Assistant Group Manager - IT infra & BISO

• Manage and support enterprise IT infrastructure, ensuring availability, performance, stability, and operational continuity.

• Manage and support enterprise IT infrastructure, ensuring availability, performance, stability, and operational continuity.
• Administer and support Windows Server environments, Active Directory, Group Policy, DNS, DHCP, and related infrastructure services.
• Support Microsoft 365, endpoint management, identity and access management, and enterprise collaboration platforms, as applicable.
• Manage and coordinate server, desktop, laptop, network, and endpoint infrastructure operations.
• Support network infrastructure, including LAN, WAN, Wi-Fi, VPN, firewalls, switches, routers, and connectivity troubleshooting.
• Coordinate server patching, operating system upgrades, software deployment, endpoint updates, and infrastructure maintenance.
• Monitor infrastructure availability, system health, capacity, and performance; identify and resolve operational issues.
• Manage incidents, problems, and change management processes in accordance with IT service management practices.
• Work with internal IT teams, managed service providers, and external vendors to ensure timely resolution of infrastructure issues.
• Maintain accurate infrastructure documentation, asset inventories, configuration records, support procedures, and operational reports.
• Ensure appropriate access controls, privileged account management, system hardening, and secure infrastructure configuration.
• Support infrastructure audits and ensure compliance with internal IT standards and operational policies.

• Act as the primary coordination point between business/IT infrastructure teams and the central Information Security or CISO organization.
• Support the implementation of corporate information security policies, standards, procedures, and control requirements.
• Identify and assess information security risks associated with infrastructure, endpoints, servers, applications, and business processes.
• Support business security risk assessments and coordinate risk treatment plans with relevant stakeholders.
• Monitor compliance with corporate security requirements and applicable regulatory or industry standards.
• Coordinate with business owners and technical teams to ensure security requirements are understood, assigned, and implemented.
• Support security awareness activities and communicate relevant security requirements to IT and business stakeholders.
• Support internal and external security audits, evidence collection, control validation, and remediation tracking.
• Escalate significant security risks, unresolved findings, policy deviations, and overdue remediation activities to the appropriate stakeholders.
• Support the assessment and approval workflow for security exceptions, ensuring documented risk acceptance by authorized stakeholders.
• Participate in security incident response activities and coordinate with the central Security Operations Center (SOC), IT teams, and business stakeholders.
• Support business continuity and disaster recovery planning from an information security perspective.
• Promote a security-first culture while balancing business requirements and operational priorities.

• Support security reviews of infrastructure changes, new technologies, and third-party service arrangements.

• Support security reviews of infrastructure changes, new technologies, and third-party service arrangements.
• Ensure security exceptions and deviations are documented, reviewed, and approved through the established governance process.

• Windows Server administration and troubleshooting.

• Windows Server administration and troubleshooting.
• Active Directory, Group Policy, DNS, and DHCP.
• Endpoint and device management.
• Networking fundamentals, including LAN, WAN, VPN, firewalls, and wireless networks.
• Server and endpoint patch management.
• Backup, disaster recovery, and business continuity.
• Cloud infrastructure fundamentals, preferably Microsoft Azure or AWS.

• Information security governance, risk, and compliance (GRC).
• Security risk assessment and remediation tracking.
• Endpoint security and EDR platforms.
• Security incident coordination.
• Security control assessment and audit support.
• Security policies, standards, and exception management.
• Understanding of ISO 27001, NIST CSF, and relevant organizationa

• Bachelor’s degree in computer science, Information Technology, Computer Engineering, or an equivalent technical discipline.

• Bachelor’s degree in computer science, Information Technology, Computer Engineering, or an equivalent technical discipline.
• Relevant professional experience in enterprise IT infrastructure management and IT security coordination.

• Microsoft Certified: Windows Server Hybrid Administrator Associate.

• Microsoft Certified: Windows Server Hybrid Administrator Associate.
• Microsoft Certified: Azure Administrator Associate.
• Cisco CCNA or an equivalent networking certification.

• ISO/IEC 27001 Lead Implementer or Lead Auditor.