Job Description

Role: Cybersecurity Lead

Reporting To: Chief Information Officer (CIO)

Role Purpose
The Cyber Security Lead is responsible for defining and executing the enterprise cybersecurity strategy to protect the organization's IT systems, operational technology (OT), cloud infrastructure, engineering tools, and enterprise applications.

The role will ensure security across platforms including SAP ERP, CRM systems, engineering design tools, project management platforms, O&M; systems, and hybrid cloud environments, while enabling secure digital transformation across the company's IT infrastructure

Work closely with CIO, Business Leaders, IT Infrastructure and application teams to ensure cyber resilience, regulatory compliance, and secure operations

Key Responsibilities

Enterprise Cyber Security Strategy:

- Define and implement a comprehensive enterprise cyber security strategy aligned with business growth and digital transformation initiatives including IT and Security processes and policies

- Establish security frameworks aligned with ISO 27001, IT Act, DPDP, and IEC 62443 for OT security.

- Lead and ensure solid security governance across enterprise application such SAP ERP, CRM, Project management platforms and Operation and Maintenance system.

Digital Transformation Security

Enable secure digital IT infrastructure across the organization.

- Secure data analytics and AI platforms
- Support secure automation initiatives across finance, procurement, and operations
- Enable secure digital platforms supporting renewable energy operations and project execution.

Hybrid Cloud & Infrastructure Security

Ensure robust security across hybrid cloud and enterprise infrastructure.





- Implement cloud security frameworks for public and private cloud environments
- Secure APIs, integrations, and digital platforms
- Implement Zero Trust architecture
- Strengthen endpoint protection, network security, and remote access security

Cyber Security Tools & Technology Implementation

- Lead implementation and governance of enterprise cybersecurity tools across network, endpoint, cloud, and data environments to protect corporate, project, and plant operations.

- Deploy and operate Endpoint Protection / EDR-XDR solutions to safeguard laptops, servers, and engineering workstations from malware, ransomware, and advanced threats.
- Establish Secure Web Gateway / Web Proxy solutions to protect users from malicious websites, phishing attacks, and unauthorized data access.
- Lead implementation of Zero Trust Network Access (ZTNA) to enable secure access to enterprise applications such as SAP, CRM, engineering tools, and project systems for distributed workforce and project teams.
- Ensure integration of all cybersecurity tools with SOC, SIEM, and threat monitoring platforms for real-time threat detection and incident response.

Digital Personal Data Protection (DPDP) Compliance

- Lead enterprise-wide initiatives to ensure compliance with Indias Digital Personal Data Protection Act.
- Implement enterprise data protection and privacy governance frameworks




- Define policies for personal data collection, processing, storage, and retention
- Implement Data Loss Prevention (DLP), encryption, and data classification frameworks
- Manage data breach response and regulatory reporting
- Ensure third-party vendors handling personal data comply with DPDP requirements.

Employee Cyber Security Awareness & Training•

- Lead enterprise-wide cyber security awareness and training programs to educate employees, contractors, and project teams on cyber risks and safe IT & digital Infrastructure
- Conduct regular phishing simulations, security training, and awareness campaigns to strengthen employee readiness against cyber threats and social engineering attacks.
- Promote a cyber-aware culture across corporate offices, regional office, project sites, ensuring responsible use of enterprise systems and protection of digital assets.

Risk Management & Compliance

- Establish enterprise cyber risk management framework.
- Conduct regular security audits, vulnerability assessments, and penetration testing.
- Ensure compliance with global security standards and regulatory frameworks.
- Lead internal and external IT and Security audit and ensure full compliance to processes and policies

Qualification & Certifications

- B.Tech / BE / MCA in Computer Science / IT / Cyber Security.
- Preferred certifications: CISSP, CISA and ISO27001 Lead Auditor Experience
- 12+ years of experience in cyber security, information security, or enterprise security leadership roles.
- Experience in EPC, infrastructure, energy, manufacturing, or industrial environments preferred.
- Experience securing enterprise applications, hybrid cloud, and OT environments.

📌 Cyber Security Lead (Mumbai)
🏢 Sterling and Wilson Renewable Energy
📍 Mumbai