Manager – Cyber Security | 7–10 Yrs | Raipur

Location: Head Office, Raipur (scope covers corporate offices, plants and other business locations)
Reports to: Head – IT

Role Purpose
The Manager – Cyber Security will develop, implement and monitor cybersecurity policies, frameworks and controls to protect the organisation's IT infrastructure, business applications, networks, data and manufacturing-related digital systems. The role focuses on identifying and mitigating cyber risks, regulatory compliance, managing security incidents, strengthening access controls and building a security-conscious culture. The incumbent will work closely with IT, Information Systems, business functions, plant operations and external technology partners.

Cybersecurity Governance and Risk Management

• Develop, implement and periodically review cybersecurity policies, standards, procedures and control frameworks.
  
• Conduct cybersecurity risk assessments, identify vulnerabilities and implement mitigation measures.
  
• Establish security governance mechanisms and monitor adherence to approved policies.
  
• Maintain a cybersecurity risk register and report significant risks to management.
  

Network, Infrastructure and Endpoint Security

• Secure corporate networks, servers, endpoints, cloud environments and business applications.
  
• Implement and monitor firewalls, endpoint protection, IDS/IPS and other security solutions.
  
• Coordinate vulnerability assessments, penetration testing, patch management and remediation.
  
• Strengthen network segmentation and secure remote access to critical systems.
  

Data Protection and Access Management

• Implement data classification, encryption, backup protection and DLP controls.
  
• Establish role-based access controls, privileged access management and periodic user-access reviews.
  
• Ensure timely provisioning, modification and revocation of access for employees, consultants and third parties.
  
• Protect confidential business, financial and employee information from unauthorised access or disclosure.
  

Security Operations and Incident Response

• Monitor security alerts, investigate suspicious activity and coordinate incident response.
  
• Develop and maintain incident response procedures, escalation mechanisms and recovery plans.
  
• Coordinate root-cause analysis, corrective actions and post-incident reviews.
  
• Ensure backup, disaster recovery and business continuity arrangements for critical systems.
  

Manufacturing and OT Security

• Assess cyber risks in plant networks, industrial control systems and connected manufacturing equipment.
  
• Work with plant IT and operations to strengthen OT security with minimal disruption to production.
  
• Implement controls for industrial network segmentation, remote vendor access and secure configurations.
  
• Protect critical production systems against malware, ransomware and unauthorised access.
  

Compliance, Audit and Vendor Management

• Ensure adherence to cybersecurity, information security, data protection and regulatory requirements.
  
• Coordinate internal and external IT security audits and close observations on time.
  
• Evaluate cyber risks from vendors, service providers and third-party integrations.
  
• Maintain security documentation, audit evidence, incident records and compliance reports.
  

Awareness and Continuous Improvement

• Run cybersecurity awareness programmes and phishing simulations.
  
• Develop measurable security improvement plans and track implementation.
  
• Evaluate emerging threats, security technologies and industry best practices.
  
• Prepare periodic cybersecurity dashboards and management reports.
  

Education: Bachelor's degree in Computer Science, IT, Cybersecurity or a related discipline. A relevant postgraduate qualification is an advantage.

Experience: 7–10 years in IT security / cybersecurity, including security operations, risk management and infrastructure security. Experience in manufacturing, industrial or multi-location organisations preferred.

Certifications (advantage): CISSP, CISM, CISA, CEH, CompTIA Security+, ISO 27001 Lead Implementer / Lead Auditor or equivalent.

Technical skills

• Network security, firewalls, endpoint protection / EDR, SIEM and security monitoring
  
• Vulnerability management, incident response, identity and access management
  
• Encryption, data protection and secure configuration
  
• Information security frameworks, cybersecurity audits, risk assessments and regulatory requirements
  
• Cloud security, disaster recovery, third-party risk, OT/ICS security and business continuity planning
  

Behavioural skills

• Strong analytical, troubleshooting and risk assessment skills
  
• Ability to coordinate cross-functional incident response teams
  
• Effective communication and stakeholder management
  
• Strong documentation, reporting and audit management
  
• High integrity, confidentiality and attention to detail