Role & responsibilities

• Develop and execute the Group's Information Security and Cybersecurity strategy.

• Lead and manage the Information Security Management System (ISMS) across the organization.

• Plan, coordinate, and ensure successful completion of ISO 27001, TISAX, customer, and internal security audits.

• Monitor cybersecurity threats, security incidents, vulnerabilities, and cyber-attack attempts, implementing proactive preventive measures.

• Ensure the confidentiality, integrity, and availability of enterprise information assets.

• Oversee enterprise firewall, network security, VPN, endpoint security, data center, and cloud security operations.

• Ensure secure and reliable connectivity across corporate offices, manufacturing plants, branches, and remote users.

• Lead cyber risk assessments, vulnerability management, penetration testing, and incident response activities.

• Establish security policies, standards, and governance frameworks aligned with business objectives.





• Evaluate and implement recent cybersecurity technologies and best practices.

• Coordinate with ISPs, OEMs, cybersecurity vendors, and service providers while optimizing costs and service quality.

• Prepare and manage cybersecurity and IT infrastructure budgets.

• Lead, mentor, recruit, and develop the cybersecurity and infrastructure teams.

• Conduct periodic plant and branch visits to review IT infrastructure, security controls, and network availability.

• Drive cybersecurity awareness programs and promote a security-first culture across the organization.

Collaborate with business leaders and participate in Management Review Meetings (MRM) to support business and digital transformation initiatives

Requirements
Preferred Certifications

• CISSP

• CISM

• ISO/IEC 27001 Lead Implementer/Lead Auditor

• CEH

• CCSP

• CompTIA Security+

• Fortinet, Palo Alto, Cisco Security, or equivalent certifications.

📌 CISO (India)
🏢 Roots Group of Companies
📍 India