IT Security & Network Administrator

Job Description Department: Information Technology Location: Bangalore (with travel to other locations as required) Reporting To: Head Information Technology / CISO Experience: 78 Years Employment Type: Full-time About Connect & Heal Connect & Heal (CNH) is one of India's leading integrated healthcare organizations, delivering technology-enabled healthcare solutions across primary care, home healthcare, diagnostics, wellness, emergency response, and enterprise healthcare services. We are committed to building secure, scalable, and resilient digital infrastructure to support our rapidly growing healthcare ecosystem. Position Summary The IT Security & Network Administrator is responsible for ensuring the confidentiality, integrity, and availability of Connect & Heal's IT infrastructure. The role will manage enterprise network operations, cybersecurity controls, cloud and endpoint security, identity and access management, vulnerability management, and regulatory compliance. The incumbent will play a key role in strengthening the organization's cyber resilience while supporting business continuity, healthcare operations, and information security initiatives aligned with ISO 27001, ISO 27701, and applicable healthcare data privacy regulations. Key Responsibilities Information Security Implement and administer enterprise information security controls across all business locations.Manage endpoint security, antivirus, EDR/XDR, email security, and Data Loss Prevention (DLP) solutions.Monitor and respond to security incidents, alerts, and vulnerabilities.Conduct vulnerability assessments, penetration testing coordination, and remediation tracking.Support cybersecurity awareness and phishing simulation programs.Maintain identity and access management (IAM), including MFA, privileged access, and user lifecycle management.Monitor security logs and coordinate incident response with internal and external stakeholders.Ensure secure configuration baselines for servers, endpoints, and network devices.Network Administration Administer enterprise LAN, WAN, SD-WAN, VPN, Wi-Fi, firewalls, switches, routers, and internet connectivity.Configure and maintain Cisco, Fortinet, Sophos, Palo Alto, or equivalent network security appliances.Monitor network performance and proactively resolve connectivity issues.Manage network segmentation and secure remote access.Maintain network documentation, IP addressing, topology, and disaster recovery configurations.Support cloud networking for Azure and AWS environments.Cloud & Infrastructure Security Secure Microsoft 365, Azure AD (Microsoft Entra ID), Exchange Online, and SharePoint environments.Implement Conditional Access Policies and Zero Trust principles.Support cloud backup and disaster recovery strategies.Monitor cloud security posture using Microsoft Defender and related security tools.Compliance & Governance Support ISO 27001, ISO 27701, ISMS, and Privacy Information Management System (PIMS) implementation and audits.Ensure compliance with the Digital Personal Data Protection Act, 2023, and healthcare-specific data protection requirements.Maintain security documentation, policies, risk registers, and audit evidence.Participate in internal and external security audits.Business Continuity Maintain backup schedules and disaster recovery plans.Participate in DR drills and business continuity exercises.Ensure high availability of critical business systems.Vendor & Asset Management Coordinate with OEMs, ISPs, cloud providers, and security vendors.Manage IT security renewals, certificates, licenses, and warranties.Maintain inventory of network and security assets.Monitoring & Reporting Generate monthly dashboards on:Security incidentsVulnerability statusEndpoint compliancePatch complianceFirewall healthNetwork uptimeSLA performancePresent periodic security posture reports to IT leadership.Technical Skills Networking TCP/IPDNSDHCPVLANVPNRouting & SwitchingSD-WANWi-Fi AdministrationFirewall ManagementSecurity Endpoint Detection & Response (EDR/XDR)SIEM MonitoringIdentity & Access Management (IAM)MFADLPEmail SecurityVulnerability ManagementPatch ManagementZero Trust SecurityIncident ResponseCloud Microsoft AzureMicrosoft 365 AdministrationAzure AD (Microsoft Entra ID)AWS (preferred)Operating Systems Windows ServerLinux (preferred)Active DirectoryGroup PolicyTools Microsoft DefenderFortinetSophosPalo AltoCisco MerakiCrowdStrikeSentinelOneNessusQualysSolarWindsManageEnginePreferred Certifications CEH (Certified Ethical Hacker)CompTIA Security+Cisco CCNA / CCNPMicrosoft Certified: Azure Administrator AssociateMicrosoft Certified: Security Administrator AssociateFortinet NSEISO 27001 Lead Implementer / Internal AuditorCertified Information Systems Security Professional (CISSP) (preferred)Qualifications Bachelor's degree in Computer Science, Information Technology, or a related field.78 years of experience in IT infrastructure, network administration, and information