Manager – Host Security

We are seeking an experienced Manager – Host Security to lead endpoint security operations and strengthen the protection, resilience and compliance of the Bank’s endpoint ecosystem.

Key Responsibilities

• Lead the implementation and lifecycle management of endpoint security solutions, including antivirus, HIPS, EDR/XDR, application control and File Integrity Monitoring.
• Drive the deployment of endpoint security tools across Windows, Linux, macOS, mobile devices and cloud-based endpoints.
• Own the operating system and third-party application patch-management process.
• Define patch rollout schedules, verification mechanisms and vulnerability-remediation plans.
• Ensure endpoint logs are integrated with the enterprise SIEM for monitoring and threat detection.
• Govern secure VPN access, endpoint posture assessment, MFA integration and conditional-access controls.
• Implement role-based access, least-privilege and device-trust principles across endpoints.
• Oversee endpoint hardening, gold-image implementation and configuration-drift reviews.
• Manage MDM/UEM policies for corporate devices, BYOD and COPE environments.
• Lead containment, forensic triage and root-cause analysis for endpoint security incidents.
• Coordinate with SOC, infrastructure and business teams for incident remediation and regulatory reporting, where applicable.
• Track endpoint risks, unsupported operating systems and end-of-life migration plans.
• Maintain endpoint security metrics covering patch compliance, malware alerts, policy violations and incident response.
• Support audit, vulnerability assessment and penetration-testing closure.
• Manage system integrators, security vendors, service-level agreements and team performance.
• Evaluate AI/ML capabilities within EDR/XDR platforms for anomaly detection and endpoint risk scoring.

Desired Candidate Profile

• Bachelor’s or master’s degree in Information Security, Computer Science or an equivalent discipline.
• Minimum 8 years of experience in endpoint or host security management, preferably within the BFSI sector.
• Deep working knowledge of EDR/XDR, endpoint protection, OS security, patch management, encryption, FIM, UEM and vulnerability management.
• Experience managing Windows, Linux, macOS, mobile and cloud endpoints.
• Strong understanding of Zero Trust, MFA, conditional access, least privilege and endpoint risk scoring.
• Experience in endpoint incident response, forensic readiness and root-cause analysis.
• Familiarity with RBI, CERT-In, IRDAI or other applicable regulatory expectations.
• Ability to manage a medium-sized technical team and coordinate cross-functional remediation.
• Strong vendor-management, operational-governance and executive-reporting capabilities.
• Vendor-specific certifications such as Microsoft Security, SentinelOne or Trend Micro are preferred.
• CEH, CISSP or CISM certification would be an added advantage.