Location: Head Office, Raipur (scope covers corporate offices, plants and other business locations)
Reports to: Head – IT

Role Purpose
The Manager – Cyber Security will develop, implement and monitor cybersecurity policies, frameworks and controls to protect the organisation's IT infrastructure, business applications, networks, data and manufacturing-related digital systems. The role focuses on identifying and mitigating cyber risks, regulatory compliance, managing security incidents, strengthening access controls and building a security-conscious culture. The incumbent will work closely with IT, Information Systems, business functions, plant operations and external technology partners.

Cybersecurity Governance and Risk Management

- Develop, implement and periodically review cybersecurity policies, standards, procedures and control frameworks.

- Conduct cybersecurity risk assessments, identify vulnerabilities and implement mitigation measures.

- Establish security governance mechanisms and monitor adherence to approved policies.

- Maintain a cybersecurity risk register and report significant risks to management.

Network, Infrastructure and Endpoint Security

- Secure corporate networks, servers, endpoints, cloud environments and business applications.

- Implement and monitor firewalls, endpoint protection, IDS/IPS and other security solutions.

- Coordinate vulnerability assessments, penetration testing, patch management and remediation.

- Strengthen network segmentation and secure remote access to critical systems.

Data Protection and Access Management

- Implement data classification, encryption, backup protection and DLP controls.

- Establish role-based access controls, privileged access management and periodic user-access reviews.

- Ensure timely provisioning,



modification and revocation of access for employees, consultants and third parties.

- Protect confidential business, financial and employee information from unauthorised access or disclosure.

Security Operations and Incident Response

- Monitor security alerts, investigate suspicious activity and coordinate incident response.

- Develop and maintain incident response procedures, escalation mechanisms and recovery plans.

- Coordinate root-cause analysis, corrective actions and post-incident reviews.

- Ensure backup, disaster recovery and business continuity arrangements for critical systems.

Manufacturing and OT Security

- Assess cyber risks in plant networks, industrial control systems and connected manufacturing equipment.

- Work with plant IT and operations to strengthen OT security with minimal disruption to production.

- Implement controls for industrial network segmentation, remote vendor access and secure configurations.

- Protect critical production systems against malware, ransomware and unauthorised access.

Compliance, Audit and Vendor Management

- Ensure adherence to cybersecurity, information security, data protection and regulatory requirements.

- Coordinate internal and external IT security audits and close observations on time.

- Evaluate cyber risks from vendors, service providers and third-party integrations.





- Maintain security documentation, audit evidence, incident records and compliance reports.

Awareness and Continuous Improvement

- Run cybersecurity awareness programmes and phishing simulations.

- Develop measurable security improvement plans and track implementation.

- Evaluate emerging threats, security technologies and industry best practices.

- Prepare periodic cybersecurity dashboards and management reports.

Requirements

Education: Bachelor's degree in Computer Science, IT, Cybersecurity or a related discipline. A relevant postgraduate qualification is an advantage.

Experience: 7–10 years in IT security / cybersecurity, including security operations, risk management and infrastructure security. Experience in manufacturing, industrial or multi-location organisations preferred.

Certifications (advantage): CISSP, CISM, CISA, CEH, CompTIA Security+, ISO 27001 Lead Implementer / Lead Auditor or equivalent.

Technical skills

- Network security, firewalls, endpoint protection / EDR, SIEM and security monitoring

- Vulnerability management, incident response, identity and access management

- Encryption, data protection and secure configuration

- Information security frameworks, cybersecurity audits, risk assessments and regulatory requirements

- Cloud security, disaster recovery, third-party risk, OT/ICS security and business continuity planning

Behavioural skills

- Robust analytical, troubleshooting and risk assessment skills

- Ability to coordinate cross-functional incident response teams

- Effective communication and stakeholder management

- Strong documentation, reporting and audit management

- High integrity, confidentiality and attention to detail

📌 Manager – Cyber Security | 7–10 Yrs | Raipur (India)
🏢 N Human Resources & Management Systems
📍 India