Assistant Group Manager - IT infra & BISO

Metro Global Solution Center (MGSC) is internal solution partner for METRO, a €29.8 Billion international wholesaler with operations in 32 countries through 625 stores & a team of 91,000 people globally. Metro operates in a further 10 countries with its Food Service Distribution (FSD) business and it is thus active in a total of 34 countries.

MGSC, location wise is present in Pune (India), Düsseldorf (Germany) and Szczecin (Poland). We provide HR, Finance, IT & Business operations support to 31 countries, speak 24+ languages and process over 18,000 transactions a day. We are setting tomorrow’s standards for customer focus, digital solutions, and sustainable business models. For over 10 years, we have been providing services and solutions from our two locations in Pune and Szczecin. This has allowed us to gain extensive experience in how we can best serve our internal customers with high quality and passion. We believe that we can add value, drive efficiency, and satisfy our customers.

Website: https://www.metro-gsc.in

Company Size: 600-650

Headquarters: Pune, Maharashtra, India

Type: Privately Held

Inception: 2011

Job Purpose

The IT Infrastructure & Business Information Security Officer will be responsible for supporting and maintaining enterprise IT infrastructure operations while ensuring that information security requirements are implemented across the assigned business or organizational entity.

The role combines hands-on IT infrastructure expertise with business information security responsibilities, including security risk identification, vulnerability management, compliance monitoring, security policy implementation, and coordination with central Cybersecurity, IT Infrastructure, application, and business teams.

The ideal candidate should have a strong background in managing IT infrastructure environments, with practical experience in IT security governance and the ability to translate cybersecurity requirements into actionable business and technical activities.

Key Responsibilities

IT Infrastructure Management and Operations - Primary Responsibility

• Manage and support enterprise IT infrastructure, ensuring availability, performance, stability, and operational continuity.
• Administer and support Windows Server environments, Active Directory, Group Policy, DNS, DHCP, and related infrastructure services.
• Support Microsoft 365, endpoint management, identity and access management, and enterprise collaboration platforms, as applicable.
• Manage and coordinate server, desktop, laptop, network, and endpoint infrastructure operations.
• Support network infrastructure, including LAN, WAN, Wi-Fi, VPN, firewalls, switches, routers, and connectivity troubleshooting.
• Coordinate server patching, operating system upgrades, software deployment, endpoint updates, and infrastructure maintenance.
• Monitor infrastructure availability, system health, capacity, and performance; identify and resolve operational issues.
• Manage incidents, problems, and change management processes in accordance with IT service management practices.
• Work with internal IT teams, managed service providers, and external vendors to ensure timely resolution of infrastructure issues.
• Maintain accurate infrastructure documentation, asset inventories, configuration records, support procedures, and operational reports.
• Ensure appropriate access controls, privileged account management, system hardening, and secure infrastructure configuration.
• Support infrastructure audits and ensure compliance with internal IT standards and operational policies.

Business Information Security Officer (BISO) Responsibilities

• Act as the primary coordination point between business/IT infrastructure teams and the central Information Security or CISO organization.
• Support the implementation of corporate information security policies, standards, procedures, and control requirements.
• Identify and assess information security risks associated with infrastructure, endpoints, servers, applications, and business processes.
• Support business security risk assessments and coordinate risk treatment plans with relevant stakeholders.
• Monitor compliance with corporate security requirements and applicable regulatory or industry standards.
• Coordinate with business owners and technical teams to ensure security requirements are understood, assigned, and implemented.
• Support security awareness activities and communicate relevant security requirements to IT and business stakeholders.
• Support internal and external security audits, evidence collection, control validation, and remediation tracking.
• Escalate significant security risks, unresolved findings, policy deviations, and overdue remediation activities to the appropriate stakeholders.
• Support the assessment and approval workflow for security exceptions, ensuring documented risk acceptance by authorized stakeholders.
• Participate in security incident response activities and coordinate with the central Security Operations Center (SOC), IT teams, and business stakeholders.
• Support business continuity and disaster recovery planning from an information security perspective.
• Promote a security-first culture while balancing business requirements and operational priorities.

• Support security reviews of infrastructure changes, new technologies, and third-party service arrangements.
• Ensure security exceptions and deviations are documented, reviewed, and approved through the established governance process.

Experience Requirements

• Overall experience: 10-12 years or more in IT, with the required infrastructure and security experience.
• IT Infrastructure: Approximately 10 years of hands-on experience in enterprise infrastructure operations, administration, support, or management.
• IT Security / BISO: minimum 2-3 years of experience supporting information security, IT risk management, security governance, compliance, or BISO-related activities.
• Experience working in a medium-to-large enterprise or a complex, multi-location IT environment.
• Experience coordinating with infrastructure teams, business stakeholders, service providers, and central security functions.
• Experience preparing operational reports, management dashboards, compliance evidence, and remediation tracking reports.

Technical Skills and Competencies

IT Infrastructure

• Windows Server administration and troubleshooting.
• Active Directory, Group Policy, DNS, and DHCP.
• Endpoint and device management.
• Networking fundamentals, including LAN, WAN, VPN, firewalls, and wireless networks.
• Server and endpoint patch management.
• Backup, disaster recovery, and business continuity.
• Cloud infrastructure fundamentals, preferably Microsoft Azure or AWS.

Information Security

• Information security governance, risk, and compliance (GRC).
• Security risk assessment and remediation tracking.
• Endpoint security and EDR platforms.
• Security incident coordination.
• Security control assessment and audit support.
• Security policies, standards, and exception management.
• Understanding of ISO 27001, NIST CSF, and relevant organizational security requirements.

Candidates do not need to hold every certification. One or more relevant certifications would be advantageous.

Mandatory:

• Bachelor’s degree in computer science, Information Technology, Computer Engineering, or an equivalent technical discipline.
• Relevant professional experience in enterprise IT infrastructure management and IT security coordination.

Preferred:

• Master’s degree in information technology, Cybersecurity, Information Systems, or a related discipline.
• Equivalent practical experience and recognized professional certifications may be considered in accordance with company policy.

Experience:

10+ years in IT Infrastructure and 2-3 years in IT Security / BISO responsibilities

IT Infrastructure:

• Microsoft Certified: Windows Server Hybrid Administrator Associate.
• Microsoft Certified: Azure Administrator Associate.
• Cisco CCNA or an equivalent networking certification.

Information Security and Governance:

• ISO/IEC 27001 Lead Implementer or Lead Auditor.