hiring manager, skeptic. Round after round.

  4. CV RocketApplied on ComplianceQuest's own form.

The reply lands in your private mailbox

3×more interviews than doing it yourself with ChatGPT.

The clock on this job

Early applications get read.

11.3% of postings close within 7 days. Measured by our own scanner across the market.

Share of postings closed within
  1. 2.0%1 day
  2. 4.2%3 days
  3. 11.3%7 days
  4. 17.5%14 days
  5. 34.2%30 days
  6. 43.5%60 days
This job: posted 156 days ago

The posting

Role Overview

We are seeking a Senior / Lead Specialist – Enterprise Information Security & Operations to lead and continuously strengthen the security, governance, and operational resilience of enterprise IT, identity, cloud, and business application platforms. This is a hands-on leadership role spanning security engineering, SecOps/IR, enterprise application management, IAM/PAM operations, IT policies & processes and compliance, ensuring business continuity, a strong security posture, and audit readiness across the organization.

The role requires demonstrated experience across Microsoft 365, Azure/Entra ID, enterprise SaaS applications, IAM/PAM, cloud security, ITSM (ITIL) processes, and regulatory compliance (e.g., ISO 27001, SOC 2, privacy laws). You will work cross-functionally with Product, Engineering, Sales & Marketing, Legal, Compliance etc. and executive stakeholders to translate risk into actionable controls and measurable outcomes.

Key Responsibilities

1. Enterprise Information Security Operations & Governance

  • Lead enterprise-wide security operations and governance across cloud, identity, endpoints, email, networks, and enterprise applications.
  • Design, implement, and continuously improve security controls aligned to Zero Trust and Defense-in-Depth, including secure configuration standards and continuous control monitoring where applicable.
  • Own the incident response (IR) lifecycle for security events, coordinating triage, investigation, containment, eradication, and root cause analysis (RCA) with internal teams, drive corrective and preventive actions.
  • Own Security monitoring using SIEM/SOAR and EDR/XDR capabilities (e.g., Microsoft Defender), including alert triage, use-case tuning, and continuous improvement of detection coverage.
  • Drive vulnerability and patch governance in partnership with IT and Engineering (prioritization, remediation SLAs, risk acceptance, and reporting).
  • Maintain a strong security-by-design posture across IT and business application landscapes.

2. Enterprise Application Management & Security

  • Own security and operational oversight of enterprise SaaS and business-critical applications (e.g., ERP/Finance, CRM, HRIS, Sales & Marketing tools, collaboration and analytics platforms) across departments.
  • Lead application onboarding, access governance, and lifecycle management, ensuring least privilege and segregation of duties.
  • Review and approve third-party integrations, OAuth permissions, APIs, and service accounts.
  • Partner with application owners to ensure: Secure configuration baselines Logging, monitoring, and audit trails Vendor risk and compliance alignment

3. Identity, Access & Privileged Access Management (IAM/PAM)

  • Participate in IAM strategy and operations across Entra ID (Azure AD) and integrated enterprise platforms, including identity lifecycle (joiner/mover/leaver) governance.
  • Own RBAC models, Conditional Access, MFA, access reviews, and privileged access controls (e.g., PIM/PAM, break-glass accounts, just-in-time access) to enforce least privilege and segregation of duties.

4. Microsoft 365, Cloud & Infrastructure Security

  • Provide security leadership for Microsoft 365 (Exchange Online, Teams, SharePoint, OneDrive) and Azure workloads.
  • Oversee: Email security, mail flow integrity, and threat protection Endpoint and device security (Intune, Defender) Secure DNS, web traffic, CDN, and firewall services (e.g., Cloudflare)
  • Implement and govern information protection controls across Microsoft 365 (e.g., DLP and data classification/labeling) and support secure collaboration and external sharing.
  • Ensure cloud resources follow secure architecture patterns, centralized logging/telemetry, and monitoring standards to support detection, forensics, and audit requirements.

5. Risk Management, Compliance & Audit

  • Own enterprise risk management processes covering IT, cloud, and applications.
  • Lead internal and external audits including ISO 27001, SOC 2, GDPR, and customer assurance/audit requests.
  • Maintain audit-ready documentation, evidence repositories, and control mappings.
  • Drive remediation programs and closure of findings using KPI-driven tracking.

6. IT Operations, ITSM & Process Excellence

  • Partner with IT Operations teams to ensure secure and reliable service delivery across regions.
  • Embed security controls into ITIL-aligned ITSM processes (Change, Incident, Problem, Access, Asset).
  • Define and monitor SLAs, KPIs, and operational risk indicators.
  • Drive standardization, automation, and documentation to scale enterprise operations.

