Head of IT Security (India) Full Time

As the Head of IT Security, you will define and execute IT strategy while overseeing end-to-end IT operations across the region. You will combine strategic leadership with hands-on expertise in Microsoft technologies, ensuring secure, compliant, and high-performing systems that deliver measurable business value.

What You’ll Do and How You’ll Succeed

IT Strategy, Governance & Projects

• Define and execute IT strategy aligned with business objectives, ensuring technology delivers measurable outcomes
• Lead IT projects and initiatives, including the design and deployment of new systems and services
• Collaborate with stakeholders to analyse requirements and deliver effective technology solutions
• Establish governance frameworks to support compliance, risk management, and audit readiness
• Develop and maintain IT policies and procedures aligned with organisational direction

Microsoft Technology Stack Leadership

• Oversee Microsoft 365 services including Teams, SharePoint, Exchange, OneDrive, and Intune to enable secure collaboration
• Manage Azure cloud services across compute, storage, networking, and security domains
• Lead identity and access management across Active Directory, Azure AD, DNS, Remote Desktop, and Group Policy
• Implement security solutions such as Microsoft Defender, Compliance Center, Azure Security Center, and advanced DLP
• Drive troubleshooting, optimisation, and standardisation across the Microsoft ecosystem

IT Risk Management, Cybersecurity & Compliance

• Develop and enforce IT security policies aligned with ISO 27001 and client requirements
• Lead IT risk management by identifying vulnerabilities and implementing mitigation strategies
• Conduct internal reviews to ensure ongoing compliance
• Initiate ISO 27001 certification efforts across relevant territories
• Maintain audit-ready documentation and reports for regulatory, customer, and partner requirements
• Monitor threats using Microsoft and third-party tools to ensure continuous protection
• Promote organisational awareness of IT security and data privacy regulations through training and communication

IT Budgeting, Procurement & Asset Management

• Develop and manage IT budgets while tracking expenditure against plans
• Oversee procurement of hardware, software, and services
• Ensure compliance with vendor agreements and licensing requirements
• Maintain accurate inventories of hardware assets and software licences
• Negotiate contracts and manage vendor service level agreements

Infrastructure & Operations

• Manage enterprise infrastructure including servers, networks, routers, switches, and firewalls
• Ensure high availability, scalability, and cost optimisation of IT systems
• Oversee both cloud and on-premise environments across multiple geographies
• Drive continuous improvement in infrastructure performance and resilience

Business Continuity & Disaster Recovery

• Develop and own disaster recovery and business continuity policies across people, processes, and technology
• Define RTO and RPO targets and implement backup and recovery solutions such as Azure Backup, Site Recovery, and Microsoft 365 retention
• Conduct regular disaster recovery drills and address identified gaps

Incident Management

• Establish and enforce incident response playbooks, escalation channels, and service level agreements
• Lead incident containment, investigation, and recovery efforts
• Communicate effectively with leadership, clients, and regulators during incidents
• Conduct root cause analysis and implement corrective actions

IT Service Management & End-User Support

• Implement ITIL-based service management processes including incident, problem, change, and request management
• Lead helpdesk operations to ensure timely resolution of user issues
• Provide direct support for escalations when required
• Organise user awareness sessions on new technologies and security practices
• Track service performance using SLAs, KPIs, and user satisfaction metrics

Data Protection & Privacy

• Implement and monitor controls for personal and sensitive data protection
• Conduct privacy impact assessments and risk evaluations
• Lead response protocols for data breaches and ensure regulatory reporting
• Promote a culture of privacy awareness across the organisation
• Initiate data privacy certification efforts aligned with compliance requirements

Process Automation & Continuous Improvement

• Identify opportunities to automate manual processes using RPA, workflows, or scripting
• Collaborate with stakeholders to optimise IT and business processes
• Drive efficiency, reduce errors, and embed a culture of continuous improvement

Leadership & People Management

• Build and lead a high-performing IT team across multiple regions
• Define team structures, roles, and succession plans
• Mentor and develop team members to strengthen capability and performance
• Foster a culture of collaboration, accountability, and service excellence

We’d Love to Hear From You If…

Experience

• You hold a Bachelor’s or Master’s degree in IT, Computer Science, Information Systems, or a related field, or equivalent experience
• You have 15+ years of IT experience, including at least 7 years in leadership roles
• You have proven experience managing multi-regional IT operations, compliance, and vendor relationships

Technical Expertise

• You have strong expertise in Microsoft technologies including Microsoft 365, Azure, Intune, Advanced DLP, and Windows administration
• You have solid knowledge of network infrastructure components such as routers, switches, and firewalls
• You have hands-on experience with ISO 27001 and information security standards
• You hold certifications such as ITIL, ISO 27001 Lead Implementer, CISSP, CISM, or CISA as an advantage

Ways of Working

• You think strategically while applying strong analytical and business acumen
• You demonstrate strong project management and stakeholder collaboration skills
• You lead with clarity, confidence, and sound decision-making
• You bring deep technical troubleshooting capability across Microsoft and enterprise infrastructure environments
• You balance long-term strategy with effective operational execution

—

Who We Are

Thakral One is a consulting and technology services company headquartered in Singapore, with a pan-Asian presence. We focus primarily around technology-driven consulting, adoption of value-added bespoke solutions, enabling enhanced decision support through data analytics, and embracing possibilities in the cloud. We are heavily inclined towards building capabilities collaboratively with clients and believe strongly in improving grounded and practical outcomes.

This approach is possible through our partnership with leading global technology providers and internal R&D teams. Our clients come from Financial Services, Banking, Telco, Government, Healthcare, and Consumer-oriented organisations.