Lead Cybersecurity & GRC IT - OT Security

CG Semi; Sanand; On-site; INR 4,000,000 - 7,000,000; Full time

Job summary

CG Semi in Sanand, Gujarat, is seeking a Lead Cybersecurity & GRC (IT/OT Security) to build and lead cybersecurity across enterprise IT, manufacturing OT, factory equipment, cloud, and data ecosystems. This hands-on leadership role focuses on protecting a 247 semiconductor manufacturing environment with strong OT security experience.

The role requires defining current maturity, identifying gaps, and driving a measurable multi-year cybersecurity roadmap while coordinating with CIO/Head of IT and

Qualifications

• 12–15+ years of progressive cybersecurity experience.
• Strong enterprise IT/OT security leadership.
• Experience in Semiconductor/OSAT manufacturing security preferred.
• Ability to define target state and multi-year security roadmap.
• Experience with ISO/IEC 27001 / ISMS.
• Strong ability to communicate risk to senior management.

Responsibilities

• Assess cybersecurity maturity across IT/OT, manufacturing, apps, cloud, infrastructure and third parties.
• Own cyber-risk registers, remediation plans and leadership reporting.
• Lead security across IAM, PAM, MFA, EDR, SIEM/SOC, network, endpoint, cloud, vulnerability management, app/API security, data protection and incident response.
• Embed security-by-design into new applications, infrastructure and integrations.
• Build and lead OT security program: IT/OT segmentation, industrial DMZ, OT visibility, monitoring and threat detection.
• Secure MES, QMS/SPC/PLM, CIM/EAP, SECS/GEM, equipment integrations; establish security requirements for equipment and vendor access.
• Protect IP, data, and privacy; support India DPDP readiness and CERT-In reporting.
• Establish 24/7 IT/OT monitoring and incident response; develop playbooks for ransomware and OT incidents.
• Establish security requirements for OEMs, system integrators, cloud providers and MSSPs/MDR.

Skills

IAM

PAM

MFA

EDR

SIEM/SOC

Network security

Endpoint security

Cloud security

Vulnerability management

Incident response

Security architecture

Cyber resilience

OT security

Tools

SIEM/SOC

EDR

Industrial DMZ

Job description

Position : Lead Cybersecurity & GRC | IT/OT Security

CG Semi | Sanand, Gujarat

Function: Information Technology / Cybersecurity

Reports to: CIO / Head of IT

Experience: 12 - 15+ Years

Industry: Semiconductor / OSAT / Electronics / Advanced Manufacturing

About the Role

CG Semi is looking for an experienced Lead Cybersecurity & GRC (IT/OT Security) to build and lead cybersecurity across enterprise IT, manufacturing OT, factory equipment, critical applications, cloud, infrastructure, data and third‑party ecosystems.

This is a hands‑on cybersecurity leadership role, with a strong focus on protecting a 247 semiconductor manufacturing environment.

The successful candidate should bring strong enterprise cybersecurity expertise combined with meaningful OT / Industrial Cybersecurity experience and the ability to establish the current security maturity, identify critical gaps, define the target state and drive a measurable 35 year cybersecurity roadmap.

Key Responsibilities

Cybersecurity Strategy & GRC

• Assess cybersecurity maturity across IT, OT, manufacturing systems, applications, cloud, infrastructure and third parties.
• Establish the cybersecurity maturity baseline, target state, KPIs/KRIs and risk-based roadmap.
• Own cyber-risk registers, remediation plans, exception management and leadership reporting.
• Support ISO/IEC 27001 / ISMS, audit readiness, customer assessments and continuous improvement.

IT & Enterprise Cybersecurity

• Lead security across IAM, PAM, MFA, EDR, SIEM/SOC, network, endpoint, cloud, vulnerability management, application/API security, data protection and incident response.
• Define and maintain enterprise IT/OT cybersecurity architecture and security standards.
• Embed security‑by‑design into new applications, infrastructure, integrations and technology initiatives.

OT / Manufacturing Cybersecurity

• Build and lead the OT security program covering:
  • IT/OT network segmentation
  • Industrial DMZ
  • OT asset visibility
  • OT monitoring and threat detection
  • Secure vendor remote access
  • Legacy‑system risk management
  • OT vulnerability and patch management
  • Removable‑media controls
  • Backup and cyber recovery
• Balance cybersecurity controls with production uptime, equipment constraints, safety and manufacturing continuity.

