Lead - Cybersecurity

Lead - Cybersecurity

Responsibilities

Cybersecurity Strategy, Governance & Compliance

• Develop, implement, and continuously enhance cybersecurity policies, standards, frameworks, and operational procedures across the business.
• Establish cybersecurity governance mechanisms and drive periodic cybersecurity performance reviews with business leadership.
• Define cyber KPIs, KRIs, scorecards, and reporting frameworks.
• Ensure compliance with cybersecurity regulations, customer requirements, contractual obligations, and industry standards.
• Maintain cyber risk registers and monitor closure of identified risks and audit observations.

Cyber Hygiene & Technology Controls

• Govern and continuously improve cyber hygiene controls across all operational sites.
• Ensure effective Identity & Access Management (IAM), Privileged Access Management (PAM), Multi-Factor Authentication (MFA), and user access governance.
• Drive endpoint security, anti-virus management, security patch deployment, and operating system/application security updates.
• Manage backup infrastructure, restoration testing, and cyber recovery controls.
• Ensure OEM-supported security configurations and technology lifecycle compliance across critical systems.

Operational Technology (OT) Security

• Develop and implement cybersecurity controls for Operational Technology environments including BMS, DCIM, IBMS, EPMS, CCTV, Access Control Systems, PLCs, and Building Automation Systems.
• Ensure secure integration and segregation of IT and OT networks.
• Lead OT vulnerability assessments, security audits, and remediation programs.
• Collaborate with Operations, Engineering, and OEM partners to strengthen resilience of mission-critical operational systems.

Network & Endpoint Security

• Manage enterprise and data center network security architecture.
• Govern firewalls, IDS/IPS, NAC, VPNs, secure remote access, network segmentation, and threat detection controls.
• Implement and manage Endpoint Detection & Response (EDR/XDR) solutions.
• Continuously monitor network and endpoint security posture and drive corrective actions.

Cybersecurity Incident Response & Crisis Management

• Lead cybersecurity incident detection, investigation, containment, eradication, and recovery activities.
• Develop and maintain incident response plans, cyber playbooks, escalation matrices, and response procedures.
• Conduct root cause analysis and implement preventive and corrective actions.
• Coordinate with leadership, OEMs, customers, service providers, and regulatory agencies during cybersecurity incidents.
• Conduct cyber crisis simulations, tabletop exercises, and business continuity testing.

Cyber Risk Management & Vulnerability Management

• Conduct periodic cyber risk assessments for infrastructure, applications, networks, OT systems, and critical business processes.
• Lead vulnerability assessments, penetration testing, security reviews, and threat exposure assessments.
• Prioritize and drive remediation of identified vulnerabilities within defined timelines.
• Monitor emerging cyber threats and ensure timely mitigation of associated risks.

Cybersecurity Solutions & Technology Deployment

• Evaluate, recommend, and implement cybersecurity technologies aligned with business and operational requirements.
• Drive deployment and lifecycle management of SIEM, SOAR, PAM, EDR/XDR, threat intelligence, vulnerability management, and other cybersecurity platforms.
• Collaborate with digital, automation, infrastructure, and project teams for integration of secure technologies.

Cybersecurity Audits & Assurance

• Lead internal and external cybersecurity audits, assessments, certifications, and customer security reviews.
• Ensure readiness and compliance with standards such as ISO 27001, NIST Cybersecurity Framework, CIS Controls, and other relevant industry practices.
• Maintain cybersecurity documentation, evidence repositories, and compliance records.

Vendor & Third-Party Cyber Risk Management

• Conduct cybersecurity assessments of OEMs, contractors, managed service providers, consultants, and third-party vendors.
• Review cybersecurity controls and contractual compliance of suppliers and service providers.
• Ensure remediation and mitigation of identified third-party cyber risks.
• Embed cybersecurity requirements into procurement, contracting, and vendor management processes.

Cybersecurity Awareness & Capability Building

• Develop and implement cybersecurity awareness programs across operational data centers.
• Conduct periodic employee awareness campaigns, phishing simulations, training sessions, and security workshops.
• Build cybersecurity competency within operations, engineering, facility management, and support functions.
• Promote a strong cyber-aware culture across the organization.

ESG, Sustainability & Workplace Safety

• Demonstrate active commitment to AdaniConneX's Environmental, Social & Governance (ESG) objectives and sustainability agenda.
• Promote environmentally responsible management of IT and electronic assets, including e-waste disposal and sustainable technology practices.
• Comply with all applicable Environment, Health & Safety (EHS) policies, procedures, and statutory requirements.
• Participate in safety audits, emergency response drills, incident investigations, and risk mitigation initiatives.
• Ensure safe working practices while executing cybersecurity projects and operational activities at data center facilities.
• Ensure vendors, contractors, and OEM representatives comply with site safety, environmental, security, and governance requirements.

Key Internal Stakeholders

• Group Chief Information Security Officer
• Head – Operations
• Information Technology team
• Engineering & Projects Teams
• Digital & Automation Teams
• Facility Management Teams
• Risk & Compliance Teams
• Procurement Teams
• Physical Security Teams
• Business Leadership Team

Key External Stakeholders

• OEM & technology Partners and cybersecurity consultants
• Clients
• Managed Security Service Providers
• Audit Agencies
• Regulatory Authorities

Qualifications

Educational Qualification

• Bachelor or master’s degree in computer science, Information Technology, Electronics, Cybersecurity, Engineering, or related discipline.

Professional Certifications (Preferred)

• CISSP
• CISM
• CISA
• CEH
• CCSP
• ISO 27001 Lead Implementer / Lead Auditor
• GIAC Certifications
• GICSP (OT Security)
• Microsoft Security Certifications
• Cisco / Palo Alto Security Certifications

Key Competencies Functional Competencies

• Cybersecurity Governance
• OT Security
• Network Security Architecture
• Endpoint Security
• Incident Response & Crisis Management
• Cyber Risk Management
• Vulnerability Management
• Security Operations
• Third-Party Risk Management
• Regulatory Compliance & Audits
• Business Continuity & Cyber Resilience

Behavioral Competencies

• Strategic Thinking
• Leadership & Team Development
• Stakeholder Management
• Analytical Problem Solving
• Risk-Based Decision Making
• Communication & Influencing Skills
• Customer Orientation
• Continuous Improvement Mindset