Manager - Cyber Security

Manorama Industries; Raipur, Mahasamund District; On-site; INR 1,500,000 - 2,300,000; Full time

Job summary

Manorama Industries is seeking a Manager - Cyber Security to develop and enforce cybersecurity policies, protect IT and manufacturing systems, and coordinate risk management across IT, operations and vendor ecosystems.

The role emphasizes governance, risk mitigation, access control, data protection, and incident response to sustain business continuity and secure critical processes.

Qualifications

• Strong understanding of cybersecurity principles and enterprise IT infrastructure.
• Experience with network security controls and secure configuration practices.

Responsibilities

• Develop, implement, and monitor cybersecurity policies, standards and controls.
• Identify and mitigate cyber risks and manage security incidents.
• Collaborate with IT, business units, plant operations and external partners to ensure business continuity.

Skills

Cybersecurity principles

Network architecture

Operating systems

SIEM solutions

Endpoint detection and response

Vulnerability management

Access management

Encryption

Data protection

Incident response

Industrial control systems security

Tools

Security monitoring tools

Job description

Role & responsibilities

The Manager - Cyber Security will be responsible for developing, implementing, and monitoring cybersecurity policies, frameworks, and controls to protect the organization's IT infrastructure, business applications, networks, data, and manufacturing-related digital systems. The role will focus on identifying and mitigating cyber risks, ensuring compliance with applicable regulatory requirements, managing security incidents, strengthening access controls, and promoting a security-conscious culture across the organization.

The incumbent will work closely with IT, Information Systems, business functions, plant operations, and external technology partners to ensure business continuity, data confidentiality, system integrity, and the secure functioning of critical business operations.

Cybersecurity Governance and Risk Management

• Develop, implement, and periodically review cybersecurity policies, standards, procedures, and control frameworks.
• Conduct cybersecurity risk assessments, identify vulnerabilities, and implement appropriate mitigation measures.
• Establish security governance mechanisms and monitor adherence to approved policies.
• Maintain a cybersecurity risk register and report significant risks to management.

Network, Infrastructure and Endpoint Security

• Ensure the security of corporate networks, servers, endpoints, cloud environments, and business applications.
• Implement and monitor firewalls, endpoint protection, intrusion detection/prevention systems, and other security solutions.
• Coordinate vulnerability assessments, penetration testing, patch management, and remediation activities.
• Strengthen network segmentation and secure remote access to critical systems.

Data Protection and Access Management

• Implement appropriate data classification, encryption, backup protection, and data-loss prevention controls.
• Establish role-based access controls, privileged access management, and periodic user-access reviews.
• Ensure timely provisioning, modification, and revocation of access for employees, consultants, and third parties.
• Protect confidential business information, financial data, employee records, and other sensitive information from unauthorised access or disclosure.

Security Operations and Incident Response

• Monitor security alerts, investigate suspicious activities, and coordinate responses to cybersecurity incidents.
• Develop and maintain incident response procedures, escalation mechanisms, and recovery plans.
• Coordinate root-cause analysis, corrective actions, and post-incident reviews.
• Ensure appropriate backup, disaster recovery, and business continuity arrangements for critical systems

Preferred candidate profile

Technical Skills

• Strong understanding of cybersecurity principles, network architecture, operating systems, and enterprise IT infrastructure.
• Hands-on knowledge of security monitoring tools, SIEM solutions, endpoint detection and response, vulnerability management, and access management.
• Understanding of encryption, data protection, secure configuration, and incident response methodologies.
• Awareness of industrial control systems and operational technology security in manufacturing environments.