Top Cyber Security Jobs in Mumbai

Maintain and configure Workday security, tenant settings, business processes, roles, groups, integrations, data visibility, SSO, and access controls. Perform EIB uploads, tenant migrations, data purging, logging, and mass operations. Resolve complex support issues, assess dependencies, manage incidents and changes, and advise stakeholders. Requires Workday security certification, knowledge of HR processes and another Workday module, ITIL expertise, customer support experience, and strong communication skills.

Conduct security assessments, audits, threat modeling, vulnerability testing, and remediation across IT and business solutions. Translate security strategies into actionable requirements, advise teams on secure-by-design practices, evaluate supplier security, and develop security solutions for corporate infrastructure. The role also involves mentoring colleagues, promoting security policies, and communicating cybersecurity concepts to technical and non-technical stakeholders.

Own the GRC engineering program by building continuous control monitoring, common controls frameworks, automated evidence collection, control validation, risk workflows, asset prioritization, and audit-ready reporting. The role integrates identity, cloud, code repositories, endpoints, and ticketing systems; develops policy and control checks in code; guides AI-assisted compliance workflows; tracks program metrics; and represents the technical implementation during audits.

Own cloud and infrastructure security architecture across Azure and AWS, including network segmentation, workload isolation, hardened images, Kubernetes, policy as code, AI workload security, and vulnerability management. Build secure-by-default infrastructure modules, landing zones, and automated evidence processes. Establish cloud posture and workload protection practices, drive remediation through pull requests, and ensure controls satisfy ISO 27001, SOC 2, and future regulatory requirements.

Lead application security across One Identity’s products by threat modeling designs, defining security requirements, reviewing and fixing code, tuning security testing tools, managing vulnerability response and coordinated disclosure, overseeing SBOM and software composition analysis, and advising engineering on AI-assisted development. The role requires deep C#/.NET expertise, Java fluency, product security experience, and the ability to embed practical security controls throughout the software development lifecycle.

Defines enterprise security architecture strategy and standards across Nokia, leading complex initiatives involving Zero Trust, IAM, multi-cloud security, application and network segmentation, AI security, and cyber resiliency. Advises senior stakeholders on security strategy, supplier risk, M&A due diligence, and regulatory matters. Assesses vulnerabilities, validates security solutions, supports penetration testing and hardening, and delivers automated security capabilities across cloud-first infrastructure and DevSecOps environments.

Own platform architecture, infrastructure security, access controls, database maturity, and AWS migration. Write secure production code, establish infrastructure standards, review security changes, partner with InfoSec, mentor engineers, troubleshoot recurring failures, and guide DevOps implementation. The role also supports AI infrastructure, model serving, agent observability, React and TypeScript applications, and infrastructure security on-call responsibilities.

Manages physical security for a power plant, including threat assessments, vulnerability mitigation, workforce readiness, surveillance and access control. Coordinates with law enforcement and intelligence agencies, leads crisis response drills and investigations, and ensures compliance with industrial security requirements. The role requires extensive security operations experience in high-stakes industrial or sensitive environments, with military or senior police backgrounds also considered.

Designs and implements security controls, audit logging, kill switches, PII masking, access controls, and governance for AI/LLM applications. Ensures compliance with RBI Model Risk Management guidelines and CCIL requirements across LLM, agent, API, and cloud layers. Conducts control assessments, maintains audit evidence, remediates security gaps with cross-functional teams, and explains controls and risks to auditors and regulators.

Configure, administer, and troubleshoot FortiGate firewalls, FortiManager, and FortiSwitch devices. Implement firewall policies, routing, NAT, VPN, and security configurations; monitor infrastructure; resolve incidents; document changes; and coordinate with technical teams and customers while following security and change-management processes.

Configure, administer, and troubleshoot FortiGate firewalls, FortiManager, and FortiSwitch devices. Implement firewall policies, routing, NAT, VPN, and security configurations; monitor infrastructure; resolve incidents; document changes; and coordinate with internal teams and customers while following security and change-management processes.

Serves as the SOC escalation point for complex QRadar incidents. Conducts deep-dive investigations, threat hunting, log correlation, malware and phishing analysis, rule tuning, and incident response coordination. Develops AQL searches and detection use cases, integrates threat intelligence, leads root cause analysis, supports vulnerability and patch validation, mentors L1 analysts, and improves SOC processes and playbooks.

