Lead Cybersecurity & GRC IT - OT Security

Position : Lead Cybersecurity & GRC | IT/OT Security

CG Semi | Sanand, Gujarat
Function: Information Technology / Cybersecurity
Reports to: CIO / Head of IT
Experience: 12 - 15+ Years
Industry: Semiconductor / OSAT / Electronics / Advanced Manufacturing

About the Role

CG Semi is looking for an experienced Lead Cybersecurity & GRC (IT/OT Security) to build and lead cybersecurity across enterprise IT, manufacturing OT, factory equipment, critical applications, cloud, infrastructure, data and third-party ecosystems.

This is a hands-on cybersecurity leadership role, with a strong focus on protecting a 247 semiconductor manufacturing environment.

The successful candidate should bring strong enterprise cybersecurity expertise combined with meaningful OT / Industrial Cybersecurity experience and the ability to establish the current security maturity, identify critical gaps, define the target state and drive a measurable 35 year cybersecurity roadmap.

Key Responsibilities :

Cybersecurity Strategy & GRC

• Assess cybersecurity maturity across IT, OT, manufacturing systems, applications, cloud, infrastructure and third parties.
• Establish the cybersecurity maturity baseline, target state, KPIs/KRIs and risk-based roadmap.
• Own cyber-risk registers, remediation plans, exception management and leadership reporting.
• Support ISO/IEC 27001 / ISMS, audit readiness, customer assessments and continuous improvement.

IT & Enterprise Cybersecurity

• Lead security across IAM, PAM, MFA, EDR, SIEM/SOC, network, endpoint, cloud, vulnerability management, application/API security, data protection and incident response.
• Define and maintain enterprise IT/OT cybersecurity architecture and security standards.
• Embed security-by-design into new applications, infrastructure, integrations and technology initiatives.

OT / Manufacturing Cybersecurity

• Build and lead the OT security program covering:
• IT/OT network segmentation
• Industrial DMZ
• OT asset visibility
• OT monitoring and threat detection
• Secure vendor remote access
• Legacy-system risk management
• OT vulnerability and patch management
• Removable-media controls
• Backup and cyber recovery
• Balance cybersecurity controls with production uptime, equipment constraints, safety and manufacturing continuity.

Semiconductor Manufacturing & Equipment Security

• Secure critical manufacturing environments, including MES, QMS/SPC/PLM, test and traceability systems, CIM/EAP, SECS/GEM, equipment integrations and host systems.
• Establish cybersecurity requirements covering equipment hardening, OS support, access control, network security, malware protection, logging, patching, firmware, vendor access and recovery.
• Apply relevant semiconductor equipment-security practices including SEMI E187 / SEMI E188.
• Partner with Manufacturing, Engineering, Automation, Equipment and IT teams to protect production-critical systems, including Siemens Opcenter MES and factory integrations.

Data, IP, Privacy & Regulatory Security

• Protect intellectual property, engineering/process data, manufacturing data, source code, customer information and other sensitive assets.
• Strengthen DLP, data classification, encryption, access controls and insider-risk management.
• Support India DPDP readiness and CERT-In cybersecurity incident reporting requirements.

Security Operations & Cyber Resilience

• Establish effective 247 IT/OT monitoring and incident response.
• Drive ransomware, OT compromise, data-breach and privileged-account response playbooks.
• Strengthen backup protection, disaster recovery, cyber recovery and restoration readiness.

Third-Party & Supply-Chain Security

• Establish security requirements for OEMs, system integrators, cloud providers, MSSPs/MDR providers and technology vendors.
• Strengthen third-party risk assessment, secure remote access, contractual cybersecurity requirements and supplier accountability.

Required Experience

• 12 - 15+ years of progressive cybersecurity experience.
• Strong experience in enterprise cybersecurity, including IAM/PAM, SOC/SIEM, network security, vulnerability management, incident response, security architecture and cyber resilience.
• Meaningful OT / Industrial Cybersecurity experience is mandatory.
• Experience securing manufacturing or industrial environments where availability and production continuity are critical.
• Experience developing cybersecurity maturity assessments, target-state architectures and multi-year security roadmaps.
• Strong experience managing cybersecurity teams, vendors, MSSPs/MDR providers and specialist partners.
• Ability to communicate cybersecurity risks and investment priorities effectively to senior management.

• Candidates with experience in one or more of the following will be strongly preferred:
• Semiconductor / OSAT / Fab / Assembly & Test
• Advanced packaging or semiconductor manufacturing
• SEMI E187 / SEMI E188
• ISA/IEC 62443
• OT network segmentation / Industrial DMZ
• Siemens Opcenter or equivalent MES
• SECS/GEM, CIM, EAP and equipment connectivity
• Manufacturing equipment cybersecurity
• Greenfield factory cybersecurity
• Ransomware resilience and OT cyber recovery
• ISO/IEC 27001 / ISMS implementation
• Data/IP protection and insider-risk programs

Preferred Certifications :

CISSP | CISM | CISA | CRISC | GICSP | ISA/IEC 62443 | ISO/IEC 27001 Lead Implementer / Lead Auditor | CCSP | GIAC

Certifications are desirable, but proven IT/OT cybersecurity leadership and manufacturing security experience will carry greater weight.

Frameworks & Standards

Exposure to relevant frameworks and standards such as:

NIST CSF | NIST OT Security | ISA/IEC 62443 | SEMI E187/E188 | ISO/IEC 27001 | CIS Controls | MITRE ATT&CK / ATT&CK for ICS | Zero Trust

Candidate Profile :

We are specifically looking for someone who can:

• Operate effectively across enterprise IT and factory OT.
• Understand the relationship between cybersecurity, manufacturing uptime and business continuity.
• Build security architecture rather than only manage compliance.
• Work credibly with MES, Automation, Equipment, Engineering, Infrastructure, Applications and business teams.
• Technically challenge OEMs, system integrators and cybersecurity partners.
• Translate complex cyber risks into clear business language.
• Lead confidently through major cybersecurity incidents.
• Build a measurable, resilient and risk-based cybersecurity operating model.

Position: Lead Cybersecurity & GRC (IT/OT Security)
Position Code: CG_IT_Sec_09
Location: Sanand, Gujarat

Interested candidates can apply through either channel:

Google Form: Apply Now :https://forms.gle/gMtr2FcyYGBoxPZZ8

Email: ta@cgsemi.murugappa.com

Email Subject: Application | Lead Cybersecurity & GRC (IT/OT Security) | CG_IT_Sec_09

Candidate Details Required ,Please share:

• Full Name
• Current Company
• Current Designation
• Current Location
• Total Experience
• Relevant Cybersecurity Experience
• OT / Industrial Cybersecurity Experience
• Semiconductor / OSAT / Manufacturing Experience
• SEMI E187 / E188 experience
• ISA/IEC 62443 experience
• ISO/IEC 27001 / ISMS experience
• Highest Qualification
• Professional Certifications
• Current Fixed CTC
• Variable / Bonus
• Expected Fixed CTC
• Notice Period / Earliest Joining Date
• Current Offers, if any
• Willingness to relocate to Sanand, Gujarat: Yes / No