General Manager - Global Information Security

Tata Communications; Chennai District; On-site; INR 2,400,000 - 4,200,000; Full time

Job summary

Tata Communications is seeking a senior security leadership role to drive DevSecOps at scale, integrating security into CI/CD, container security, and software supply chain governance. The role focuses on cloud security across multi-cloud and private environments, with emphasis on AI security and risk management.

You will collaborate with engineering, product and security teams to embed SSDLC, implement CNAPP governance, and establish robust security monitoring across cloud workloads and APIs.

Qualifications

• Experience implementing SSDLC and secure SDLC practices.
• Strong knowledge of cloud security architectures across multi-cloud environments.
• Experience with DevSecOps tooling and security testing automation.

Responsibilities

• Lead DevSecOps at scale with security testing automation in CI/CD pipelines.
• Oversee container image security and software integrity.
• Manage open-source dependencies security and SBOM.
• Perform threat modelling and security architecture reviews.
• Govern API security and API gateway security.
• Establish cloud security governance across AWS/Azure/GCP and private cloud.
• Define and enforce data security in cloud environments.

Skills

DevSecOps

Cloud Security

AI Security

Kubernetes Security

OWASP Top 10

Tools

CI/CD Pipelines

CNAPP/CSPM platforms

Terraform/IaC

API Security

Job description

About the Company

Tata Communications Redefines Connectivity with Innovation and Intelligence. Driving the next level of intelligence powered by Cloud, Mobility, Internet of Things, Collaboration, Security, Media services and Network services, we at Tata Communications are envisaging a New World of Communications.

Accountable for managing the secured development, deployment, operations and lifecycle management for internal and external applications, AI platforms and projects as well as public and private cloud infrastructure across the organisation and its subsidiaries. Secure‑by‑design, DevSecOps transformation, AI model governance, and cloud security architecture across hybrid and multi‑cloud environments.

Key Responsibilities

• Build security domain capability.
• Influence CoE, product and engineering functional leadership.
• Drive security culture in development teams.
• Define and implement enterprise application security strategy across all digital products and services. Collaborate with business and technology stakeholders to maintain ongoing security governance and address security risks associated with applications and digital platforms to provide security assurance for customer‑facing application platforms/services.
• Embed secure SDLC (SSDLC) practices across engineering teams.
• Establish DevSecOps frameworks integrated with CI/CD pipelines.

Security Domains Oversight

• SAST
• DAST
• SCA
• API security
• Mobile application security
• Container and microservices security
• Cloud Security
• Lead security for multi‑cloud and hybrid cloud environments including AWS, GCP, Azure as well as private cloud services
• Define and implement enterprise cloud security strategy across all digital products and platforms. Collaborate with business and technology stakeholders to maintain ongoing security governance and address security risks associated with cloud infrastructure and automation.
• Cloud security architecture and guardrails
• CSPM and CNAPP governance
• Identity and access security for cloud workloads
• Cloud‑native security monitoring
• Container and Kubernetes security
• Serverless security
• Data security in cloud environments
• AI Security and Governance

AI Security and Governance

• Develop enterprise framework for AI and ML security and risk management including AI model security, protection against model theft and poisoning, secure training data pipelines, responsible AI governance, adversarial AI threat mitigation, AI risk assessment and regulatory compliance.
• Establish AI security standards aligned with emerging frameworks such as NIST AI RMF, ISO 42001, Responsible AI guidelines.

Lead Implementation Of DevSecOps At Scale Including

• Security testing automation in CI/CD pipelines
• Container image security
• Software integrity and artifact signing
• Open‑source software dependencies
• Threat modellingSecurity architecture reviews
• API Security Governance
• API discovery and inventory
• API gateway security

Strong Knowledge Of

• Application Security: OWASP Top 10, secure coding practices, application threat modelling, API security
• Cloud Security: AWS / Azure / GCP security architectures, Kubernetes security, CNAPP / CSPM platforms, Zero Trust architecture
• AI Security: AI model lifecycle security, ML pipeline security, AI governance frameworks
• Engineering Practices: DevSecOps pipeline security, Infrastructure as Code security, Software supply chain security