Lead - Cybersecurity

Adani Transmission (ATL); Mumbai; On-site; INR 1,200,000 - 1,800,000; Full time

Job summary

Adani Transmission (ATL) is seeking a senior cybersecurity leader to develop and govern security policies, manage OT/IT security across sites, and drive risk-based remediation. The role focuses on governance, compliance, and assurance across plant operations and data centers.

You will lead incident response, vulnerability management, and deployment of SIEM/SOXR platforms, collaborating with operations, engineering, and OEM partners to strengthen resilience.

Qualifications

• Bachelor's or Master's degree in computer science, information technology, electronics, cybersecurity, engineering, or related discipline.
• Professional certifications such as CISSP, CISM, CISA or ISO 27001 Lead Implementer / Lead Auditor are preferred.

Responsibilities

• Develop, implement, and continuously enhance cybersecurity policies, standards, frameworks, and operational procedures across the business.
• Establish cybersecurity governance mechanisms and drive periodic cybersecurity performance reviews with business leadership.
• Define cyber KPIs, KRIs, scorecards, and reporting frameworks.
• Ensure compliance with cybersecurity regulations, customer requirements, contractual obligations, and industry standards.
• Maintain cyber risk registers and monitor closure of identified risks and audit observations.
• Govern and continuously improve cyber hygiene controls across all operational sites.
• Manage IAM, PAM, MFA, and user access governance.
• Drive endpoint security, patch deployment, and OS/app security updates.
• Manage backup infrastructure and cyber recovery controls.
• Lead OT vulnerability assessments, security audits, and remediation programs.
• Oversee network and endpoint security posture and drive corrective actions.
• Lead cybersecurity incident detection, investigation, containment, eradication, and recovery activities.
• Develop incident response plans, playbooks, escalation matrices, and response procedures.
• Coordinate with leadership, OEMs, customers, service providers, and regulators during incidents.
• Conduct cyber risk assessments and prioritize remediation within timelines.
• Evaluate and deploy SIEM, SOAR, PAM, EDR/XDR, and other cyber platforms.
• Lead internal and external cybersecurity audits and compliance activities.
• Embed cybersecurity requirements into procurement and vendor management processes.

Skills

Cybersecurity Governance

OT Security

Network Security Architecture

Endpoint Security

Incident Response

Cyber Risk Management

Vulnerability Management

Security Operations

Third-Party Risk Management

Regulatory Compliance Audits

Business Continuity Cyber Resilience

Education

CISSP

CISM

CISA

CEH

CCSP

ISO 27001 Lead Implementer / Lead Auditor

GIAC Certifications

GICSP (OT Security)

Microsoft Security Certifications

Cisco / Palo Alto Security Certifications

Tools

SIEM

SOAR

PAM

EDR/XDR

Job description

Educational Qualification

• Bachelor or master s degree in computer science, Information Technology, Electronics, Cybersecurity, Engineering, or related discipline.

Professional Certifications (Preferred)

• CISSP
• CISM
• CISA
• CEH
• CCSP
• ISO 27001 Lead Implementer / Lead Auditor
• GIAC Certifications
• GICSP (OT Security)
• Microsoft Security Certifications
• Cisco / Palo Alto Security Certifications

Key Competencies Functional Competencies

• Cybersecurity Governance
• OT Security
• Network Security Architecture
• Endpoint Security
• Incident Response Crisis Management
• Cyber Risk Management
• Vulnerability Management
• Security Operations
• Third-Party Risk Management
• Regulatory Compliance Audits
• Business Continuity Cyber Resilience

Behavioral Competencies

• Strategic Thinking
• Leadership Team Development
• Stakeholder Management
• Analytical Problem Solving
• Risk-Based Decision Making
• Communication Influencing Skills
• Customer Orientation
• Continuous Improvement Mindset

Cybersecurity Strategy, Governance Compliance

• Develop, implement, and continuously enhance cybersecurity policies, standards, frameworks, and operational procedures across the business.
• Establish cybersecurity governance mechanisms and drive periodic cybersecurity performance reviews with business leadership.
• Define cyber KPIs, KRIs, scorecards, and reporting frameworks.
• Ensure compliance with cybersecurity regulations, customer requirements, contractual obligations, and industry standards.
• Maintain cyber risk registers and monitor closure of identified risks and audit observations.

Cyber Hygiene Technology Controls

• Govern and continuously improve cyber hygiene controls across all operational sites.
• Ensure effective Identity Access Management (IAM), Privileged Access Management (PAM), Multi-Factor Authentication (MFA), and user access governance.
• Drive endpoint security, anti-virus management, security patch deployment, and operating system/application security updates.
• Manage backup infrastructure, restoration testing, and cyber recovery controls.
• Ensure OEM-supported security configurations and technology lifecycle compliance across critical systems.

