Network And Security Manager

Role & responsibilities

1. IT Infrastructure & Operations Management

• Oversee day-to-day management of networks, firewalls, endpoint security, and data protection.
• Manage security for cloud environments (AWS, Azure, Google Cloud).
• Manage the Network & Security team, vendors, and contractors for network and security system maintenance.

2. Cybersecurity Governance & Compliance

• Develop, implement, and maintain the Universitys Cyber Security Policy, IT Security Standards, and SOPs.
• Ensure compliance with ISO 27001:2022 controls, DPDPA 2023 data protection obligations, and CERT-In 2025 directives.
• Conduct periodic risk assessments, vulnerability assessments, and penetration testing (VAPT).
• Monitor compliance with password policy, access control, data classification, and backup procedures.
• Responsible for Data Protection for data privacy and breach reporting mechanisms.

3. Network & Endpoint Security

• Administer firewall, IDS/IPS, VPN, anti-virus, and email security gateways.
• Monitor logs and alerts for potential security incidents and unauthorized access.
• Implement endpoint detection and response (EDR) tools for laptops, desktops, and mobile devices.
• Enforce network segmentation and zero-trust access models.

4. Data Protection & Privacy

• Implement data lifecycle management practices aligned with DPDPA 2023 and ISO 27701 standards.
• Ensure encryption of sensitive student, staff, and research data at rest and in transit.
• Manage data backup, restoration, and disaster recovery protocols.
• Supervise cloud storage access and secure collaboration platforms.

5. Security Operations & Incident Management

• Establish Security Operations Centre (SOC) functions or coordinate with external SOC service providers.
• Develop and maintain Incident Response Plans (IRP) and Business Continuity Plans (BCP).
• Conduct root cause analysis and prepare incident closure reports.
• Coordinate with CERT-In for reporting security incidents and compliance submissions.

6. Audit, Reporting & Awareness

• Maintain audit trails, configuration records, and asset inventories for all IT assets.
• Conduct cybersecurity awareness sessions for faculty, staff, and students.
• Liaise with auditors for ISO 27001 surveillance audits and UGC/AICTE/NAAC ICT compliance audits.

7. Policy, Documentation & Governance

• Draft and maintain IT Governance Framework, Access Control Policy, Acceptable Use Policy, and Data Retention Policy.
• Ensure periodic policy review and approval by the Information Security Steering Committee.
• Document system changes, version updates, and configuration baselines.

Preferred candidate profile

• Bachelors / Master’s Degree in Computer Science, Information Technology, or related field.
• Certifications preferred: CISSP, CCNP, CCNA Security
• 5–10 years of relevant experience in IT infrastructure and cybersecurity management, preferably in Education / Research / University sector.