Role & responsibilities

The successful candidate shall be responsible for the following across multiple Business Units within PSA India:

- Lead and support cybersecurity?governance, risk management, and compliance programs, including IT security operations and risk assessments, to protect PSA Indias systems, business applications, and data against cyber threats.
- Develop, implement, and enforce cybersecurity policies, standards, and guidelines for?both IT and OT security environments?across all BUs.
- Strengthen cybersecurity readiness and resilience of the BUs by developing and managing a suite of security tools and services, e.g., vulnerability management systems, phishing exercises, red-teaming, bug bounty programs, etc.
- Work closely with?each BUs IT and business leadership?to understand unique risks and tailor cybersecurity controls accordingly.
- Work with Regional IT and BU IT to enhance cyber awareness capabilities via awareness tools, phishing training, cybersecurity circulars, and table-top exercises.
- Provide guidance, procedures, and control frameworks for cybersecurity matters across BUs.
- Track and report progress of cybersecurity initiatives, projects, and key risk indicators (KRIs) / key performance indicators (KPIs)?at BU level and consolidated level.
- Perform regular security assessments, gap analyses, and improvement planning based on compliance requirements?for each BU.
- Handle security incidents, including detection, response, resolution, and forensic investigation,?coordinating across BUs.




- Review system design (network design and application architecture) to identify IT security risks and recommend mitigation measures.
- Keep updated with the evolving information/cybersecurity landscape, regulations, and industry standards.

Skills and Experience

The successful candidate shall have some or all of the following skills and experiences:

- Degree (BSc or B.Tech) in Computer Science, Information Security, or a related field.
- At least 2 years of relevant experience in IT security, with solid focus on GRC and managing cybersecurity across multiple business units or locations.
- At least 1 year of system administration and/or network domains.
- Strong knowledge of industry best practices and frameworks pertaining to IT Controls, including ISO 27001/2, PCI-DSS, NIST, SOC2, etc.
- Understand infrastructure components and services of both on-premises and commercial cloud environments, such as AWS and Azure.
- Experience in supporting IT security incidents, security testing, and security operations.
- Proven ability to work with multiple business units, understand diverse risk profiles, and communicate cybersecurity requirements effectively to non-technical stakeholders.
- A cohesive, effective team player and communicator with a positive and eager-to-learn attitude.

Preferred candidate profile

- Good understanding of?OT security standards?(e.g., IEC 62443)
- CompTIA Security+,?CEH,?ISO 27001 Lead Implementer/Auditor, or equivalent.

📌 Cyber Security Engineer (Mumbai)
🏢 Bharat Mumbai Container Terminals
📍 Mumbai