Required Skills & Experience

Technical & Domain Expertise

  • 12+ years of experience in enterprise IT security operations, cybersecurity, and governance.
  • Strong hands-on experience with: Microsoft 365, Azure / Entra ID IAM/PAM, RBAC, access reviews, Conditional Access, MFA Enterprise SaaS and application security (SSO/SAML/OIDC, OAuth, service accounts) Web and edge security (WAF/CDN/DNS, TLS, secure headers; e.g., Cloudflare) ITSM/service governance (ITIL; change, incident, problem, access, asset) Security operations tooling (SIEM/SOAR), detection engineering, and incident response workflows Endpoint security (EDR/XDR) and device management (e.g., Defender for Endpoint, Intune) Information protection (DLP, data classification/labeling; CASB concepts where applicable)
  • Experience with cloud and security platforms (e.g., Azure Security, Defender etc.).

Risk, Compliance & Privacy

  • Proven experience delivering and operating controls aligned to: ISO 27001, SOC 2 GDPR, DPDP Act, privacy-by-design
  • Strong audit management and evidence-handling capability.
  • Creation IT policies and procedures, implementations and monitoring

Leadership & Soft Skills

  • Strong stakeholder management and communication skills.
  • Ability to balance hands-on execution with strategic leadership.
  • Ability to handle IR process till closure and manage stakeholders during the whole process.
  • Excellent documentation, analytical thinking, and training delivery capability
  • Willingness to participate and support a 24x7 production environment as needed.

Preferred Qualifications

  • Graduate/Postgraduate degree with obtained skills in Computer Science, Information Security, or equivalent experience.
  • ISO 27001 Lead Auditor / Implementer
  • ITIL v4 Foundation
  • Microsoft Azure certification(s) (e.g., AZ-104, AZ-500, SC-200/SC-300) or equivalent experience.
  • Security certifications (preferred): CISSP, CISM, CCSP, GIAC, or relevant Microsoft Security certifications.

Success Metrics

  • Stable and secure enterprise IT and application environment
  • Consistent clean audit outcomes with zero repeat findings
  • Reduced identity and privileged access risk
  • High stakeholder confidence in security and IT operations
  • Scalable, documented, and automation-driven governance processes
  • IT policies and procedures creation and implementation
  • Internal IT audits and continuous improvements
From $25, paid onceGet the CV for this job

What happens when you press

One press. We do the rest.

  1. A CV for this posting

    Written against ComplianceQuest's own wording, from every piece of relevant proof in your profile.

  2. 25 readers review it

    Recruiter, hiring manager, skeptic and more read every draft, round after round. You get the best round.

    The review screen in CV Rocket: how each CV was read, round by round.

  3. We apply on ComplianceQuest's form

    Our application engine gets through the hardest forms there are. Where a question needs you, AI suggests the best answer. Don't want us applying from our IP addresses? Use our Chrome extension: we apply straight from your own browser.

    An application in CV Rocket: every answer filled in on the employer's form.

  4. Every reply, sorted

    ComplianceQuest's answer lands in your private mailbox, and we classify it on arrival: interview, question, rejection.

    The CV Rocket inbox: each employer reply classified as an interview, an action or a rejection.

  5. Reply with AI

    AI helps you write the email, checks it and sends it. We show you whether the recruiter read it.

  6. The interview in your calendar

    Full integration with your calendar. The invitation goes straight in.

    An interview invitation in the CV Rocket inbox, added to the candidate's calendar.
Get the CV for this job

From $25 per CV, paid once. No subscription.

Why it works

3×

more interviews than doing it yourself with ChatGPT.

ChatGPT writes a CV and never learns what happened to it. We see every reply. For each CV we know:

  • How it was written, and how the review scored it
  • When we applied, and how long after the posting went up
  • Which posting, which company, which city
  • Who got the interview, and who heard nothing

That is how we know which CVs get called.

Get the CV for this job

From $25 per CV, paid once. No subscription.

The numbers game

More applications. More interviews.

Every application goes out with its own CV, written for that posting and paid once. Send enough of them and the law of large numbers finds you the job.

Get the CV for this job
By hand5–10
With CV Rocket100
applications a day

Nearby

Live postings like this one

Same employer first, then the same role elsewhere.

Before you press

Straight answers

Get the CV for this job

From $25 per CV, paid once. No subscription.

What if my background isn't good enough?

We make the most of the background you have. The CV uses every piece of relevant proof your profile holds, and one of the 25 readers reads your whole profile and flags what the CV left out.

Do you really apply for me?

Yes, on the employer's own form, the hardest ones included. Where a question needs you, you answer it right there and AI suggests the best answer. Don't want us applying from our IP addresses? Use our Chrome extension: we apply straight from your own browser.

Is it a subscription?

No. You pay once per CV, from $25. Every application goes out with its own CV, written for that posting.

One job. One CV.
Paid once.

Pick the posting you want. We write for it, apply for you and catch the reply.

Get the CV for this job

From $25 per CV, paid once. No subscription.