Product Owner - CyberResilience

HCLTech; Chennai District; On-site; INR 4,500,000 - 7,500,000; Full time

Job summary

HCLTech is seeking a junior-CISO-calibre leader to own the Cyber Resilience portfolio end-to-end, spanning posture, defense, identity, cloud, and recovery differentiators. You will front CISOs as a peer, price and presell the portfolio, and guide solution architects and partners to close resilience-focused deals.

You will define commercial constructs, SLAs, and service catalog tiers in collaboration with finance, legal, and delivery, and manage regulatory, audit, and cyber-insurance narratives

Qualifications

• Must comprehend full security lifecycle: prevent- detect- respond- recover.
• Understand zero trust architecture and identity protection concepts.
• Experience with cyber risk quantification, posture, and incident readiness.
• Ability to lead cross-functional security programs and presales.
• Familiarity with regulatory standards (NIST CSF, ISO 27001, DORA).

Responsibilities

• Own end-to-end roadmap for four Cyber Resilience propositions and pricing.
• Lead presales and CISO-facing activities, shaping RFPs and responses.
• Define commercial constructs, SLAs, and service catalog tiers with finance/legal.
• Direct solution architects and partners to align build with deal commitments.
• Manage regulatory, audit, and cyber-insurance narratives and risk posture.
• Coordinate with delivery partners for back-to-back contracting and portfolio optimization.

Skills

Security domain breadth

Zero trust

Threat & exposure management

Security operations oversight

Cloud security

Cyber recovery & resilience

Productization & pricing

Regulatory & insurance readiness

AI security & credentials

Tools

Microsoft Sentinel

Splunk

CrowdStrike/Defender XDR

Tenable One

Qualys

Rapid7

Wiz

Defender for Cloud

Rubrik/Commvault

Job description

Owns the Cyber Resilience portfolio end-to-end — a junior-CISO-calibre profile spanning the full security story (posture, defense, identity, cloud) plus the recovery/resilience differentiator. Fronts CISOs as a peer, and builds, prices and presells the portfolio as builder + presales dual-hat.

Key Responsibilities

• Own the end-to-end roadmap, P&L input, and go-to-market narrative for all four Cyber Resilience propositions (Posture, Defense, Recovery, Assurance) until deal volume justifies dedicated proposition-level Product Owners.
• Act as lead presales solutioner and CISO-facing voice on cyber resilience pursuits — shaping RFP/bid responses, running technical win themes, and closing recovery- and resilience-heavy deals alongside account teams.
• Define and evolve the portfolio's commercial constructs — service catalogue, tiering, SLAs/service credits, at-risk and resource-unit (RU) pricing — in partnership with finance, legal, and delivery.
• Direct and prioritize the technical pool (Solution Architect and partner delivery teams) against a single backlog, translating deal and audit commitments into build decisions.
• Own the regulatory, audit, and cyber-insurance narrative — DORA/operational-resilience evidence, SOX/PCI/ISO posture, and insurer/underwriter conversations on exposure and recoverability.
• Manage the strategic partner bench (recovery platform vendors, IR retainers, SOC/MDR delivery partners) — sourcing and back-to-back contracting — while building the case for proposition-level splits.

Hard Skills

• Security domain breadth (prevent → detect → respond → recover) — vulnerability/exposure and posture management, SOC/MDR/EDR operating constructs, incident response and DFIR — junior-CISO span across the full lifecycle.
• Security architecture & zero trust — NIST SP 800-207 zero trust, network segmentation/containment design, AD/Entra attack paths and privileged-access design; SASE/SSE awareness.
• Threat & exposure management — CTEM methodology across Tenable One/Qualys/Rapid7-class platforms and CNAPP/CSPM (Wiz, Defender for Cloud); MITRE ATT&CK literacy.
• Security operations oversight — SIEM/XDR ecosystem fluency (Microsoft Sentinel, Splunk, CrowdStrike/Defender XDR), MDR service constructs, detection-maturity assessment — enough to own the offer without running the SOC.
• Cloud security — securing hybrid multi-cloud estates (Azure/AWS/GCP) — posture, identity and workload protection constructs.
• Cyber recovery & resilience engineering — immutable/air-gapped backup, cleanroom recovery, identity recovery (AD/Entra/Okta); Rubrik/Commvault-class platforms; regulated/bank-grade failover and recovery testing.
• Outcome-based commercial design & productization — SLAs and service credits, at-risk and resource-unit (RU) pricing, unit-cost modelling; service catalogue/tiering, build-vs-partner sourcing, back-to-back contracting.
• Regulatory, frameworks & insurance — NIST CSF 2.0, ISO 27001, DORA/operational resilience, SOX/PCI; cyber-insurance readiness and exposure quantification.
• AI security & credentials — securing AI/agents and AgentOps governance (identity, audit, guardrails); CISSP/CCSP-class credential expectation.