Job Description: Head - Internal Corporate Cyber Secuirty
Location: Bengaluru, India
Function: Cybersecurity Services, MCDC, DFIR, GRC & AI Security Platforms

Role Summary
We are seeking a senior cybersecurity leader to head internal corporate cybersecurit y, including ou r MCDC (Managed Cyber Defense Center ) operating as an internal enterprise security functio n. The role is responsible for protecting our people, data, infrastructure, applications, cloud, and AI ecosyste m across global locations. The incumbent will lead enterprise security operations, digital forensics & incident response, GRC, security architecture, and AI governanc e, with accountability for risk reduction, regulatory compliance, and resilienc e of our organization's environment .

Key Responsibilities
1. Enterprise Cybersecurity Strategy & Governance
Define and execute th e internal cybersecurity strategy and roadm ap aligned to business priorities and global regulatory expectations
Establish enterpris e security policies, standards, and control framewor ks
Driv e Zero Trust, secure access, cloud security, identity governance, and AI securi ty strategies for the corporate environment
Act a s trusted advisor to CRO/CISO and executive leadersh ip on cyber risk posture, investments, and exceptions

3. Digital Forensics & Incident Response
Defi ne forensic readiness framewo rks a nd chain-of-custody protoc ols aligned to legal, HR, and regulatory expectations
Build and mainta in incident response playbo oks for ransomware, APTs, insider threats, data breaches, and cloud-native attacks
Integra te endpoint, network, identity, and cloud teleme try into unified forensic workflows
Dri ve automation of DFIR ta sks using orchestration, LLMs, and agents
Automated evidence collection
Triage and timeline reconstruction
IOC enrichment and correlation
Le ad major internal incident investigati ons, coordinating wi th Legal, HR, IT, Compliance, regulators, and law enforcem ent as needed

4.



Security Architecture & Engineering
Lead design and implementation of enterprise security architec ture, including:
Zero Trust architecture
Cloud & SaaS security (cloud posture management, workload protection, secure access
Endpoint protection and detection
Email and collaboration security
Vulnerability and exposure management
Backup, recovery, and cyber resilience
Identity & Access Management (IAM, PAM)
Data protection and DLP
Ensure secure-by-design principles are embedded across internal IT, engineering, and delivery platforms.

5. Enterprise GRC, Risk & Compliance
Establish and govern inte rnal cyber risk management frame works aligned to:
ISO 27001
ISO/IEC 42001 (AI Management Systems)
NIST CSF / NIST AI RMF / NIST SP 800-86 (Forensics)
GDPR, EU AI Act, India DPDP Act
PCI DSS, SOC 2

6. AI Governance & Secure AI Adoption
Lead secure adoption of enterprise AI platforms and generative AI tools across the organization.
Define controls for:
Data protection (no training on enterprise data, DLP, audit logs)
Access governance and license provisioning
Contractual safeguards and exemption tracking
Embed ISO/IEC 42001 AI governance prin ciples into the internal AI lifecycle.

7. Cyber Insurance, Audit & Regulatory Interface
Own in ternal cyber insurance re adiness and control validation.
Interfacewith:
External auditors
Regulators
Internal audit & compliance
Coordinat e with Finance (cyber insurance), Legal (contracts), HR (insider risk), and IT (oper ations) for cross-functional risk management.

8. Network Security & Advanced Threat




DefenseDrive deep technical capabilities for:
Network detection & response
Packet inspection and protocol analysis
Network forensics and traffic mo nitoring
Strengthen perimeter, internal segmentation, and east-west traffic visibility.

10. Program Governance & Multi-Vendor
Assur anceLead complex, multi-vendor security programs under stringent timelines and regulatory expectations
Drive:Requirements decomposition
Interface control
V&V; strategy
Multi-vendor / third-party risk management

11. Team Build-out & Leadership
Build, lead, an d scale a global, multi-disciplinary internal cybersec urity team across:
MCDC / SOC
operationsDFIR and threat hunting
Security engineering & architecture
GRC, compliance & AI governance
Establish a high-performance, risk-awa re culture with continuous capability building (certifications, red/blue/purple teaming, SOC & forensic automation).

Required
Experience20+ years of leadership across enterprise cybersecurity operations, risk & compliance, AI-powered security platforms, digital forensics, and critical-infrastructure
protection. Proven exp erience in building and leading internal Global SOC / Cyber Defense Center c apabilities — operating model, tooling, team, and processes.
Robust bac kground in GRC & control
assurance. Demonstrated exp erience in AI-first security platforms and AI governance (ISO 42001, AI RMF).
Hands-on bac kground in network security, traffic monitoring, and networ k forensics.
Exper ience with risk data aggregation and executive reporting inf rastructure at large enterprise scale.
E xposure to safety-critical, regulated e nvironments (defense, aerospace, BFSI) with multi-vendor program governance.

Preferred Education & Credentials
M.Tech in Computer Science/ AI or equivalent
Professional development in:
Product Ownership
ISO 27001 — Information Security Management
ISO 42001 — AI Management Systems

📌 VP - Internal Cyber Security Defence (Vasanth Nagar)
🏢 Spot Your Leadersnsulting
📍 Vasanth Nagar