Location: Head Office, Raipur (scope covers corporate offices, plants and other business locations)
Reports to: Head – IT
Role Purpose
The Manager – Cyber Security will develop, implement and monitor cybersecurity policies, frameworks and controls to protect the organisation's IT infrastructure, business applications, networks, data and manufacturing-related digital systems. The role focuses on identifying and mitigating cyber risks, regulatory compliance, managing security incidents, strengthening access controls and building a security-conscious culture. The incumbent will work closely with IT, Information Systems, business functions, plant operations and external technology partners.
Cybersecurity Governance and Risk Management

Develop, implement and periodically review cybersecurity policies, standards, procedures and control frameworks.
Conduct cybersecurity risk assessments, identify vulnerabilities and implement mitigation measures.
Establish security governance mechanisms and monitor adherence to approved policies.
Maintain a cybersecurity risk register and report significant risks to management.
Network, Infrastructure and Endpoint Security

Secure corporate networks, servers, endpoints, cloud environments and business applications.
Implement and monitor firewalls, endpoint protection, IDS/IPS and other security solutions.
Coordinate vulnerability assessments, penetration testing, patch management and remediation.
Strengthen network segmentation and secure remote access to critical systems.
Data Protection and Access Management

Implement data classification, encryption, backup protection and DLP controls.
Establish role-based access controls, privileged access management and periodic user-access reviews.




Ensure timely provisioning, modification and revocation of access for employees, consultants and third parties.
Protect confidential business, financial and employee information from unauthorised access or disclosure.
Security Operations and Incident Response

Monitor security alerts, investigate suspicious activity and coordinate incident response.
Develop and maintain incident response procedures, escalation mechanisms and recovery plans.
Coordinate root-cause analysis, corrective actions and post-incident reviews.
Ensure backup, disaster recovery and business continuity arrangements for critical systems.
Manufacturing and OT Security

Assess cyber risks in plant networks, industrial control systems and connected manufacturing equipment.
Work with plant IT and operations to strengthen OT security with minimal disruption to production.
Implement controls for industrial network segmentation, remote vendor access and secure configurations.
Protect critical production systems against malware, ransomware and unauthorised access.
Compliance, Audit and Vendor Management

Ensure adherence to cybersecurity, information security, data protection and regulatory requirements.
Coordinate internal and external IT security audits and close observations on time.
Evaluate cyber risks from vendors, service providers and third-party integrations.




Maintain security documentation, audit evidence, incident records and compliance reports.
Awareness and Continuous Improvement

Run cybersecurity awareness programmes and phishing simulations.
Develop measurable security improvement plans and track implementation.
Evaluate emerging threats, security technologies and industry best practices.
Prepare periodic cybersecurity dashboards and management reports.
Requirements
Education: Bachelor's degree in Computer Science, IT, Cybersecurity or a related discipline. A relevant postgraduate qualification is an advantage.

Experience: 7–10 years in IT security / cybersecurity, including security operations, risk management and infrastructure security. Experience in manufacturing, industrial or multi-location organisations preferred.

Certifications (advantage): CISSP, CISM, CISA, CEH, CompTIA Security+, ISO 27001 Lead Implementer / Lead Auditor or equivalent.

Technical skills

Network security, firewalls, endpoint protection / EDR, SIEM and security monitoring
Vulnerability management, incident response, identity and access management
Encryption, data protection and secure configuration
Information security frameworks, cybersecurity audits, risk assessments and regulatory requirements
Cloud security, disaster recovery, third-party risk, OT/ICS security and business continuity planning
Behavioural skills

Robust analytical, troubleshooting and risk assessment skills
Ability to coordinate cross-functional incident response teams
Effective communication and stakeholder management
Strong documentation, reporting and audit management
High integrity, confidentiality and attention to detail

📌 Information and Cyber Security Lead (Raipur)
🏢 N Human Resources & Management Systems
📍 Raipur