Role & responsibilities

Cyber Security & Incident Response

- Own and operate the Cyber Security Incident Response lifecycle, including detection, containment, eradication, recovery, and post-incident reviews.
- Develop and maintain Incident Response Plans, Playbooks, and Runbooks.
- Coordinate incident response activities with SOC, IT, OT, legal, risk, and business stakeholders.
- Conduct tabletop exercises and simulations to test cyber resilience.

Security Operations Center (SOC)

- Oversee SOC operations (in-house or managed SOC).
- Ensure effective monitoring of SIEM, EDR, IDS/IPS, and log management platforms.
- Define use cases, alert thresholds, escalation procedures, and reporting metrics.
- Review SOC performance, KPIs, and incident trends.

Data Protection & Data Privacy

- Implement and govern data protection controls across applications, infrastructure, and endpoints.

- Support compliance with data privacy regulations (e.g., GDPR, TISAX, local data protection laws).
- Drive data classification, encryption, DLP, and access control frameworks.
- Support Privacy Impact Assessments (PIA/DPIA) in collaboration with legal and compliance teams.

IT Audits & Compliance

- Lead and coordinate internal and external IT security audits.
- Ensure ongoing compliance with ISO/IEC 27001,



customer security requirements, and regulatory expectations.
- Manage risk assessments, control testing, audit findings, and remediation plans.
- Maintain security policies, standards, procedures, and evidence repositories.

Security Engineering

- Work with IT and OT teams to design and implement secure architectures.
- Review and approve security controls for:
- Network security
- Endpoint security
- Identity & Access Management (IAM)
- Cloud and hybrid environments

- Ensure security is embedded in projects, system changes, and vendor onboarding.

Cyber Insurance

- Support cyber insurance policy selection, renewal, and claims.
- Ensure alignment between security controls and cyber insurance requirements.
- Act as a key stakeholder during incident investigations related to insurance claims.

Vendor & Stakeholder Management

- Manage security vendors, MSSPs, and technology partners.
- Act as a trusted advisor to business, IT, and manufacturing operations.
- Provide regular security risk and posture reporting to management.

Security Strategy and Roadmap

Work with external advisors/SMEs to create and support a groupwide security strategy and roadmap

📌 Manager IT Security and Governance (Pune)
🏢 Advik Hi Tech
📍 Pune