: Head - Internal Corporate Cyber Secuirty Location: Bengaluru, India Function: Cybersecurity Services, MCDC, DFIR, GRC &

- AI Security Platforms Role Summary We are seeking a senior cybersecurity leader to head internal corporate cybersecurity, including our MCDC (Managed Cyber Defense Center) operating as an internal enterprise security function. The role is responsible for protecting our people, data, infrastructure, applications, cloud, and AI ecosystem across global locations. The incumbent will lead enterprise security operations, digital forensics & incident response, GRC, security architecture, and AI governance, with accountability for risk reduction, regulatory compliance, and resilience of our organization's workplace. Key Responsibilities1.

Enterprise Cybersecurity

Strategy &

- Governance Define and execute the internal cybersecurity strategy and roadmap aligned to business priorities and global regulatory expectations Establish enterprise security policies, standards, and control frameworks Drive Zero Trust, secure access, cloud security, identity governance, and AI security strategies for the corporate environment Act as trusted advisor to CRO/CISO and executive leadership on cyber risk posture, investments, and exceptions3.

Digital

Forensics &

- Incident Response Define forensic readiness frameworks and chain-of-custody protocols aligned to legal, HR, and regulatory expectations Build and maintain incident response playbooks for ransomware, APTs, insider threats, data breaches, and cloud-native attacks Integrate endpoint, network, identity, and cloud telemetry into unified forensic workflows Drive automation of DFIR tasks using orchestration, LLMs, and agents Automated evidence collection Triage and timeline reconstruction IOC enrichment and correlation Lead major internal incident investigations, coordinating with Legal, HR, IT, Compliance, regulators, and law enforcement as needed4.

Security

Architecture &





- Engineering Lead design and implementation of enterprise security architecture, including: Zero Trust architecture Cloud &
- Saa S security (cloud posture management, workload protection, secure access Endpoint protection and detection Email and collaboration security Vulnerability and exposure management Backup, recovery, and cyber resilience Identity &
- Access Management (IAM, PAM)Data protection and DLPEnsure secure-by-design principles are embedded across internal IT, engineering, and delivery platforms.5. Enterprise GRC, Risk &
- Compliance Establish and govern internal cyber risk management frameworks aligned to: ISO 27001 ISO/IEC 42001 (AI Management Systems)NIST CSF / NIST AI RMF / NIST SP 800-86 (Forensics)GDPR, EU AI Act, India DPDP Act PCI DSS, SOC 26. AI Governance &
- Secure AI Adoption Lead secure adoption of enterprise AI platforms and generative AI tools across the organization.

Define controls for: Data protection (no training on enterprise data, DLP, audit logs)Access governance and license provisioning Contractual safeguards and exemption tracking Embed ISO/IEC 42001 AI governance principles into the internal AI lifecycle.7.

Cyber

Insurance, Audit &

- Regulatory Interface Own internal cyber insurance readiness and control validation.

Interfacewith: External auditors Regulators Internal audit & compliance Coordinate with Finance (cyber insurance), Legal (contracts), HR (insider risk), and IT (operations) for cross-functional risk management.8.

Network

Security &





- Advanced Threat Defense Drive deep technical capabilities for: Network detection & response Packet inspection and protocol analysis Network forensics and traffic monitoring Strengthen perimeter, internal segmentation, and east-west traffic visibility.10.

Program

Governance &

- Multi-Vendor Assurance Lead complex, multi-vendor security programs under stringent timelines and regulatory expectations Drive: Requirements decomposition Interface control V&V; strategy Multi-vendor / third-party risk management11. Team Build-out &
- Leadership Build, lead, and scale a global, multi-disciplinary internal cybersecurity team across: MCDC / SOCoperations DFIR and threat hunting Security engineering & architecture GRC, compliance &
- AI governance Establish a high-performance, risk-aware culture with continuous capability building (certifications, red/blue/purple teaming, SOC & forensic automation).

Required

Experience20+ years of leadership across enterprise cybersecurity operations, risk & compliance, AI-powered security platforms, digital forensics, and critical-infrastructureprotection. Proven experience in building and leading internal Global SOC / Cyber Defense Center capabilities - operating model, tooling, team, and processes. Strong background in GRC & controlassurance.

Demonstrated experience in AI-first security platforms and AI governance (ISO 42001, AI RMF). Hands-on background in network security, traffic monitoring, and network forensics.

Experience with risk data aggregation and executive reporting infrastructure at large enterprise scale. Exposure to safety-critical, regulated environments (defense, aerospace, BFSI) with multi-vendor program governance.

Preferred

Education &

- Credentials M. Tech in Computer Science/ AI or equivalent Professional development in: Product Ownership ISO 27001 - Information Security Management ISO 42001 - AI Management Systems

📌 Vp - Internal Cyber Security Defence (Assam)
🏢 Spot Your Leaders u0026 Consulting
📍 Assam