Manager - Cyber Security

Role & responsibilities

The Manager - Cyber Security will be responsible for developing, implementing, and monitoring cybersecurity policies, frameworks, and controls to protect the organization's IT infrastructure, business applications, networks, data, and manufacturing-related digital systems. The role will focus on identifying and mitigating cyber risks, ensuring compliance with applicable regulatory requirements, managing security incidents, strengthening access controls, and promoting a security-conscious culture across the organization.

The incumbent will work closely with IT, Information Systems, business functions, plant operations, and external technology partners to ensure business continuity, data confidentiality, system integrity, and the secure functioning of critical business operations.

Cybersecurity Governance and Risk Management

• Develop, implement, and periodically review cybersecurity policies, standards, procedures, and control frameworks.
• Conduct cybersecurity risk assessments, identify vulnerabilities, and implement appropriate mitigation measures.
• Establish security governance mechanisms and monitor adherence to approved policies.
• Maintain a cybersecurity risk register and report significant risks to management.

Network, Infrastructure and Endpoint Security

• Ensure the security of corporate networks, servers, endpoints, cloud environments, and business applications.
• Implement and monitor firewalls, endpoint protection, intrusion detection/prevention systems, and other security solutions.
• Coordinate vulnerability assessments, penetration testing, patch management, and remediation activities.
• Strengthen network segmentation and secure remote access to critical systems.

Data Protection and Access Management

• Implement appropriate data classification, encryption, backup protection, and data-loss prevention controls.
• Establish role-based access controls, privileged access management, and periodic user-access reviews.
• Ensure timely provisioning, modification, and revocation of access for employees, consultants, and third parties.
• Protect confidential business information, financial data, employee records, and other sensitive information from unauthorised access or disclosure.

Security Operations and Incident Response

• Monitor security alerts, investigate suspicious activities, and coordinate responses to cybersecurity incidents.
• Develop and maintain incident response procedures, escalation mechanisms, and recovery plans.
• Coordinate root-cause analysis, corrective actions, and post-incident reviews.
• Ensure appropriate backup, disaster recovery, and business continuity arrangements for critical systems

Preferred candidate profile

Technical Skills

• Strong understanding of cybersecurity principles, network architecture, operating systems, and enterprise IT infrastructure.
• Hands-on knowledge of security monitoring tools, SIEM solutions, endpoint detection and response, vulnerability management, and access management.
• Understanding of encryption, data protection, secure configuration, and incident response methodologies.
• Awareness of industrial control systems and operational technology security in manufacturing environments.