Role Purpose Lead enterprise infrastructure and cybersecurity practices across Brakes India, with focus on secure, resilient and scalable technology foundations across plants and offices. The role will strengthen infrastructure reliability, cyber resilience, risk and compliance maturity, while building a robust understanding of 24x7 operations, facilities management services and multi-plant support so that broader operations responsibilities can be progressively transitioned over time.

Key Responsibilities
Strategy, Governance and Leadership
• Define and execute the infrastructure and security strategy, roadmap, operating model and investment priorities aligned with business and IS objectives.
• Lead infrastructure, cybersecurity, risk, compliance and IAM teams with clear accountability and performance measures, while progressively building ownership of service operations and site support.
• Provide executive-level reporting on service reliability, cyber posture, material risks, audit status, resilience and improvement priorities.
• Develop team capability, succession plans and a culture of ownership, disciplined execution and continuous improvement. Enterprise Infrastructure and Operational Readiness
• Own enterprise network and infrastructure services, including LAN, WAN, data centres, servers, cloud and hybrid platforms, storage, backup and end-user computing.
• Lead Microsoft 365 enterprise administration, including tenant administration, platform upkeep, collaboration services, licensing governance and administrative controls.
• Strengthen identity and access management as a critical capability, including Entra ID, access governance, privileged access, role-based access controls and periodic access reviews.
• Oversee endpoint administration, device governance and associated endpoint security management across plants and offices.
• Build operational readiness for facilities management services and 24x7 support, including monitoring, incident triage, escalation, site support and guidance to local IT coordinators.
• Drive lifecycle management, capacity planning, modernisation, standardisation, automation, cost optimisation and service management disciplines. Cybersecurity and Resilience
• Define and execute the enterprise cybersecurity roadmap across IT, OT, endpoints, identity, networks, perimeter controls, cloud, applications, data and AI environments.
• Govern SOC operations, threat monitoring, incident response, vulnerability management, patch governance, firewall and perimeter security controls, external attack-surface monitoring and remediation.
• Own cyber incident and crisis playbooks, disaster recovery strategy, backup and recovery controls, resilience drills and business continuity readiness.




• Embed security by design into technology architecture, digital programmes, manufacturing systems, cloud adoption and third-party services.
• Drive sustained maturity of security and infrastructure practices through continuous assessment, improvement roadmaps, control enhancement and adaptation to the evolving threat, compliance and technology landscape. Risk, Compliance and Assurance
• Own the Information Security Management System (ISMS), enterprise technology risk register, control framework, policies, standards and evidence-based assurance.
• Maintain enterprise security, infrastructure and IT governance policies, standards and acceptable-use terms, ensuring timely review, approval, communication and formal sign-off.
• Lead TISAX readiness, assessments, closure of findings, label maintenance and ongoing alignment with automotive customer security expectations.
• Oversee ITGC, internal and external audits, statutory and customer assessments, non-conformity closure and sustained control effectiveness, ensuring we are always steadfast in internal and external security and compliance commitments.
• Govern third-party technology risk, security due diligence, contractual controls, licences, renewals and managed-service compliance. Application, OWASP and AI Security
• Establish secure software development and application security practices aligned with OWASP principles, including threat modelling, secure design and code review, SAST/DAST, penetration testing and vulnerability remediation.
• Guide teams on OWASP Top 10, API security, authentication, session management, secrets management and protection of internet-facing applications.
• Define security practices for AI, Generative AI and agentic solutions, including data protection, identity and permissions, prompt-injection defence, model and supply-chain risk, logging, monitoring, human oversight and secure integration with enterprise systems.
• Assess AI vendors, models and solutions for security, privacy, data residency, access, auditability and operational resilience before deployment. Candidate Profile Experience
• 20+ years of progressive experience across enterprise infrastructure, cybersecurity, IT operations, risk or compliance, including leadership of multi-disciplinary teams.
• Demonstrated experience in a multi-site manufacturing, automotive,



engineering or similarly complex operational environment, with appreciation of plant-level IT support and local coordinator models.
• Hands-on strength in enterprise networks, hybrid cloud, Microsoft 365 administration, Entra ID / identity and access management, endpoint administration, SOC operations, service management, disaster recovery, vendor governance and 24x7 support models.
• Experience with TISAX implementation, assessment and sustained compliance.
• Demonstrated strength in application security, OWASP practices and security assessment of modern web, API and cloud-native solutions.
• Practical experience leading or contributing to ISO/IEC 27001 certification is a bonus.
• Working knowledge of AI security and governance for Generative AI, enterprise copilots and agentic AI solutions. Qualifications and Certifications
• Bachelor's degree in Computer Science, Information Technology, Electronics, Engineering or a related discipline; a relevant postgraduate qualification is preferred.
• Preferred certifications include CISSP or CISM; CISA, ITIL, CCSP, TOGAF, and relevant advanced cloud, network or infrastructure architecture certifications are advantageous. Leadership Attributes
• Business-oriented technology leadership with strong judgement, structured problem solving and risk-based decision making.
• Ability to balance operational reliability, security, compliance, cost and transformation priorities.
• Clear executive communication, stakeholder influence and the ability to lead during incidents and periods of ambiguity.
• Strong ownership, integrity, customer focus, collaboration and people-development capability. Key Measures of Success
• Availability, resilience and progressive maturity of critical infrastructure and security services; readiness to support broader operations transition over time.
• Timely detection, containment and remediation of cyber threats, incidents and high-risk vulnerabilities.
• Sustained TISAX, ITGC and customer-assessment readiness with timely closure of findings.
• Effective Microsoft 365 platform administration, IAM and privileged-access governance, endpoint administration, third-party risk governance and licence compliance.
• Delivery of modernisation and resilience priorities within approved budgets and measurable vendor SLAs.
• Growth in team capability, automation, operational discipline and stakeholder satisfaction. What the Role Offers An enterprise leadership role at the intersection of infrastructure, cybersecurity, compliance and digital transformation, with the opportunity to build deep understanding of multi-location operational support and progressively take on broader technology operations responsibilities.

📌 Lead - Infrastructure and Security (Chennai)
🏢 Brakes India
📍 Chennai