Manager – Cyber Security | 7–10 Yrs | Raipur

nHRMS Inc.; Raipur; Presencial; INR 1.500.000 - 2.500.000; Tempo integral

Resumo da vaga

N Human Resources & Management Systems in Raipur seeks a Manager – Cyber Security to lead cybersecurity governance, risk management and technical security across corporate offices, plants and locations. The role coordinates with IT and operations to strengthen controls and incident response.

The candidate should have 7–10 years in IT security, with manufacturing or multi-location experience preferred, and a Bachelor’s degree in CS/IT/Cybersecurity.

Qualificações

• 7–10 years in IT security/cybersecurity with security operations, risk management and infrastructure security.
• Experience in manufacturing, industrial or multi-location organisations preferred.
• Bachelor's degree in CS/IT/Cybersecurity; postgraduate qualification is an advantage.
• Certifications (advantage): CISSP, CISM, CISA, CEH, ISO 27001 Lead Implementer / Lead Auditor or equivalent.

Responsabilidades

• Develop, implement and monitor cybersecurity policies, standards, procedures and control frameworks.
• Monitor and coordinate vulnerability assessments, patch management and incident response.
• Establish security governance mechanisms and risk registers for management reporting.
• Secure networks, servers, endpoints, cloud environments and business applications.
• Assess cyber risks in plant networks and OT environments, with cross-functional collaboration.
• Ensure compliance with cybersecurity, information security and data protection requirements.
• Lead awareness programmes and security dashboards for periodic reporting.

Conhecimentos

Network security

Endpoint protection/EDR

SIEM

Identity and access management

Data protection

Cloud security

Disaster recovery

Incident response

Threat modeling

Communication with stakeholders

Formação

Bachelor's degree in Computer Science/IT/Cybersecurity

Ferramentas

CISSP/CISM/CISA CEH

ISO 27001

Descrição da vaga

N Human Resources & Management Systems | Full time

Manager – Cyber Security | 7–10 Yrs | Raipur

Location: Head Office, Raipur (scope covers corporate offices, plants and other business locations)
Reports to: Head – IT

Role Purpose
The Manager – Cyber Security will develop, implement and monitor cybersecurity policies, frameworks and controls to protect the organisation's IT infrastructure, business applications, networks, data and manufacturing‑related digital systems. The role focuses on identifying and mitigating cyber risks, regulatory compliance, managing security incidents, strengthening access controls and building a security‑conscious culture. The incumbent will work closely with IT, Information Systems, business functions, plant operations and external technology partners.

Cybersecurity Governance and Risk Management

• Develop, implement and periodically review cybersecurity policies, standards, procedures and control frameworks.
  
• Conduct cybersecurity risk assessments, identify vulnerabilities and implement mitigation measures.
  
• Establish security governance mechanisms and monitor adherence to approved policies.
  
• Maintain a cybersecurity risk register and report significant risks to management.
  

Network, Infrastructure and Endpoint Security

• Secure corporate networks, servers, endpoints, cloud environments and business applications.
  
• Implement and monitor firewalls, endpoint protection, IDS/IPS and other security solutions.
  
• Coordinate vulnerability assessments, penetration testing, patch management and remediation.
  
• Strengthen network segmentation and secure remote access to critical systems.
  

Data Protection and Access Management

• Implement data classification, encryption, backup protection and DLP controls.
  
• Establish role‑based access controls, privileged access management and periodic user‑access reviews.
  
• Ensure timely provisioning, modification and revocation of access for employees, consultants and third parties.
  
• Protect confidential business, financial and employee information from unauthorised access or disclosure.
  

Security Operations and Incident Response

• Monitor security alerts, investigate suspicious activity and coordinate incident response.
  
• Develop and maintain incident response procedures, escalation mechanisms and recovery plans.
  
• Coordinate root‑cause analysis, corrective actions and post‑incident reviews.
  
• Ensure backup, disaster recovery and business continuity arrangements for critical systems.
  

Manufacturing and OT Security

• Assess cyber risks in plant networks, industrial control systems and connected manufacturing equipment.
  
• Work with plant IT and operations to strengthen OT security with minimal disruption to production.
  
• Implement controls for industrial network segmentation, remote vendor access and secure configurations.
  
• Protect critical production systems against malware, ransomware and unauthorised access.
  

Compliance, Audit and Vendor Management

• Ensure adherence to cybersecurity, information security, data protection and regulatory requirements.
  
• Coordinate internal and external IT security audits and close observations on time.
  
• Evaluate cyber risks from vendors, service providers and third‑party integrations.
  
• Maintain security documentation, audit evidence, incident records and compliance reports.
  

Awareness and Continuous Improvement

• Run cybersecurity awareness programmes and phishing simulations.
  
• Develop measurable security improvement plans and track implementation.
  
• Evaluate emerging threats, security technologies and industry best practices.
  
• Prepare periodic cybersecurity dashboards and management reports.
  

Requirements

Education: Bachelor's degree in Computer Science, IT, Cybersecurity or a related discipline. A relevant postgraduate qualification is an advantage.

Experience: 7–10 years in IT security / cybersecurity, including security operations, risk management and infrastructure security. Experience in manufacturing, industrial or multi‑location organisations preferred.

Certifications (advantage): CISSP, CISM, CISA, CEH, CompTIA Security+, ISO 27001 Lead Implementer / Lead Auditor or equivalent.

Technical skills

• Network security, firewalls, endpoint protection / EDR, SIEM and security monitoring
  
• Vulnerability management, incident response, identity and access management
  
• Encryption, data protection and secure configuration
  
• Information security frameworks, cybersecurity audits, risk assessments and regulatory requirements
  
• Cloud security, disaster recovery, third‑party risk, OT/ICS security and business continuity planning
  
• Strong analytical, troubleshooting and risk assessment skills
  
• Ability to coordinate cross‑functional incident response teams
  
• Effective communication and stakeholder management
  
• Strong documentation, reporting and audit management
  
• High integrity, confidentiality and attention to detail