Manager – Cyber Security | 7–10 Yrs | Raipur

Location: Raipur, India

Location: Head Office, Raipur (scope covers corporate offices, plants and other business locations) Reports to: Head – IT Role Purpose The Manager – Cyber Security will develop, implement and monitor cybersecurity policies, frameworks and controls to protect the organisation's IT infrastructure, business applications, networks, data and manufacturing-related digital systems. The role focuses on identifying and mitigating cyber risks, regulatory compliance, managing security incidents, strengthening access controls and building a security-conscious culture. The incumbent will work closely with IT, Information Systems, business functions, plant operations and external technology partners. Cybersecurity Governance and Risk Management

• Develop, implement and periodically review cybersecurity policies, standards, procedures and control frameworks.
• Conduct cybersecurity risk assessments, identify vulnerabilities and implement mitigation measures.
• Establish security governance mechanisms and monitor adherence to approved policies.
• Maintain a cybersecurity risk register and report significant risks to management. Network, Infrastructure and Endpoint Security
• Secure corporate networks, servers, endpoints, cloud environments and business applications.
• Implement and monitor firewalls, endpoint protection, IDS/IPS and other security solutions.
• Coordinate vulnerability assessments, penetration testing, patch management and remediation.
• Strengthen network segmentation and secure remote access to critical systems. Data Protection and Access Management
• Implement data classification, encryption, backup protection and DLP controls.
• Establish role-based access controls, privileged access management and periodic user-access reviews.
• Ensure timely provisioning, modification and revocation of access for employees, consultants and third parties.
• Protect confidential business, financial and employee information from unauthorised access or disclosure. Security Operations and Incident Response
• Monitor security alerts, investigate suspicious activity and coordinate incident response.
• Develop and maintain incident response procedures, escalation mechanisms and recovery plans.
• Coordinate root-cause analysis, corrective actions and post-incident reviews.
• Ensure backup, disaster recovery and business continuity arrangements for critical systems. Manufacturing and OT Security
• Assess cyber risks in plant networks, industrial control systems and connected manufacturing equipment.
• Work with plant IT and operations to strengthen OT security with minimal disruption to production.
• Implement controls for industrial network segmentation, remote vendor access and secure configurations.
• Protect critical production systems against malware, ransomware and unauthorised access. Compliance, Audit and Vendor Management
• Ensure adherence to cybersecurity, information security, data protection and regulatory requirements.
• Coordinate internal and external IT security audits and close observations on time.
• Evaluate cyber risks from vendors, service providers and third-party integrations.
• Maintain security documentation, audit evidence, incident records and compliance reports. Awareness and Continuous Improvement
• Run cybersecurity awareness programmes and phishing simulations.
• Develop measurable security improvement plans and track implementation.
• Evaluate emerging threats, security technologies and industry best practices.
• Prepare periodic cybersecurity dashboards and management reports. Requirements

Education: Bachelor's degree in Computer Science, IT, Cybersecurity or a related discipline. A relevant postgraduate qualification is an advantage.
Experience: 7–10 years in IT security / cybersecurity, including security operations, risk management and infrastructure security. Experience in manufacturing, industrial or multi-location organisations preferred. Certifications (advantage): CISSP, CISM, CISA, CEH, CompTIA Security+, ISO 27001 Lead Implementer / Lead Auditor or equivalent. Technical skills

• Network security, firewalls, endpoint protection / EDR, SIEM and security monitoring
• Vulnerability management, incident response, identity and access management
• Encryption, data protection and secure configuration
• Information security frameworks, cybersecurity audits, risk assessments and regulatory requirements
• Cloud security, disaster recovery, third-party risk, OT/ICS security and business continuity planning Behavioural skills
• Strong analytical, troubleshooting and risk assessment skills
• Ability to coordinate cross-functional incident response teams
• Effective communication and stakeholder management
• Strong documentation, reporting and audit management
• High integrity, confidentiality and attention to detail