Job Title: Senior Google Workspace Administrator (Banking & NBFC)
Department: Information Technology
Reports To: Lead – IT Infrastructure / CISO
Summary:
We are seeking a Senior Google Workspace Administrator with deep expertise in financial enterprise environments. In this role, you will design, deploy, and secure our Google Workspace ecosystem while ensuring strict alignment with banking regulations, data privacy mandates, and cyber incident frameworks.
You will work at the intersection of IT Infrastructure, InfoSec, and Internal Audit, ensuring seamless productivity tools (Gmail, Drive, Meet, Chat, AppSheet) while maintaining robust access controls, encryption, and DLP enforcement.
Key Focus:
Enterprise Google Workspace management, security architecture, RBI/NBFC compliance readiness, and identity governance.
Certifications Preferred: Google Professional Workspace Administrator, GCP Security Engineer, or CISSP/CISA.
.
Scope:
End-to-end administration, AppSheet/Apps Script automation, MDM/BYOD governance, and audit-ready security logging.
AI Governance & Administration:
Hands-on experience configuring Google Gemini enterprise settings, AI access policies, and data boundaries
within the Google Admin console.
Team Lead & Training:
Lead and Train existing IT Staff in Google Workspace Administration.
Should be able to create Content for internal Learning Modules for Employee Training.
Responsibilities:
1. Security, IAM & Identity Governance
● Design and maintain Identity & Access Management (IAM), Single Sign-On (SAML/SSO),
Multi-Factor Authentication (2SV/Hardware Keys), and OAuth application approvals.
● Manage Context-Aware Access (CAA) to restrict workspace access based on IP, geo-location, device
compliance, and user roles.
● Enforce granular Data Loss Prevention (DLP) policies across Drive, Gmail, and Chat to prevent
unauthorized leakage of Sensitive Personal Data (PII, Financial records, Credit card numbers).
● Implement Best Practices and align to CIS Benchmarks.
● Enforce AI Data Governance & Privacy Controls via the Workspace Admin Console to ensure
internal company data/PII is protected and never used to train public generative AI models.
2. Audit, Compliance & Regulatory Readiness
● Partner with InfoSec and Risk teams to ensure compliance with financial guidelines (RBI Cyber
Security Framework, CERT-In, SEBI, GDPR, ISO 27001).
● Maintain complete operational readiness for internal/external audits, keeping immutable logs via
Google Vault, eDiscovery rules, and retention policies.
● Configure, export, and monitor log forwarding from Workspace Admin Console to corporate SIEM /
SOC tools for real-time threat detection.
● Familiarity with deploying AI-assisted classification, automated DLP rule generation, and smart features
governance.
● Monitor and audit generative AI usage metrics and logs via the Google Admin AI Control Center to
ensure alignment with IT/Sec policies and regulatory standards
3. Mobile Device Management (MDM) & Endpoint Security
● Oversee corporate and BYOD mobile management (Android Enterprise, iOS) via Google Endpoint Management or 3rd-party MDMs (Manage Engine)
● Implement remote wipe, encrypted containerization, certificate management, and app whitelisting for employee endpoints.
4. Mail Routing, Cloud Infrastructure & Automation
● Manage complex email routing, SPF, DKIM, DMARC, ARC, and advanced phishing/spam filtering configurations.
● Build low-code/no-code operational scripts using Google Apps Script and AppSheet to automate user lifecycle processes (onboarding, offboarding, access reviews).
● Manage integrated GCP projects supporting Workspace applications, API credentials, service accounts, and cloud resource boundaries.
● Oversee and configure AI-driven Threat Defense in Gmail to block sophisticated spear-phishing, deepfake/spoofing attempts, and zero-day malware attacks targeting financial staff.
Required Skills & Qualifications
Technical & Domain Experience
● Experience: 4–8 years of hands-on experience managing Google Workspace in enterprise environments (preferably within Banking, NBFC, Fintech, or Financial Services).
● Certifications: Google Professional Workspace Administrator (Required/Highly Preferred).
● Identity & Security: Hands-on experience with SAML SSO (Okta, Azure AD/Entra ID, Ping), OAuth 2.0 app governance, zero-trust architectures, and PKI/certificate deployment.
● Automation: Proficiency in Google Apps Script, Python, or low-code frameworks like AppSheet for IT workflow automation.
● Mail & Routing: Deep knowledge of MX, SPF, DKIM, DMARC, inbound/outbound gateways, and TLS enforcement.
● GCP Knowledge: Basic to intermediate experience managing GCP projects tied to Workspace APIs and Service Accounts.
● AI Governance & Administration: Hands-on experience configuring Google Gemini enterprise settings, AI access policies, and data boundaries within the Google Admin console.
● Automated Data Protection: Familiarity with deploying AI-assisted classification, automated DLP rule generation, and smart features governance.
● Next-Gen Automation: Proficiency in writing/debugging Google Apps Script using generative AI assistance and creating automated workflows using AppSheet + Gemini.
Soft Skills & Strategic Alignment
● Strong ability to translate complex InfoSec policies into practical end-user Workspace configurations.
● Clear communicator capable of leading technical discussions with CISO, CTO, Audit, and external regulatory bodies.
● Knowledge of MS365 Admin Console Netskope and CASB architecture along with a good understanding of Networking will be an added advantage.
