Position : Lead Cybersecurity & GRC | IT/OT Security

CG Semi | Sanand, Gujarat

Function: Information Technology / Cybersecurity

Reports to: CIO / Head of IT

Experience: 12 - 15+ Years

Industry: Semiconductor / OSAT / Electronics / Advanced Manufacturing

About the Role

CG Semi is looking for an experienced Lead Cybersecurity & GRC (IT/OT Security) to build and lead cybersecurity across enterprise IT, manufacturing OT, factory equipment, critical applications, cloud, infrastructure, data and third-party ecosystems.

This is a hands-on cybersecurity leadership role, with a strong focus on protecting a 247 semiconductor manufacturing environment.

The successful candidate should bring strong enterprise cybersecurity expertise combined with meaningful OT / Industrial Cybersecurity experience and the ability to establish the current security maturity, identify critical gaps, define the target state and drive a measurable 35 year cybersecurity roadmap.

Key Responsibilities :

Cybersecurity Strategy & GRC

- Assess cybersecurity maturity across IT, OT, manufacturing systems, applications, cloud, infrastructure and third parties.
- Establish the cybersecurity maturity baseline, target state, KPIs/KRIs and risk-based roadmap.
- Own cyber-risk registers, remediation plans, exception management and leadership reporting.
- Support ISO/IEC 27001 / ISMS, audit readiness, customer assessments and continuous improvement.

IT & Enterprise Cybersecurity

- Lead security across IAM, PAM, MFA, EDR, SIEM/SOC, network, endpoint, cloud, vulnerability management, application/API security, data protection and incident response.
- Define and maintain enterprise IT/OT cybersecurity architecture and security standards.
- Embed security-by-design into new applications, infrastructure, integrations and technology initiatives.

OT / Manufacturing Cybersecurity

- Build and lead the OT security program covering:

- IT/OT network segmentation

- Industrial DMZ

- OT asset visibility
- OT monitoring and threat detection

- Secure vendor remote access
- Legacy-system risk management
- OT vulnerability and patch management
- Removable-media controls

- Backup and cyber recovery
- Balance cybersecurity controls with production uptime, equipment constraints, safety and manufacturing continuity.

Semiconductor Manufacturing & Equipment Security

- Secure critical manufacturing environments, including MES, QMS/SPC/PLM, test and traceability systems, CIM/EAP, SECS/GEM, equipment integrations and host systems.
- Establish cybersecurity requirements covering equipment hardening, OS support, access control, network security,



malware protection, logging, patching, firmware, vendor access and recovery.
- Apply relevant semiconductor equipment-security practices including SEMI E187 / SEMI E188.
- Partner with Manufacturing, Engineering, Automation, Equipment and IT teams to protect production-critical systems, including Siemens Opcenter MES and factory integrations.

Data, IP, Privacy & Regulatory Security

- Protect intellectual property, engineering/process data, manufacturing data, source code, customer information and other sensitive assets.
- Strengthen DLP, data classification, encryption, access controls and insider-risk management.
- Support India DPDP readiness and CERT-In cybersecurity incident reporting requirements.

Security Operations & Cyber Resilience

- Establish effective 247 IT/OT monitoring and incident response.
- Drive ransomware, OT compromise, data-breach and privileged-account response playbooks.
- Strengthen backup protection, disaster recovery, cyber recovery and restoration readiness.

Third-Party & Supply-Chain Security

- Establish security requirements for OEMs, system integrators, cloud providers, MSSPs/MDR providers and technology vendors.
- Strengthen third-party risk assessment, secure remote access, contractual cybersecurity requirements and supplier accountability.

Required Experience
- 12 - 15+ years of progressive cybersecurity experience.
- Strong experience in enterprise cybersecurity, including IAM/PAM, SOC/SIEM, network security, vulnerability management, incident response, security architecture and cyber resilience.
- Meaningful OT / Industrial Cybersecurity experience is mandatory.
- Experience securing manufacturing or industrial environments where availability and production continuity are critical.
- Experience developing cybersecurity maturity assessments, target-state architectures and multi-year security roadmaps.
- Robust experience managing cybersecurity teams, vendors, MSSPs/MDR providers and specialist partners.
- Ability to communicate cybersecurity risks and investment priorities effectively to senior management.
- Candidates with experience in one or more of the following will be strongly preferred:
- Semiconductor / OSAT / Fab / Assembly & Test




- Advanced packaging or semiconductor manufacturing
- SEMI E187 / SEMI E188

- ISA/IEC 62443
- OT network segmentation / Industrial DMZ
- Siemens Opcenter or equivalent MES
- SECS/GEM, CIM, EAP and equipment connectivity

- Manufacturing equipment cybersecurity

- Greenfield factory cybersecurity
- Ransomware resilience and OT cyber recovery
- ISO/IEC 27001 / ISMS implementation
- Data/IP protection and insider-risk programs

Preferred Certifications : CISSP | CISM | CISA | CRISC | GICSP | ISA/IEC 62443 | ISO/IEC 27001 Lead Implementer / Lead Auditor | CCSP | GIAC

Certifications are desirable, but proven IT/OT cybersecurity leadership and manufacturing security experience will carry greater weight.

Frameworks & Standards

Exposure to relevant frameworks and standards such as:

NIST CSF | NIST OT Security | ISA/IEC 62443 | SEMI E187/E188 | ISO/IEC 27001 | CIS Controls | MITRE ATT&CK; / ATT&CK; for ICS | Zero Trust

Candidate Profile :

We are specifically looking for someone who can:

- Operate effectively across enterprise IT and factory OT.
- Understand the relationship between cybersecurity, manufacturing uptime and business continuity.
- Build security architecture rather than only manage compliance.
- Work credibly with MES, Automation, Equipment, Engineering, Infrastructure, Applications and business teams.
- Technically challenge OEMs, system integrators and cybersecurity partners.
- Translate complex cyber risks into clear business language.
- Lead confidently through major cybersecurity incidents.
- Build a measurable, resilient and risk-based cybersecurity operating model.

Position: Lead Cybersecurity & GRC (IT/OT Security)

Position Code: CG_IT_Sec_09

Location: Sanand, Gujarat

Interested candidates can apply through either channel:

Google Form: Apply Now :https://forms.gle/gMtr2FcyYGBoxPZZ8

Email: [email protected]

Email Subject: Application | Lead Cybersecurity & GRC (IT/OT Security) | CG_IT_Sec_09

Candidate Details Required ,Please share:

- Full Name
- Current Company
- Current Designation
- Current Location
- Total Experience
- Relevant Cybersecurity Experience
- OT / Industrial Cybersecurity Experience
- Semiconductor / OSAT / Manufacturing Experience
- SEMI E187 / E188 experience
- ISA/IEC 62443 experience
- ISO/IEC 27001 / ISMS experience
- Highest Qualification
- Professional Certifications
- Current Fixed CTC
- Variable / Bonus
- Expected Fixed CTC
- Notice Period / Earliest Joining Date
- Current Offers, if any
- Willingness to relocate to Sanand, Gujarat: Yes / No

📌 Lead Cybersecurity & GRC IT - OT Security (Ahmedabad)
🏢 CG Semi
📍 Ahmedabad