Role Purpose :

The role will be responsible for driving Dabur's enterprise cybersecurity operations and strengthening its overall security posture across infrastructure, network, endpoint, identity, cloud, applications, data and OT/plant environments.

The role will work closely with the CISO, CIO, internal IT teams and cybersecurity partners/MSSPs, with strong accountability for cyber incident management, vulnerability remediation, security controls and partner performance.

Key Responsibilities :

Security Operations & Incident Management :

- Oversee SOC/SIEM, EDR/XDR, threat monitoring and incident response.

- Ensure timely investigation, containment, RCA, remediation and escalation of critical incidents.

Cybersecurity Partner Management :

- Manage SOC/MSSP and other security partners against defined SLAs, KPIs and deliverables.

- Conduct performance reviews, challenge findings and ensure identified risks are driven through closure.

Vulnerability Management & Penetration Testing :

- Own enterprise vulnerability management and coordinate VA/PT, network/infrastructure penetration testing and application security assessments, ensuring critical/high vulnerabilities are remediated within agreed timelines.

Infrastructure, Endpoint & Identity Security :

- Strengthen security controls across endpoints, servers, networks and identity, including EDR/XDR, encryption, MFA, privileged access, segmentation and secure remote access.

Cloud & Application Security :

- Assess cloud, SaaS, applications and new digital initiatives for cybersecurity risks and drive security-by-design practices with application and infrastructure teams.

OT / Plant Cybersecurity :

- Work with plant, engineering and IT teams to strengthen manufacturing/OT cybersecurity, including IT/OT segmentation, access controls, vulnerability management and monitoring.

Third-Party Cyber Risk :

- Assess cybersecurity risks related to critical technology vendors and service providers and ensure identified risks are appropriately remediated.

Governance, Risk & Compliance :

- Support the CISO on cybersecurity governance, risk assessments, policies, audits, regulatory requirements and closure of audit/security observations.

Management Reporting :

- Provide regular dashboards to the CISO/CIO covering cyber incidents, vulnerabilities, penetration-test findings, security posture, partner performance, audit observations, OT risks and key remediation actions.

Candidate Profile :

- 8 - 10 years of progressive cybersecurity experience, preferably within a large enterprise, FMCG, manufacturing or distributed business environment.

- Strong experience across security operations, SOC/SIEM, EDR/XDR, vulnerability management, network/endpoint security and identity security.

- Proven experience managing SOC/MSSP and cybersecurity partners, including SLAs, KPIs and escalations.

- Hands-on experience in incident response, VA/PT, penetration testing and vulnerability remediation.

- Good understanding of cloud, application, data and third-party security.

- Exposure to OT/manufacturing cybersecurity will be a strong advantage.

- Ability to translate technical vulnerabilities and incidents into business risks and actionable recommendations for senior management.

Preferred Certifications :

- CISSP / CISM / CCSP / CEH / Security+ or relevant cloud, Microsoft, network or cybersecurity certifications.

Key Competencies :

- Cybersecurity Technical Depth | Ownership & Execution | Incident Management | Partner Management | Risk Assessment | Analytical Thinking | Stakeholder Management | Executive Communication.

Role Expectation :

- The successful candidate should be an execution-focused cybersecurity professional, not solely a GRC profile.

- The individual should be capable of operating as the CISO's key operational cybersecurity lead, independently driving security incidents, vulnerability closure, penetration testing, security-control improvements and partner accountability.

Equal Opportunity Employer :

- As a multi-category organization which caters to a wide range of customers across geographies; we believe a diverse workforce is an essential asset to cater to the business environment we operate in.

- As an equal opportunity employer, We at Dabur don't support and accept any kind of discrimination on the ground of colour, race, age, gender, religion, nationality, marital status, sexual orientation, etc.

- We promote and practice equal opportunities for every member of the Dabur family.