Deputy CISO - Global IT & OT Cybersecurity

Tata AutoComp

Pune District

On-site

INR 3,500,000 - 7,000,000

Full time

14 days+

Application generator

Stand out for this role — generate a tailored resume and cover letter in about a minute.

Get past ATS filters

Job summary

Tata AutoComp is seeking a Deputy Chief Information Security Officer (CISO) to lead enterprise cybersecurity across IT, OT, and manufacturing operations. The role requires hands-on OT cybersecurity expertise in large, multi-plant environments and an ability to operate at executive and technical levels.

The candidate will define, implement and govern global cybersecurity programs, including incident response, risk management, and security architecture across cloud, product development, and

Responsibilities

Drive global OT cybersecurity strategy and roadmap across manufacturing plants, facilities and engineering centers
Lead the design and implementation of a unified OT cybersecurity program across multi-country operations
Govern MSSPs and security service providers to ensure consistent security outcomes
Sustain ISO 27001 and global compliance programs across the organization
Lead cyber resilience, incident response and disaster recovery programs
Drive cybersecurity integration for acquisitions and new factories to a common baseline
Review and approve plant security architectures and network designs to ensure secure OT environments
Oversee OT security across ICS domains: PLC, DCS, SCADA, MES, HMI and Industrial IoT
Design and govern IT/OT segmentation, Purdue architecture, industrial DMZs and related controls
Influence board-level cybersecurity decisions and reporting with a clear risk-based focus

Job description

Reporting To

Chief Information Security Officer (CISO)

Role Purpose

The Deputy CISO serves as the principal technical and operational leader for enterprise cybersecurity and acts as the designated second-in-command to the CISO.

This role is accountable for defining, implementing, governing, and continuously improving cybersecurity programs across IT, Operational Technology (OT), manufacturing plants, engineering environments, cloud platforms, product development ecosystems, and global business operations.

A key responsibility of this role is to establish and sustain a globally standardized OT cybersecurity program across multi-country manufacturing operations, ensuring protection of production environments, industrial control systems, connected factories, engineering assets, and critical business services from cyber threats that could impact safety, quality, production continuity, customer commitments, and corporate reputation.

The Deputy CISO must possess deep hands-on experience implementing OT cybersecurity across large manufacturing enterprises with multiple plants globally and be capable of operating at both executive and technical levels.

Key Leadership Expectations

The Deputy CISO shall:

Drive cybersecurity strategy execution globally
Own OT cybersecurity as a strategic pillar
Be the technical escalation point for complex cyber risks
Lead global security architecture decisions
Govern MSSPs and security service providers
Sustain ISO 27001 and global compliance programs
Lead cyber resilience and incident response programs
Drive cybersecurity integration for acquisitions and new factories
Influence board-level cybersecurity decisions

OT Cybersecurity Leadership (Primary Responsibility)

Global OT Security Strategy

Lead design and implementation of a unified OT Cybersecurity Program covering:
- Manufacturing plants
- Industrial facilities
- Warehouses
- Utilities
- Engineering centers
- Connected production environments
Develop OT cybersecurity roadmap aligned to:
- IEC 62443
- NIST 800-82
- NIST CSF
- ISO 27001
- Industry customer requirements

Multi-Plant OT Cybersecurity Implementation

Must possess proven experience in:
- Implementing OT security across 10+ manufacturing sites.
- Leading global OT security transformation programs.
- Standardizing cybersecurity controls across diverse plant environments.
- Managing cybersecurity in brownfield and greenfield plant environments.
- Integrating acquired manufacturing facilities into a common cyber baseline.

Industrial Control System (ICS) Security

Strong hands-on expertise required in:
- PLC Security
- DCS Security
- SCADA Security
- MES Security
- Historian Security
- Batch Management Systems
- HMI Security
- Industrial IoT Security
- Robotics Security
- Connected Factory Security
Experience with:
- Siemens
- Rockwell
- Schneider
- ABB
- Yokogawa
- Honeywell
- Emerson
- industrial environments preferred.

OT Network Security

Design and govern:
- Purdue Architecture
- ISA/IEC 62443 Zones and Conduits
- Industrial DMZ
- IT/OT Segmentation
- Industrial Firewalls
- NAC
- Secure Remote Access
- Vendor Access Control
- Production Network Monitoring

Must be capable of independently reviewing and approving plant security architectures.

OT Threat Monitoring & Incident Response

Lead deployment of:
- OT SOC
- ICS Threat Monitoring
- Passive Asset Discovery
- Industrial IDS/IPS
- OT SIEM Integration
Experience handling:
- Production-impacting incidents
- Industrial ransomware incidents
- Plant network compromises
- Vendor-originated threats
- Safety-related cyber events

OT Risk & Vulnerability Management

Responsible for:
- Asset Criticality Models
- OT Risk Assessments
- Vulnerability Prioritization
- Compensating Controls
- Patch Governance
- Legacy Platform Protection
Must understand challenges associated with:
- Unsupported operating systems
- End-of-life equipment
- Vendor constraints
- Production shutdown limitations

Cyber Defense & Security Operations

Executive ownership of:
- SOC
- SIEM
- XDR
- SOAR
- Threat Intelligence
- Threat Hunting
Must possess expertise in:
- MITRE ATT&CK
- Detection Engineering
- Adversary Emulation
- Incident Command
- Ability to independently lead enterprise cyber crises.