Conduct regulatory compliance audits for financial-sector clients by interpreting Indian regulatory requirements, translating them into control frameworks, performing risk assessments and evidence reviews, identifying gaps, preparing audit reports, tracking remediation, and supporting regulatory queries. The role engages senior stakeholders, compliance teams, IT personnel, and regulators while managing audit timelines and deliverables.

Plan and execute PCI DSS audits, conduct risk assessments and gap analyses, gather compliance evidence, identify remediation needs, prepare reports, coordinate with QSAs, maintain documentation, monitor regulatory changes, train teams, and track findings through closure.

Lead cybersecurity GRC and compliance engagements from scoping through final reporting. Perform control assessments, framework mappings, evidence validation, gap and risk assessments, remediation advisory, audit workpaper development, and executive reporting across CMMC, FedRAMP, NIST, ISO 27001, SOC 2, and HITRUST. Advise clients, coordinate with auditors and assessors, manage multiple engagements, and contribute to GRC methodologies, templates, control libraries, and presales activities.

Owns the enterprise DLP program, secures Azure and AWS environments, and leads high-severity security incident response outside US hours. Responsibilities include DLP policy design and tuning, cloud security assessments, remediation, identity and workload hardening, alert escalation, MSSP integration, L2 team enablement, automation playbooks, audit support, and security metrics reporting. The role requires collaboration with Legal, IT, business stakeholders, and global security teams while maintaining ISO 27001 and privacy compliance.

Manage information security compliance and operational initiatives, including ISO 27001, SOC 2, and HIPAA programs; coordinate audits, evidence, policies, controls, risk remediation, vendor assessments, access reviews, vulnerability management, incident response, security awareness, and business continuity activities. Lead ambiguous technical initiatives through planning, stakeholder coordination, implementation, and completion while serving as a key contact for auditors and business partners.

Architect and develop security platform services supporting secrets and key management, identity and access management, onchain security, policy and risk management, and vulnerability management. Define technical roadmaps, build scalable cloud systems using Go or Java, manage project deliverables, mentor engineers, review designs, and maintain backend systems. The role requires solving complex technical problems, ensuring security and operational integrity, and collaborating with engineering, product, design, and leadership teams.

Lead the end-to-end design, development, deployment, and operation of highly available backend services for endpoint data security. Establish architectural direction, improve reliability and observability, drive engineering standards, conduct code reviews, manage technical initiatives, and mentor engineers. The role requires extensive Golang experience, cloud scaling expertise, CI/CD knowledge, observability experience, and the ability to influence AI-assisted development practices.

Lead application security within DevSecOps: embed and operate SAST/DAST and pipeline security tools, develop secure coding guidance and policies, triage and remediate findings, liaise with development and stakeholders, and maintain roadmaps and reporting for application security initiatives.

Manages SOC operations, security monitoring, incident response, vulnerability management, endpoint and data security, application security testing, compliance, governance, team leadership, and vendor relationships. Oversees security incidents and forensic investigations, audits, enterprise security operations, and implementation of SIEM, EDR/XDR, network, endpoint, cloud, and application security controls.

Lead enterprise cybersecurity initiatives, including security architecture, infrastructure and cloud security, IAM, governance, cyber risk management, threat detection, incident response, and vulnerability management. The role requires 10–12 years of overall experience, at least six years in cybersecurity, and involves on-site work in Mumbai under a long-term engagement.

Responsible for designing and managing Oracle ERP security roles, administering user access, applying security controls and best practices, managing roles through Oracle RMC, and analyzing business requirements to develop appropriate security role structures.

Design and manage Oracle ERP security roles based on business requirements. The consultant will apply Oracle RMC knowledge, manage user access, implement security controls, and follow Oracle ERP security concepts and best practices.

Provides Level 2 managed services support for network and cross-technology infrastructure. Monitors and resolves incidents, manages service requests and SLAs, documents changes, audits tickets, handles escalations, supports disaster recovery testing, and identifies automation opportunities. Collaborates with clients, vendors, L1 engineers, and automation teams while contributing to infrastructure projects and maintaining service quality.