Deputy General Manager - OT Security

ReNew; Gurugram District; On-site; INR 4,000,000 - 7,000,000; Full time

Job summary

ReNew Energy seeks an experienced OT Security Architect & Governance specialist to lead security policy development, risk-based OT network design, and governance across wind, solar, and hydro assets. You will coordinate with IT, engineering, and O&M teams to implement secure controls and ensure regulatory compliance while maintaining plant reliability.

The role requires 12–17 years of hands-on OT/ICS security experience, familiarity with ISA/IEC 62443, and the ability to drive incident response

Qualifications

• 12 to 17 years of OT security/ICS experience.
• Proficiency in ISA/IEC 62443 practices and regulatory requirements (CEA, NCIIPC).
• Ability to design risk-based OT networks across multiple asset classes.

Responsibilities

• Develop, implement, and enforce OT security policies and standards.
• Lead OT security governance across wind, solar, hydro, and grid-connected assets.
• Design and validate OT network architectures with zones, conduits, and boundary controls.
• Collaborate with OEMs, EPCs, IT, engineering, and operations for secure implementation.
• Monitor and drive secure configurations, vulnerability remediation, and incident response planning.

Skills

OT Security

Security Architecture

Governance & Compliance

ICS Security

Job description

Working @ Renew

Working here means you’ll be part of something genuinely special . Funded by marquee investors and guided by a unique set of values, ReNew is the leading renewable energy IPP in India in terms of total energy generation capacity. We take pride in providing opportunities to our employees to create, explore, express, take risks and grow. As a ReNewer, you’ll always be doing things that would be beneficial to millions.

Working @ Renew

Working here means you’ll be part of something genuinely special . Funded by marquee investors and guided by a unique set of values, ReNew is the leading renewable energy IPP in India in terms of total energy generation capacity. We take pride in providing opportunities to our employees to create, explore, express, take risks and grow. As a ReNewer, you’ll always be doing things that would be beneficial to millions.

About Company

Founded in 2011, ReNew, is one of the largest renewable energy companies globally, with a leadership position in India. Listed on Nasdaq under the ticker RNW, ReNew develops, builds, owns, and operates utility-scale wind energy projects, utility-scale solar energy projects, utility-scale firm power projects, and distributed solar energy projects. In addition to being a major independent power producer in India, ReNew is evolving to become an end-to-end decarbonization partner providing solutions in a just and inclusive manner in the areas of clean energy, green hydrogen, value-added energy offerings through digitalisation, storage, and carbon markets that increasingly are integral to addressing climate change. With a total capacity of more than 13.4 GW (including projects in pipeline), ReNew’s solar and wind energy projects are spread across 150+ sites, with a presence spanning 18 states in India, contributing to 1.9 % of India’s power capacity. Consequently, this has helped to avoid 0.5% of India’s total carbon emissions and 1.1% India’s total power sector emissions. In the over 10 years of its operation, ReNew has generated almost 1.3 lakh jobs, directly and indirectly. ReNew has achieved market leadership in the Indian renewable energy industry against the backdrop of the Government of India’s policies to promote growth of this sector. ReNew’s current group of stockholders contains several marquee investors including CPP Investments, Abu Dhabi Investment Authority, Goldman Sachs, GEF SACEF and JERA. Its mission is to play a pivotal role in meeting India’s growing energy needs in an efficient, sustainable, and socially responsible manner. ReNew stands committed to providing clean, safe, affordable, and sustainable energy for all and has been at the forefront of leading climate action in India.

Job Description

OT Security Architecture & Governance

• Develop, implement, and enforce OT security policies, procedures, reference architectures, and technical standards aligned with the organization’s security framework and applicable requirements, including relevant CEA cybersecurity requirements, NCIIPC advisories where applicable, and ISA/IEC 62443 practices.
• Design and implement risk-based OT network architectures using zones, conduits, security boundaries, industrial demilitarised zones, controlled data flows, and resilient communications. Ensure designs address distributed sites, central and local SCADA, plant controllers, substations, remote operations, legacy equipment, latency, OEM dependencies, and loss-of-communications scenarios.
• Lead OT security governance, define minimum baseline security standards, manage approved deviations, and track compliance across wind, solar, hydro, and associated grid-connected assets.
  

