About the Organization :

Our client is a leading and rapidly growing enterprise in the automotive and mobility sector with a strong presence across multiple locations in India. The organization is committed to operational excellence, digital transformation, and delivering world-class customer experiences. With a focus on innovation and technology-driven business operations, the company is investing significantly in strengthening its IT infrastructure, cybersecurity, and end-user services capabilities.

Role Overview :

We are seeking an experienced Cyber Technology Lead to manage and operate the organization's cybersecurity capabilities. Reporting directly to the CISO, this role is responsible for the management of the outsourced Security Operations Centre (SOC), Governance Risk & Compliance (GRC), Web & Email Security, and Operational Technology (OT) Security. The role acts as the primary operational owner of these domains, ensuring that cyber threats are detected, managed, and mitigated across IT and OT environments in line with business risk appetite and regulatory requirements.

Key Responsibilities :

Outsourced SOC Management :

- Act as the primary internal owner and liaison for the outsourced Security Operations Centre (SOC). Manage day to day service delivery against agreed SLAs and KPIs.

- Review and validate SOC outputs including threat alerts, incident reports, and threat intelligence feeds; ensure timely escalation and response for high-severity events.

- Drive continuous improvement of SOC detection capabilities. Collaborate with the SOC provider to tune SIEM rules, use cases and alerting thresholds relevant to Imperial Auto's environment.

- Lead incident response coordination for significant cyber events. Act as the internal bridge between the SOC, IT teams, and CISO during active incidents.

- Conduct regular service reviews with the SOC vendor. Manage contract performance, renewals, and SLA adherence reporting to the CISO.

- Develop and maintain the incident response playbook library in collaboration with the SOC provider. Ensure playbooks reflect current threat landscape and business context.

- Oversee threat hunting and vulnerability intelligence activities provided by the SOC. Ensure findings are tracked and remediated within agreed timelines.

Governance, Risk & Compliance (GRC) :

- Own and maintain the organisation's cybersecurity policy framework. Review, update, and publish policies, standards, and procedures in line with regulatory and business requirements and in consultation with the CISO and IT head.

- Manage the cybersecurity risk register. Conduct regular risk assessments, track residual risks and present risk posture updates to the CISO.

- Lead compliance activities aligned to applicable frameworks including ISO 27001, NIST CSF, DPDP Act, and any sector specific regulatory requirements.

- Coordinate and support internal and external cybersecurity audits. Manage audit findings, remediation plans, and evidence collection.

- Drive third party and supplier cyber risk assessments. Manage vendor security questionnaires and maintain a supplier risk register.

- Develop and deliver security awareness training and phishing simulation programmes across the organisation.

- Track and report on compliance metrics, risk KPIs, and GRC programme status to the CISO on a regular cadence.

Web & Email Security :

- Own and manage web security controls including Secure Web Gateway (SWG), URL filtering, SSL inspection, and proxy policies across all sites.

- Administer and optimise email security platforms including Secure Email Gateway (SEG), anti-phishing, anti-spoofing, and email authentication controls (DMARC, DKIM, SPF).

- Monitor and respond to web and email-based threats. Investigate blocked content anomalies and refine policies to balance security and business productivity.

- Manage DLP (Data Loss Prevention) policies integrated within web and email channels. Investigate policy violations and adjust rules to reduce false positives.

- Stay current on web and email threat vectors (BEC, phishing, malware delivery). Ensure controls and configurations are updated proactively.

- Coordinate with the SOC provider on web and email threat intelligence integration into SIEM use cases and alert correlation.

OT Security (Operational Technology) :

- Own the OT/ICS cybersecurity programme for Imperial Auto's plant and manufacturing environments. Develop and maintain the OT security roadmap aligned to IEC 62443 or NIST SP 800-82 frameworks.

- Assess and manage OT/IT network segmentation. Ensure appropriate boundaries between corporate IT and plant OT networks (DMZ, data diodes, conduits).

- Conduct OT asset discovery and maintain an inventory of ICS/SCADA systems, PLCs, HMIs, and industrial network components across all plant sites.

- Identify and manage OT specific vulnerabilities. Coordinate patching and compensating controls in collaboration with plant operations and engineering teams.

- Monitor OT network traffic for anomalies using OT specific security monitoring tools (e.g. Claroty, Dragos, Nozomi Networks, or equivalent).

- Act as the cybersecurity advisor for OT related projects, new plant installations, and equipment upgrades. Ensure security requirements are embedded at design stage.

- Develop and test OT specific incident response and recovery procedures. Coordinate with plant operations teams to ensure minimal production disruption during cyber events.

- Manage relationships with OT equipment vendors and ICS integrators to address security requirements in maintenance and support agreements.

Cross-Functional Collaboration & Reporting :

- Partner with the Head of IT Infrastructure & End User Services to ensure IT and OT security controls are operationally integrated and consistently applied.

- Provide regular reporting to the CISO on SOC performance, GRC status, threat landscape, and OT security posture.

- Support the CISO in presenting cybersecurity risk and programme updates to leadership and board stakeholders as required.

- Contribute to the annual cybersecurity strategy and budget planning process.

Qualifications & Experience :

- Cybersecurity experience, with demonstrated depth across at least three of the four responsibility areas.

- Experience managing an outsourced SOC or MSSP relationship, including SLA management and incident escalation.

- Solid understanding of GRC frameworks : ISO 27001, NIST CSF, DPDP Act; experience managing compliance programmes or audits.

- Hands on experience with Secure Web Gateway, Secure Email Gateway, and email authentication technologies (DMARC, DKIM, SPF, DMARC reporting).

- OT/ICS security experience is strongly preferred, including familiarity with IEC 62443, NIST SP 800-82, or plant network environments.

- Experience working in manufacturing, automotive, energy, or industrial sectors is advantageous.

- Strong incident response skills. Able to coordinate cross functional response under pressure.

- Excellent communication skills. Able to articulate technical risk clearly to non technical stakeholders.

- Relevant certifications desirable : CISSP, CISM, ISO 27001 Lead Implementer/Auditor, GICSP (ICS/SCADA), or equivalent.

Technical Competencies :

- SOC & SIEM : Splunk, Microsoft Sentinel, IBM QRadar, or equivalent SOAR platforms.

- GRC : Archer, ServiceNow GRC, OneTrust, or equivalent risk/compliance platforms.

- Web Security : Zscaler, Symantec ProxySG, Forcepoint, Cisco Umbrella.

- Email Security : Proofpoint, Mimecast, Microsoft Defender for Office 365; DMARC/DKIM/SPF.

- OT Security : Claroty, Dragos, Nozomi Networks; IEC 62443, NIST SP 800-82; Purdue Model / ISA-95 network architecture.

What We Offer :

- Challenging environment facilitating learning.

- Competitive salary commensurate with experience.

- High-impact role with ownership of critical cybersecurity domains across a growing organisation.

- Direct access to and collaboration with the CISO and senior leadership.

- Ongoing professional development and certification support.