Sr. Manager- IT Security

Tata AutoComp Systems Limited; Pune District; Hybrid; INR 4,000,000 - 6,000,000; Full time

Job summary

Tata AutoComp Systems Limited in Pune invites an experienced Senior Manager IT Security to lead the organization's cybersecurity strategy, governance, and risk management, aligning security with business goals.

You will oversee SOC operations, incident response, cloud security, and secure architectures across on-premise and cloud, driving Zero Trust adoption and ensuring compliance with applicable regulations.

Qualifications

• 5+ years in leadership/managerial roles.
• Experience managing enterprise-scale environments.

Responsibilities

• Define and execute enterprise IT security strategy aligned with business goals.
• Lead SOC operations including monitoring, detection, and response.
• Oversee risk assessments and remediation programs.
• Drive security governance, policies, and ISO/NIST alignment.
• Develop cyber incident response and crisis management plans.
• DriveZero Trust architecture adoption.
• Manage vendor risk and third-party security.
• Present security posture to senior leadership and align budgets.

Skills

Leadership

Security governance

Risk management

SOC operations

Incident response

Cloud security

Zero Trust

IAM / PAM

VAPT

Regulatory compliance

Education

CISSP

CISM

CISA

CCSP

CCSK

CEH

Tools

IDS/IPS

EDR/XDR

PAM

DLP

CSPM

Firewalls

Job description

Role & responsibilities

The Senior Manager IT Security is responsible for leading the organizations cybersecurity strategy, operations, and risk management initiatives. This role ensures the protection of enterprise IT assets, applications, networks, and data against cyber threats, while aligning security with business objectives and regulatory requirements.

1. Security Strategy & Governance
   • Define and execute enterprise IT security strategy aligned with business goals.
   • Establish and maintain security governance frameworks, policies, and standards.
   • Ensure alignment with global standards such as ISO 27001, NIST, CIS Controls.
   • Drive continuous improvement of the organizations security posture
2. Risk Management & Compliance (across the Business Units of Tata AutoComp)
   • Lead enterprise-wide risk assessments and mitigation planning
   • Manage vulnerability assessment and penetration testing (VAPT) programs.
   • Ensure compliance with regulatory and legal requirements (e.g., DPDP Act).
   • Manage internal and external security audits and ensure closure of findings.
3. Security Operations
   • Oversee Security Operations Center (SOC) functions including monitoring, detection, and response.
   • Define and track KPIs such as MTTD, MTTR, and incident severity.
   • Enhance threat intelligence capabilities and proactive defense mechanisms.
   • Ensure 24x7 monitoring of security events and incidents.
4. Incident Response & Crisis Management
   • Lead cyber incident response planning and execution.
   • Coordinate with internal teams and external agencies during major incidents.
   • Conduct root cause analysis (RCA) and implement corrective measures.
   • Develop and test cyber crisis and business continuity plans.
5. Security Architecture & Engineering
   • Define secure architecture for enterprise IT systems (on-premise and loud).
   • Implement / Manage controls across:
     • o Network security (firewalls, IDS/IPS)
     • o Endpoint security (EDR/XDR)
     • o Identity & Access Management (IAM, PAM)
     • o Data security (DLP, encryption)
   • Drive Zero Trust architecture adoption.
6. Cloud & Digital Security
   • Ensure secure adoption of cloud platforms (Azure, AWS).
   • Oversee cloud security posture management (CSPM) and workload protection.
   • Ensure secure APIs, applications, and DevSecOps pipelines.
7. Third-Party & Vendor Risk Management
   • Assess and manage risks from third-party vendors and partners.
   • Implement vendor security assessment frameworks.
   • Ensure contractual security requirements are enforced.
8. Leadership & Stakeholder Management
   • Lead and mentor cybersecurity teams.
   • Collaborate with IT, business units, HR, Admin, legal, and compliance teams
   • Present security posture and risk insights to senior leadership.
   • Manage budgets and strategic security investments
9. Awareness & Training
   • Drive organization-wide security awareness programs.
   • Conduct phishing simulations and user training.
   • Promote a security-first culture across the enterprise

Preferred candidate profile

1218 years of experience in IT security, with:

• o 5+ years in leadership/managerial roles
• o Experience managing enterprise-scale environments

ISO 27001 Lead Implementer / Auditor

Certifications (Preferred)

• CISSP (Highly preferred)
• CISM / CISA
• CCSP / CCSK
• CEH / OSCP