Manager - Cyber Security

Adani Enterprises Limited; Ahmedabad District; On-site; INR 450,000 - 750,000; Full time

Job summary

Adani Enterprises Limited is seeking an OT Cybersecurity Lead to design, implement, and manage the OT cybersecurity program protecting critical industrial assets such as SCADA and PLCs. The role requires deep expertise in OT security and the ability to coordinate with internal and external stakeholders to secure OT environments.

The successful candidate will lead risk assessments, incident response planning, and continuous improvement initiatives, ensuring alignment with regulatory and industry

Qualifications

• Bachelor's degree in CS/IT/Cybersecurity required.
• Advanced degree in Cybersecurity or related field highly desirable.
• 10+ years of overall experience with at least 5 years in OT/ICS security.

Responsibilities

• Lead development, implementation, and maintenance of a comprehensive OT cybersecurity strategy aligned with business goals and security best practices.
• Collaborate with IT, risk management, engineering and operations to secure OT systems and devices.
• Oversee threat detection, analysis, and response procedures for OT-specific cybersecurity incidents.

Skills

OT security

Cybersecurity governance

Incident response

Risk assessment

Education

Bachelor's degree in CS/IT/Cybersecurity

Advanced degree desirable

Job description

JOB DESCRIPTION

About Business

Adani Group: In recent years, we have evolved from a new player in power generation to India’s largest private thermal power producer, with a capacity of 15,250 MW and a 40 MW solar project in Gujarat. It has created a world-class logistics and utility infrastructure portfolio that has a pan-India presence. Adani Group is headquartered in Ahmedabad, in the state of Gujarat, India. Over the years, Adani Group has positioned itself to be the market leader in its logistics and energy businesses focusing on large-scale infrastructure development in India with O & M practices benchmarked to global standards. With four IG-rated businesses, it is the only Infrastructure Investment Grade issuer in India.

Job Purpose

The OT Cybersecurity Lead is responsible for leading the cybersecurity efforts for the organization’s Operational Technology (OT) systems. This includes designing, implementing, and managing the OT cybersecurity strategy to protect critical infrastructure, industrial control systems (ICS), and other OT assets. The role requires deep expertise in OT security, understanding the unique needs and risks associated with industrial systems, and the ability to coordinate and collaborate with various internal and external stakeholders to secure these systems.

OT Cybersecurity Lead

• Lead the development, implementation, and maintenance of a comprehensive OT cybersecurity strategy aligned with business goals and security best practices.
• Work with executive leadership to define OT security priorities and ensure alignment with broader cybersecurity initiatives.
• Stay updated on emerging threats and industry trends to continuously improve the OT cybersecurity program.

Risk Management And Threat Assessment

• Conduct regular risk assessments and vulnerability scans of OT systems and networks, identifying potential security risks.
• Implement strategies to mitigate identified risks and ensure appropriate security measures are in place to protect OT assets.
• Oversee threat detection, analysis, and response procedures for OT-specific cybersecurity incidents.

Incident Response And Recovery

• Lead OT cybersecurity incident response, including detection, containment, and remediation of security incidents in OT environments.
• Collaborate with IT, network, and security operations teams to ensure rapid response to OT security breaches.
• Develop and maintain incident response plans for OT environments, ensuring readiness for both cyber and physical threats.

Collaboration With Cross-Functional Teams

• Collaborate with IT, risk management, engineering, and operations teams to integrate cybersecurity measures into OT systems.
• Work closely with external partners and vendors to ensure secure integration of third-party systems and devices into the OT environment.
• Partner with regulatory and compliance teams to ensure OT security policies adhere to industry standards and regulations.

OT Security Controls And Architecture

• Design and implement network segmentation, access controls, firewalls, and other security measures specific to OT systems.
• Ensure that OT assets, including SCADA, PLCs, and other industrial systems, are properly secured against cyber threats.
• Conduct periodic security reviews and audits to ensure the effectiveness of implemented security controls.

Training And Awareness

• Provide training to OT personnel on cybersecurity best practices and how to identify and mitigate potential security threats.
• Raise awareness of OT cybersecurity risks across the organization and ensure operational teams understand their role in maintaining OT security.

Regulatory Complaince

• Ensure that OT cybersecurity practices comply with relevant industry standards, regulations, and best practices (e.g., NIST, IEC 62443, NERC CIP).
• Lead efforts to maintain OT cybersecurity compliance during audits and assessments.
• Implement cybersecurity policies and controls to meet regulatory and compliance requirements for critical infrastructure.

Continuous Improvement And Innovation

• Drive continuous improvement in OT cybersecurity processes, incorporating lessons learned from past incidents and industry developments.
• Evaluate and implement new security technologies and solutions to protect OT environments from evolving threats.
• Promote a culture of security awareness and resilience within the OT environment.

Key Stakeholders - Internal

• Department Heads
• Legal and Compliance Teams
• Operational Technology and Engineering Team
• System Administrators and Operations
• Procurement and Vendor Management Team
• Facilities Management
• Risk Management Team
• Internal Auditors
• IT Team

Key Stakeholders - External

• Regulatory Bodies
• Industrial Control System (ICS) Vendors
• External Auditors
• Legal Advisors
• Managed Security Service Providers (MSSPs)
• Compliance and Certification Bodies
• Industry Associations
• Government Agencies
• Consultants
• Incident Response Service Providers
• Third-Party OT Solution Providers

Qualifications

Educational Qualification

• Bachelor's degree in Computer Science, Information Technology, Cybersecurity, or a related field.
• Advanced degree (e.g., Master's, MBA) in Cybersecurity, Information Assurance, or a relevant discipline is highly desirable.

Certification

• Industry certifications such as CISSP, CISM, CISA, or specific OT security certifications (e.g., GIAC GICSP, IEC-62443 ,Certified SCADA Security Architect) are highly desirable.

Work Experience (Range Of Years)

• 10+ years of overall experience , with at least 5 years focused on OT or industrial control systems security.