Lead - Cybersecurity

AdaniConneX

Mumbai, IndiaLeadFull-timeSoftware Engineering Sign in for match

About the role

Cybersecurity Strategy, Governance & Compliance

Develop, implement, and continuously enhance cybersecurity policies, standards, frameworks, and operational procedures across the business.
Establish cybersecurity governance mechanisms and drive periodic cybersecurity performance reviews with business leadership.
Define cyber KPIs, KRIs, scorecards, and reporting frameworks.
Ensure compliance with cybersecurity regulations, customer requirements, contractual obligations, and industry standards.
Maintain cyber risk registers and monitor closure of identified risks and audit observations.

Cyber Hygiene & Technology Controls

Govern and continuously improve cyber hygiene controls across all operational sites.
Ensure effective Identity & Access Management (IAM), Privileged Access Management (PAM), Multi-Factor Authentication (MFA), and user access governance.
Drive endpoint security, anti-virus management, security patch deployment, and operating system/application security updates.
Manage backup infrastructure, restoration testing, and cyber recovery controls.
Ensure OEM-supported security configurations and technology lifecycle compliance across critical systems.

Operational Technology (OT) Security

Develop and implement cybersecurity controls for Operational Technology environments including BMS, DCIM, IBMS, EPMS, CCTV, Access Control Systems, PLCs, and Building Automation Systems.
Ensure secure integration and segregation of IT and OT networks.
Lead OT vulnerability assessments, security audits, and remediation programs.
Collaborate with Operations, Engineering, and OEM partners to strengthen resilience of mission-critical operational systems.

Network & Endpoint Security

Manage enterprise and data center network security architecture.
Govern firewalls, IDS/IPS, NAC, VPNs, secure remote access, network segmentation, and threat detection controls.
Implement and manage Endpoint Detection & Response (EDR/XDR) solutions.
Continuously monitor network and endpoint security posture and drive corrective actions.

Cybersecurity Incident Response & Crisis Management

Lead cybersecurity incident detection, investigation, containment, eradication, and recovery activities.
Develop and maintain incident response plans, cyber playbooks, escalation matrices, and response procedures.
Conduct root cause analysis and implement preventive and corrective actions.
Coordinate with leadership, OEMs, customers, service providers, and regulatory agencies during cybersecurity incidents.
Conduct cyber crisis simulations, tabletop exercises, and business continuity testing.

Cyber Risk Management & Vulnerability Management

Conduct periodic cyber risk assessments for infrastructure, applications, networks, OT systems, and critical business processes.
Lead vulnerability assessments, penetration testing, security reviews, and threat exposure assessments.
Prioritize and drive remediation of identified vulnerabilities within defined timelines.
Monitor emerging cyber threats and ensure timely mitigation of associated risks.

Cybersecurity Solutions & Technology Deployment

Evaluate, recommend, and implement cybersecurity technologies aligned with business and operational requirements.
Drive deployment and lifecycle management of SIEM, SOAR, PAM, EDR/XDR, threat intelligence, vulnerability management, and other cybersecurity platforms.
Collaborate with digital, automation, infrastructure, and project teams for integration of secure technologies.

Cybersecurity Audits & Assurance

Lead internal and external cybersecurity audits, assessments, certifications, and customer security reviews.
Ensure readiness and compliance with standards such as ISO 27001, NIST Cybersecurity Framework, CIS Controls, and other relevant industry practices.
Maintain cybersecurity documentation, evidence repositories, and compliance records.

Vendor & Third-Party Cyber Risk Management

Conduct cybersecurity assessments of OEMs, contractors, managed service providers, consultants, and third-party vendors.
Review cybersecurity controls and contractual compliance of suppliers and service providers.
Ensure remediation and mitigation of identified third-party cyber risks.
Embed cybersecurity requirements into procurement, contracting, and vendor management processes.

Cybersecurity Awareness & Capability Building

Develop and implement cybersecurity awareness programs across operational data centers.
Conduct periodic employee awareness campaigns, phishing simulations, training sessions, and security workshops.
Build cybersecurity competency within operations, engineering, facility management, and support functions.
Promote a strong cyber-aware culture across the organization.

ESG, Sustainability & Workplace Safety

Demonstrate active commitment to AdaniConneX's Environmental, Social & Governance (ESG) objectives and sustainability agenda.
Promote environmentally responsible management of IT and electronic assets, including e-waste disposal and sustainable technology practices.
Comply with all applicable Environment, Health & Safety (EHS) policies, procedures, and statutory requirements.
Participate in safety audits, emergency response drills, incident investigations, and risk mitigation initiatives.
Ensure safe working practices while executing cybersecurity projects and operational activities at data center facilities.
Ensure vendors, contractors, and OEM representatives comply with site safety, environmental, security, and governance requirements.

Key Internal Stakeholders

Key External Stakeholders

Educational Qualification

Bachelor or master’s degree in computer science, Information Technology, Electronics, Cybersecurity, Engineering, or related discipline.

Professional Certifications (Preferred)

Key Competencies Functional Competencies

Behavioral Competencies