Manager - Host Security

Job Description:

We are seeking an experienced Manager - Host Security to lead endpoint security operations and strengthen the protection, resilience and compliance of the Bank's endpoint ecosystem.

Total Experience: 8 - 18 years

Key Responsibilities:

- Lead the implementation and lifecycle management of endpoint security solutions, including antivirus, HIPS, EDR/XDR, application control and File Integrity Monitoring.

- Drive the deployment of endpoint security tools across Windows, Linux, macOS, mobile devices and cloud-based endpoints.

- Own the operating system and third-party application patch-management process.

- Define patch rollout schedules, verification mechanisms and vulnerability-remediation plans.

- Ensure endpoint logs are integrated with the enterprise SIEM for monitoring and threat detection.

- Govern secure VPN access, endpoint posture assessment, MFA integration and conditional-access controls.

- Implement role-based access, least-privilege and device-trust principles across endpoints.

- Oversee endpoint hardening, gold-image implementation and configuration-drift reviews.

- Manage MDM/UEM policies for corporate devices, BYOD and COPE environments.

- Lead containment, forensic triage and root-cause analysis for endpoint security incidents.

- Coordinate with SOC, infrastructure and business teams for incident remediation and regulatory reporting, where applicable.

- Track endpoint risks, unsupported operating systems and end-of-life migration plans.

- Maintain endpoint security metrics covering patch compliance, malware alerts, policy violations and incident response.

- Support audit, vulnerability assessment and penetration-testing closure.

- Manage system integrators, security vendors, service-level agreements and team performance.

- Evaluate AI/ML capabilities within EDR/XDR platforms for anomaly detection and endpoint risk scoring.

Desired Candidate Profile:

- Bachelor's or master's degree in Information Security, Computer Science or an equivalent discipline.

- Minimum 8 years of experience in endpoint or host security management, preferably within the BFSI sector.

- Deep working knowledge of EDR/XDR, endpoint protection, OS security, patch management, encryption, FIM, UEM and vulnerability management.

- Experience managing Windows, Linux, macOS, mobile and cloud endpoints.

- Strong understanding of Zero Trust, MFA, conditional access, least privilege and endpoint risk scoring.

- Experience in endpoint incident response, forensic readiness and root-cause analysis.

- Familiarity with RBI, CERT-In, IRDAI or other applicable regulatory expectations.

- Ability to manage a medium-sized technical team and coordinate cross-functional remediation.

- Strong vendor-management, operational-governance and executive-reporting capabilities.

- Vendor-specific certifications such as Microsoft Security, SentinelOne or Trend Micro are preferred.

- CEH, CISSP or CISM certification would be an added advantage.