Operational Technology (OT) Security

• Develop and implement cybersecurity controls for Operational Technology environments including BMS, DCIM, IBMS, EPMS, CCTV, Access Control Systems, PLCs, and Building Automation Systems.
• Ensure secure integration and segregation of IT and OT networks.
• Lead OT vulnerability assessments, security audits, and remediation programs.
• Collaborate with Operations, Engineering, and OEM partners to strengthen resilience of mission-critical operational systems.

Network Endpoint Security

• Manage enterprise and data center network security architecture.
• Govern firewalls, IDS/IPS, NAC, VPNs, secure remote access, network segmentation, and threat detection controls.
• Implement and manage Endpoint Detection Response (EDR/XDR) solutions.
• Continuously monitor network and endpoint security posture and drive corrective actions.

Cybersecurity Incident Response Crisis Management

• Lead cybersecurity incident detection, investigation, containment, eradication, and recovery activities.
• Develop and maintain incident response plans, cyber playbooks, escalation matrices, and response procedures.
• Conduct root cause analysis and implement preventive and corrective actions.
• Coordinate with leadership, OEMs, customers, service providers, and regulatory agencies during cybersecurity incidents.
• Conduct cyber crisis simulations, tabletop exercises, and business continuity testing.

Cyber Risk Management Vulnerability Management

• Conduct periodic cyber risk assessments for infrastructure, applications, networks, OT systems, and critical business processes.
• Lead vulnerability assessments, penetration testing, security reviews, and threat exposure assessments.
• Prioritize and drive remediation of identified vulnerabilities within defined timelines.
• Monitor emerging cyber threats and ensure timely mitigation of associated risks.

Cybersecurity Solutions Technology Deployment

• Evaluate, recommend, and implement cybersecurity technologies aligned with business and operational requirements.
• Drive deployment and lifecycle management of SIEM, SOAR, PAM, EDR/XDR, threat intelligence, vulnerability management, and other cybersecurity platforms.
• Collaborate with digital, automation, infrastructure, and project teams for integration of secure technologies.

Cybersecurity Audits Assurance

• Lead internal and external cybersecurity audits, assessments, certifications, and customer security reviews.
• Ensure readiness and compliance with standards such as ISO 27001, NIST Cybersecurity Framework, CIS Controls, and other relevant industry practices.
• Maintain cybersecurity documentation, evidence repositories, and compliance records.

Vendor Third-Party Cyber Risk Management

• Conduct cybersecurity assessments of OEMs, contractors, managed service providers, consultants, and third-party vendors.
• Review cybersecurity controls and contractual compliance of suppliers and service providers.
• Ensure remediation and mitigation of identified third-party cyber risks.
• Embed cybersecurity requirements into procurement, contracting, and vendor management processes.

Cybersecurity Awareness Capability Building

• Develop and implement cybersecurity awareness programs across operational data centers.
• Conduct periodic employee awareness campaigns, phishing simulations, training sessions, and security workshops.
• Build cybersecurity competency within operations, engineering, facility management, and support functions.
• Promote a strong cyber-aware culture across the organization.

ESG, Sustainability Workplace Safety

• Demonstrate active commitment to AdaniConneXs Environmental, Social Governance (ESG) objectives and sustainability agenda.
• Promote environmentally responsible management of IT and electronic assets, including e-waste disposal and sustainable technology practices.
• Comply with all applicable Environment, Health Safety (EHS) policies, procedures, and statutory requirements.
• Participate in safety audits, emergency response drills, incident investigations, and risk mitigation initiatives.
• Ensure safe working practices while executing cybersecurity projects and operational activities at data center facilities.
• Ensure vendors, contractors, and OEM representatives comply with site safety, environmental, security, and governance requirements.

Key Internal Stakeholders

• Group Chief Information Security Officer
• Head - Operations
• Information Technology team
• Engineering Projects Teams
• Digital Automation Teams
• Facility Management Teams
• Risk Compliance Teams
• Procurement Teams
• Physical Security Teams
• Business Leadership Team

Key External Stakeholders

• OEM technology Partners and cybersecurity consultants
• Clients
• Managed Security Service Providers
• Audit Agencies
• Regulatory Authorities

Disclaimer: This job posting has been aggregated from external source. Role details, content, and availability are subject to change. Applicants are advised to confirm the latest information directly on the company website before applying.