Senior Manager – Cyber Security

Tata Consumer Products; Bengaluru; On-site; INR 4,000,000 - 6,000,000; Full time

Job summary

Tata Consumer Products in Bengaluru seeks a senior leader to strengthen enterprise cybersecurity governance, risk management and resilience.

Qualifications

• Experience in cybersecurity governance, risk management, assurance and compliance.
• Ability to translate cyber risks into business impact and executive insights.
• Strong knowledge of ISO 27001, NIST CSF and regulatory expectations.
• Experience in audits, regulatory assessments and remediation programs.

Responsibilities

• Lead the enterprise Cyber Security Governance and Risk Management program with frameworks, policies and procedures.
• Drive the Cyber Security Strategy and multi-year security roadmap.
• Establish cyber risk identification, assessment, treatment and executive reporting mechanisms.
• Oversee IAM/PAM, vulnerability management, endpoint security, cloud security and incident management.
• Lead third-party cybersecurity risk management, audits and remediation tracking.
• Support cyber incident governance, business continuity and cyber resilience initiatives.
• Lead AI Governance and AI Risk Management including AI controls and risk assessments.

Skills

Cybersecurity governance

Risk management

Compliance

Executive reporting

Tools

GRC platforms

Job description

How does this Job align to our Strategy?

This role aligns with TCPL's strategic pillar of Drive Digital and Innovation and Create Future Ready Organisation by strengthening enterprise cybersecurity governance, risk management, assurance and resilience. The role enables secure digital transformation, protects critical business assets, supports regulatory compliance and provides leadership-level visibility on cyber risks and control effectiveness.

What are the Key Deliverables in this role?

• Support risk-based cybersecurity investment decisions by providing visibility on cyber risks, maturity gaps and control priorities.
• Drive governance over cybersecurity programs to ensure timely delivery, value realization and effective utilization of security investments.
• Reduce potential financial exposure from cyber incidents, audit gaps, regulatory non-compliance and third-party security failures.

Customer Service

• Enable secure and trusted digital services for internal and external stakeholders through effective cybersecurity governance.
• Partner with business, IT and digital teams to embed cybersecurity requirements into business and technology initiatives.
• Provide timely cyber risk insights, governance inputs and recommendations to support leadership decision-making.

Internal Processes

• Lead the enterprise Cyber Security Governance and Risk Management program, including frameworks, policies, standards and procedures.
• Drive development and execution of the Cyber Security Strategy and multi-year security roadmap.
• Establish cyber risk identification, assessment, treatment, acceptance, monitoring and executive reporting mechanisms.
• Drive cybersecurity maturity assessments using frameworks such as ISO 27001, NIST CSF and relevant regulatory expectations.
• Establish and monitor cyber KPIs, KRIs, dashboards and management reporting for governance forums.
• Provide governance oversight across IAM/PAM, vulnerability management, endpoint security, cloud security, application security, data protection, SOC/SIEM and incident management.
• Lead third-party cybersecurity risk management, audit coordination, compliance reviews and remediation tracking.
• Support cyber incident governance, post-incident reviews, business continuity, disaster recovery and cyber resilience initiatives.
• Lead AI Governance and AI Risk Management, including responsible AI controls, AI risk assessments

Innovation and Learning

• Drive continuous improvement of cybersecurity governance, assurance and risk management processes.
• Promote automation and data-driven reporting for cyber risk, compliance, KPIs and maturity tracking.
• Lead adoption of emerging governance practices in AI security, digital risk, cyber resilience and regulatory compliance.
• Mentor and develop cybersecurity governance team members and service-provider resources.

What are the Critical success factors for the Role?

• Strong experience in cybersecurity governance, risk management, assurance and compliance.
• Ability to translate technical cyber risks into business impact and executive-level insights.
• Strong knowledge of ISO 27001, NIST CSF, cyber risk management and enterprise security controls.
• Experience in managing cyber audits, regulatory assessments, risk registers and remediation programmes.
• Strong stakeholder management skills across IT, business, digital, privacy, legal, risk and audit teams.
• Ability to lead cybersecurity programmes, governance forums, service providers and cross-functional initiatives.
• Strong written and verbal communication skills for management and executive reporting. Mandatory Language Requirements (spoken), if any: English

What are the Desirable success factors for the Role?

• Experience in AI Governance, ISO 42001, privacy, business continuity and cyber resilience.
• Exposure to third-party risk management, security metrics automation and GRC platforms.
• Certifications such as CISM, CRISC, ISO 27001 Lead Auditor / Lead Implementer, or ISO 42001 preferred.
• Experience in large, distributed or consumer-focused enterprises would be an advantage.