Semiconductor Manufacturing & Equipment Security

• Secure critical manufacturing environments, including MES, QMS/SPC/PLM, test and traceability systems, CIM/EAP, SECS/GEM, equipment integrations and host systems.
• Establish cybersecurity requirements covering equipment hardening, OS support, access control, network security, malware protection, logging, patching, firmware, vendor access and recovery.
• Apply relevant semiconductor equipment‑security practices including SEMI E187 / SEMI E188.
• Partner with Manufacturing, Engineering, Automation, Equipment and IT teams to protect production‑critical systems, including Siemens Opcenter MES and factory integrations.

Data, IP, Privacy & Regulatory Security

• Protect intellectual property, engineering/process data, manufacturing data, source code, customer information and other sensitive assets.
• Strengthen DLP, data classification, encryption, access controls and insider‑risk management.
• Support India DPDP readiness and CERT‑In cybersecurity incident reporting requirements.

Security Operations & Cyber Resilience

• Establish effective 247 IT/OT monitoring and incident response.
• Drive ransomware, OT compromise, data‑breach and privileged‑account response playbooks.
• Strengthen backup protection, disaster recovery, cyber recovery and restoration readiness.

Third‑Party & Supply‑Chain Security

• Establish security requirements for OEMs, system integrators, cloud providers, MSSPs/MDR providers and technology vendors.
• Strengthen third‑party risk assessment, secure remote access, contractual cybersecurity requirements and supplier accountability.

Required Experience

• 12 - 15+ years of progressive cybersecurity experience.
• Strong experience in enterprise cybersecurity, including IAM/PAM, SOC/SIEM, network security, vulnerability management, incident response, security architecture and cyber resilience.
• Meaningful OT / Industrial Cybersecurity experience is mandatory.
• Experience securing manufacturing or industrial environments where availability and production continuity are critical.
• Experience developing cybersecurity maturity assessments, target‑state architectures and multi‑year security roadmaps.
• Strong experience managing cybersecurity teams, vendors, MSSPs/MDR providers and specialist partners.
• Ability to communicate cybersecurity risks and investment priorities effectively to senior management.

Candidates with experience in one or more of the following will be strongly preferred:

• Semiconductor / OSAT / Fab / Assembly & Test
• Advanced packaging or semiconductor manufacturing
• SEMI E187 / SEMI E188
• ISA/IEC 62443
• OT network segmentation / Industrial DMZ
• Siemens Opcenter or equivalent MES
• SECS/GEM, CIM, EAP and equipment connectivity
• Manufacturing equipment cybersecurity
• Greenfield factory cybersecurity
• Ransomware resilience and OT cyber recovery
• ISO/IEC 27001 / ISMS implementation
• Data/IP protection and insider‑risk programs

Preferred Certifications

CISSP | CISM | CISA | CRISC | GICSP | ISA/IEC 62443 | ISO/IEC 27001 Lead Implementer / Lead Auditor | CCSP | GIAC

Certifications are desirable, but proven IT/OT cybersecurity leadership and manufacturing security experience will carry greater weight.

Frameworks & Standards

Exposure to relevant frameworks and standards such as:

NIST CSF | NIST OT Security | ISA/IEC 62443 | SEMI E187/E188 | ISO/IEC 27001 | CIS Controls | MITRE ATT&CK / ATT&CK for IC S | Zero Trust

Candidate Profile

We are specifically looking for someone who can:

• Operate effectively across enterprise IT and factory OT.
• Understand the relationship between cybersecurity, manufacturing uptime and business continuity.
• Build security architecture rather than only manage compliance.
• Work credibly with MES, Automation, Equipment, Engineering, Infrastructure, Applications and business teams.
• Technically challenge OEMs, system integrators and cybersecurity partners.
• Translate complex cyber risks into clear business language.
• Lead confidently through major cybersecurity incidents.
• Build a measurable, resilient and risk‑based cybersecurity operating model.

Position: Lead Cybersecurity & GRC (IT/OT Security)

Position Code: CG_IT_Sec_09

Location: Sanand, Gujarat