Chief Information Security Officer

Roots Multiclean Ltd; Coimbatore District; On-site; INR 5,000,000 - 7,500,000; Full time

Job summary

Roots Multiclean Ltd in Tamil Nadu, India is seeking a senior Information Security leader to develop and drive the group''s cybersecurity strategy and ISMS across the organization.

The role oversees audits (ISO 27001, TISAX), threat monitoring, incident response, and secure connectivity across offices and plants. You will lead security teams, collaborate with vendors, and promote a security-first culture.

Qualifications

• Experience leading ISMS programs and audits (ISO 27001, etc).
• Strong knowledge of risk assessment and governance frameworks.
• Proven leadership and budgeting skills.

Responsibilities

• Develop and execute the group’s information security strategy.
• Lead ISMS across the organization.
• Plan and oversee ISO 27001, TISAX, audits.
• Monitor threats, incidents, vulnerabilities; implement preventive measures.
• Ensure confidentiality, integrity, and availability of information assets.
• Oversee firewall, network, VPN, endpoint, data center and cloud security.
• Lead cyber risk assessments, penetration testing, incident response.
• Establish security policies and governance aligned with business.
• Coordinate with vendors and optimize costs.
• Lead security team recruitment and development.
• Conduct periodic reviews of IT infrastructure and network availability.
• Drive cybersecurity awareness and a security-first culture.

Skills

ISMS leadership

Security strategy

Audits & compliance

Threat & vulnerability management

Team mentorship

Job description

Role & responsibilities

• Develop and execute the Group's Information Security and Cybersecurity strategy.
• Lead and manage the Information Security Management System (ISMS) across the organization.
• Plan, coordinate, and ensure successful completion of ISO 27001, TISAX, customer, and internal security audits.
• Monitor cybersecurity threats, security incidents, vulnerabilities, and cyber-attack attempts, implementing proactive preventive measures.
• Ensure the confidentiality, integrity, and availability of enterprise information assets.
• Oversee enterprise firewall, network security, VPN, endpoint security, data center, and cloud security operations.
• Ensure secure and reliable connectivity across corporate offices, manufacturing plants, branches, and remote users.
• Lead cyber risk assessments, vulnerability management, penetration testing, and incident response activities.
• Establish security policies, standards, and governance frameworks aligned with business objectives.
• Evaluate and implement new cybersecurity technologies and best practices.
• Coordinate with ISPs, OEMs, cybersecurity vendors, and service providers while optimizing costs and service quality.
• Prepare and manage cybersecurity and IT infrastructure budgets.
• Lead, mentor, recruit, and develop the cybersecurity and infrastructure teams.
• Conduct periodic plant and branch visits to review IT infrastructure, security controls, and network availability.
• Drive cybersecurity awareness programs and promote a security-first culture across the organization.

Collaborate with business leaders and participate in Management Review Meetings (MRM) to support business and digital transformation initiatives

Preferred Certifications

• CISSP
• CISM
• ISO/IEC 27001 Lead Implementer/Lead Auditor
• CEH
• CCSP
• CompTIA Security+
• Fortinet, Palo Alto, Cisco Security, or equivalent certifications.