Responsibilities:

Strategic Leadership:

- Develop and communicate a comprehensive information and operational technology security strategy tailored to address the specific vulnerabilities and threats identified within the organization.
- Establish clear security objectives and key performance indicators (KPIs) to measure progress and effectiveness in improving the security posture, including both IT and OT environments.

Immediate Risk Assessment and Mitigation:

- Conduct a thorough risk assessment to identify and evaluate the current security threats and vulnerabilities across both IT and OT systems.
- Prioritize and implement immediate actions to mitigate critical risks and vulnerabilities, leveraging both in-house resources and external expertise as needed, with a strong emphasis on securing OT environments.

Policy and Compliance Overhaul:

- Review and revamp existing security policies and procedures to align with industry best practices and regulatory requirements, ensuring they encompass both IT and OT security considerations.
- Develop a robust compliance framework to ensure ongoing adherence to security standards and legal obligations, including regular audits and reviews of OT systems.

Incident Response and Recovery Enhancement:

- Establish and maintain an enhanced incident response plan with transparent roles, responsibilities, and communication protocols for handling security breaches in both IT and OT domains.
- Lead efforts to investigate past breaches, understand root causes, and implement measures to prevent recurrence, particularly focusing on vulnerabilities specific to OT systems.

Security Awareness and Training:

- Implement a comprehensive security awareness and training program for all employees,



including those involved with OT systems, to foster a culture of security consciousness.
- Conduct regular training sessions and simulations to prepare staff for potential security incidents and ensure they understand their role in safeguarding both IT and OT environments.

Infrastructure and Technology Upgrades:

- Evaluate and upgrade existing IT and OT infrastructure and security technologies to address identified weaknesses and enhance overall security defenses.
- Implement advanced security measures such as multi-factor authentication, intrusion detection systems, and data encryption, ensuring they are adapted for OT systems where applicable.

Collaborative Security Culture:

- Foster collaboration across departments to integrate security considerations into all business processes and decision-making, with a focus on bridging IT and OT security practices.
- Engage with stakeholders at all levels to ensure buy-in and support for security initiatives and changes, emphasizing the importance of OT security.

Continuous Monitoring and Improvement:

- Establish a continuous monitoring program to detect and respond to security threats in real-time, covering both IT and OT systems.
- Regularly review and update security strategies and measures based on evolving threats and technological advancements, ensuring OT systems are included.

Vendor and Third-Party Security Management:

- Assess and manage the security posture of third-party vendors and partners to ensure they meet the organizations security standards, including those related to OT.
- Establish contracts and SLAs that enforce security requirements and facilitate regular security assessments of third-party interactions, particularly those involving OT systems.

📌 Head - IT & Cybersecurity (Mumbai)
🏢 PSS Global
📍 Mumbai