Security Implementation & Operations

• Lead the design, deployment, testing, commissioning, and validation of OT security controls, including network segmentation, industrial firewalls, secure remote access, privileged access, endpoint controls appropriate for OT, asset visibility, security monitoring, logging, backup protection, and resilient recovery arrangements.
• Work closely with OEMs, EPC partners, engineering teams, and O&M teams to define security requirements and validate their implementation during design reviews, procurement, factory acceptance testing, site acceptance testing, commissioning, and operational handover.
• Establish and monitor secure configuration baselines for OT assets; manage hardening, approved deviations, firmware and software versions, unsupported or end-of-life components, vulnerability remediation, compensating controls, and risk-based maintenance throughout the asset lifecycle.
  

Monitoring, Incident Response

• Implement and operate OT security monitoring that provides asset visibility, identifies anomalous communications and malicious activity, generates actionable alerts, and integrates appropriately with enterprise security operations without introducing unacceptable risk to plant performance or availability.
• Lead the coordinated response to OT cybersecurity incidents, prioritising personnel safety, plant stability, evidence preservation, regulatory obligations, controlled containment, and restoration of operations, Coordinate with site operations, engineering, IT, OEMs, legal, communications, and leadership through defined escalation and crisis-management procedures.
  

Regulatory Compliance

• Responsible for periodic OT audit and risk assessments, VA/PT, and compliance assessments aligned with CEA, RLDC/NLDC, SECI requirements.
  

Collaboration & Integration

• Work closely with IT, cybersecurity, network, and infrastructure teams to ensure secure IT–OT interfaces.
• Support cross-functional OT security initiatives
  

Training, Awareness & Documentation

• Conduct OT security training for site engineers, OEM partners, and contractors per internal policy requirements.
• Develop documentation including system architecture diagrams, SOPs, incident playbooks, and audit compliance evidence.
  

Experience : 12 to 17 Years
Location : Gurugram, Haryana

Job Description

OT Security Architecture & Governance

• Develop, implement, and enforce OT security policies, procedures, reference architectures, and technical standards aligned with the organization’s security framework and applicable requirements, including relevant CEA cybersecurity requirements, NCIIPC advisories where applicable, and ISA/IEC 62443 practices.
• Design and implement risk-based OT network architectures using zones, conduits, security boundaries, industrial demilitarised zones, controlled data flows, and resilient communications. Ensure designs address distributed sites, central and local SCADA, plant controllers, substations, remote operations, legacy equipment, latency, OEM dependencies, and loss-of-communications scenarios.
• Lead OT security governance, define minimum baseline security standards, manage approved deviations, and track compliance across wind, solar, hydro, and associated grid-connected assets.
  

Security Implementation & Operations

• Lead the design, deployment, testing, commissioning, and validation of OT security controls, including network segmentation, industrial firewalls, secure remote access, privileged access, endpoint controls appropriate for OT, asset visibility, security monitoring, logging, backup protection, and resilient recovery arrangements.
• Work closely with OEMs, EPC partners, engineering teams, and O&M teams to define security requirements and validate their implementation during design reviews, procurement, factory acceptance testing, site acceptance testing, commissioning, and operational handover.
• Establish and monitor secure configuration baselines for OT assets; manage hardening, approved deviations, firmware and software versions, unsupported or end-of-life components, vulnerability remediation, compensating controls, and risk-based maintenance throughout the asset lifecycle.
  

Monitoring, Incident Response

• Implement and operate OT security monitoring that provides asset visibility, identifies anomalous communications and malicious activity, generates actionable alerts, and integrates appropriately with enterprise security operations without introducing unacceptable risk to plant performance or availability.
• Lead the coordinated response to OT cybersecurity incidents, prioritising personnel safety, plant stability, evidence preservation, regulatory obligations, controlled containment, and restoration of operations, Coordinate with site operations, engineering, IT, OEMs, legal, communications,