Lead - Cybersecurity Cybersecurity Strategy, Governance &

- Compliance Develop, implement, and continuously enhance cybersecurity policies, standards, frameworks, and operational procedures across the business. Establish cybersecurity governance mechanisms and drive periodic cybersecurity performance reviews with business leadership. Define cyber KPIs, KRIs, scorecards, and reporting frameworks. Ensure compliance with cybersecurity regulations, customer requirements, contractual obligations, and industry standards. Maintain cyber risk registers and monitor closure of identified risks and audit observations.

Cyber

Hygiene &

- Technology Controls Govern and continuously improve cyber hygiene controls across all operational sites. Ensure effective Identity &
- Access Management (IAM), Privileged Access Management (PAM), Multi-Factor Authentication (MFA), and user access governance. Drive endpoint security, anti-virus management, security patch deployment, and operating system/application security updates. Manage backup infrastructure, restoration testing, and cyber recovery controls. Ensure OEM-supported security configurations and technology lifecycle compliance across critical systems.

Operational

Technology (OT) Security Develop and implement cybersecurity controls for Operational Technology environments including BMS, DCIM, IBMS, EPMS, CCTV, Access Control Systems, PLCs, and Building Automation Systems. Ensure secure integration and segregation of IT and OT networks. Lead OT vulnerability assessments, security audits, and remediation programs. Collaborate with Operations, Engineering, and OEM partners to strengthen resilience of mission-critical operational systems. Network &

- Endpoint Security Manage enterprise and data center network security architecture. Govern firewalls, IDS/IPS, NAC, VPNs, secure remote access, network segmentation, and threat detection controls. Implement and manage Endpoint Detection &
- Response (EDR/XDR) solutions. Continuously monitor network and endpoint security posture and drive corrective actions.

Cybersecurity Incident

Response &

- Crisis Management Lead cybersecurity incident detection, investigation, containment, eradication, and recovery activities. Develop and maintain incident response plans, cyber playbooks, escalation matrices, and response procedures. Conduct root cause analysis and implement preventive and corrective actions. Coordinate with leadership, OEMs, customers, service providers,



and regulatory agencies during cybersecurity incidents. Conduct cyber crisis simulations, tabletop exercises, and business continuity testing.

Cyber Risk

Management &

- Vulnerability Management Conduct periodic cyber risk assessments for infrastructure, applications, networks, OT systems, and critical business processes. Lead vulnerability assessments, penetration testing, security reviews, and threat exposure assessments. Prioritize and drive remediation of identified vulnerabilities within defined timelines. Monitor emerging cyber threats and ensure timely mitigation of associated risks.

Cybersecurity

Solutions &

- Technology Deployment Evaluate, recommend, and implement cybersecurity technologies aligned with business and operational requirements. Drive deployment and lifecycle management of SIEM, SOAR, PAM, EDR/XDR, threat intelligence, vulnerability management, and other cybersecurity platforms. Collaborate with digital, automation, infrastructure, and project teams for integration of secure technologies.

Cybersecurity

Audits &

- Assurance Lead internal and external cybersecurity audits, assessments, certifications, and customer security reviews. Ensure readiness and compliance with standards such as ISO 27001, NIST Cybersecurity Framework, CIS Controls, and other relevant industry practices. Maintain cybersecurity documentation, evidence repositories, and compliance records. Vendor &
- Third-Party Cyber Risk Management Conduct cybersecurity assessments of OEMs, contractors, managed service providers, consultants, and third-party vendors. Review cybersecurity controls and contractual compliance of suppliers and service providers. Ensure remediation and mitigation of identified third-party cyber risks. Embed cybersecurity requirements into procurement, contracting, and vendor management processes.

Cybersecurity

Awareness &

- Capability Building Develop and implement cybersecurity awareness programs across operational data centers. Conduct periodic employee awareness campaigns, phishing simulations, training sessions, and security workshops.



Build cybersecurity competency within operations, engineering, facility management, and support functions. Promote a strong cyber-aware culture across the organization. ESG, Sustainability &
- Workplace Safety Demonstrate active commitment to AdaniConneX's Environmental, Social &
- Governance (ESG) objectives and sustainability agenda. Promote environmentally responsible management of IT and electronic assets, including e-waste disposal and sustainable technology practices. Comply with all applicable Environment, Health &
- Safety (EHS) policies, procedures, and statutory requirements. Participate in safety audits, emergency response drills, incident investigations, and risk mitigation initiatives. Ensure safe working practices while executing cybersecurity projects and operational activities at data center facilities. Ensure vendors, contractors, and OEM representatives comply with site safety, environmental, security, and governance requirements.

Key Internal Stakeholders Group Chief Information

Security Officer Head – Operations Information Technology team Engineering &

- Projects Teams Digital &
- Automation Teams Facility Management Teams Risk &
- Compliance Teams Procurement Teams Physical Security Teams Business Leadership Team Key External Stakeholders OEM & technology Partners and cybersecurity consultants Clients Managed Security Service Providers Audit Agencies Regulatory Authorities Educational Qualification Bachelor or master’s degree in computer science, Information Technology, Electronics, Cybersecurity, Engineering, or related discipline.

Qualified

Certifications (Preferred) CISSP CISM CISA CEH CCSP ISO 27001 Lead Implementer / Lead Auditor GIAC Certifications GICSP (OT Security) Microsoft Security Certifications Cisco / Palo Alto Security Certifications Key Competencies Functional Competencies Cybersecurity Governance OT Security Network Security Architecture Endpoint Security Incident Response &

- Crisis Management Cyber Risk Management Vulnerability Management Security Operations Third-Party Risk Management Regulatory Compliance &
- Audits Business Continuity &
- Cyber Resilience Behavioral Competencies Strategic Thinking Leadership &
- Team Development Stakeholder Management Analytical Problem Solving Risk-Based Decision Making Communication &
- Influencing Skills Customer Orientation Continuous Improvement Mindset Experience Level Senior Level

📌 Cybersecurity Lead (Mumbai)
🏢 Adani Enterprises
📍 Mumbai