Senior Executive - Google Workspace & IT Systems

Role Overview

The incumbent will be responsible for the administration, security, monitoring, and day-to-day operation of Google Workspace and IT systems. The role will manage users, identities, devices, applications, access controls, data protection, and IT infrastructure while providing reliable technical support to employees and ensuring that organizational systems and data remain secure and operational. The role will also support IT security initiatives, incident response, infrastructure projects, audits, and continuous improvement of the organizations IT environment.

Key Responsibilities

• Google Workspace Administration
  • Manage Google Workspace users, Organizational Units (OUs), groups, licenses, aliases, and administrative roles.
  • Manage user lifecycle processes including onboarding, role/department changes, suspension, account recovery, and employee offboarding.
  • Configure and maintain Google Workspace policies, settings, and organizational structures.
  • Manage Google Groups, including ownership, membership, posting permissions, external members, and access controls.
  • Manage Gmail, Google Drive, Shared Drives, Google Meet, Calendar, and other Google Workspace services.
  • Monitor Workspace storage, licensing, inactive accounts, service usage, and overall platform health.
  • Maintain appropriate documentation of Workspace configurations, policies, and administrative procedures.
• Identity Access Management
  • Implement and monitor MFA, password policies, access controls, session controls, and account security policies.
  • Apply least-privilege principles across users, applications, devices, and administrative accounts.
  • Manage delegated administration and review privileged/admin accounts periodically.
  • Review user and group access to systems, applications, Shared Drives, and confidential information.
  • Manage access revocation during employee exits, transfers, and security incidents.
  • Support identity and access integration with other organizational systems where required.
• Gmail Email Security
  • Manage Gmail security and organizational email policies.
  • Configure and monitor SPF, DKIM, and DMARC.
  • Manage anti-spam, anti-phishing, malware protection, quarantine, and email security policies.
  • Investigate phishing emails, malicious attachments, suspicious links, spoofing, and compromised accounts.
  • Support email security investigations and implement preventive controls.
  • Monitor email-related security alerts and unusual activity.
• Google Drive, Shared Drives Data Security
  • Manage Google Drive and Shared Drive permissions, ownership, access, and external sharing.
  • Ensure confidential and restricted information is accessible only to authorized users.
  • Monitor and control external sharing of organizational data.
  • Implement appropriate controls for sensitive information, including:
    • Student records
    • Examination and assessment data
    • Employee/HR information
    • Financial information
    • Restricted academic/study materials
    • Intellectual property
    • Confidential management documents
    • Implement and monitor Google Workspace DLP policies.
    • Investigate unauthorized access, sharing, downloading, modification, or deletion of sensitive information.
• Google Vault, Retention Recovery
  • Manage Google Vault policies for retention, legal holds, search, and eDiscovery requirements.
  • Implement and maintain organizational data-retention policies.
  • Support recovery of users, files, emails, and other Workspace data using available recovery mechanisms.
  • Coordinate with approved backup solutions/vendors where third-party Google Workspace backup is implemented.
  • Ensure retention and recovery processes align with organizational requirements.
• Endpoint Chrome Management
  • Manage Google Workspace Endpoint Management and Chrome security policies.
  • Enroll and manage organizational devices.
  • Configure device security, compliance, application, browser, and access policies.
  • Monitor device compliance and investigate non-compliant or compromised devices.
  • Support device encryption, patching, security updates, remote lock/wipe, and lost/stolen device response.
  • Manage Chrome browser policies, extensions, permissions, and security controls.
• Third-Party Applications Integrations
  • Review and control third-party applications connected to Google Workspace.
  • Monitor and manage OAuth access, API permissions, application access, and delegated permissions.
  • Assess applications requesting access to organizational data.
  • Remove or restrict unauthorized, unnecessary, or high-risk applications.
  • Support Google Workspace API and automation integrations where required.
• Security Monitoring Incident Response
  • Monitor Google Workspace security alerts, audit logs, login activity, administrative activity, and suspicious behavior.
  • Investigate compromised accounts, phishing incidents, unauthorized access, data leakage, and other security events.
  • Support incident response, containment, remediation, and post-incident documentation.
  • Assist with VAPT, vulnerability remediation, security audits.

Disclaimer: This job posting has been aggregated from external source. Role details, content, and availability are subject to change. Applicants are advised to confirm the latest information directly on the company website before applying.