Senior Manager - IT Security

Key Responsibilities The Senior Manager IT Security is responsible for leading the organization s cybersecurity strategy, operations, and risk management initiatives. This role ensures the protection of enterprise IT assets, applications, networks, and data against cyber threats, while aligning security with business objectives and regulatory requirements. 1. Security Strategy Governance Define and execute enterprise IT security strategy aligned with business goals. Establish and maintain security governance frameworks, policies, and standards. Ensure alignment with global standards such as ISO 27001, NIST, CIS Controls. Drive continuous improvement of the organization s security posture 2. Risk Management Compliance (across the Business Units of Tata AutoComp) Lead enterprise-wide risk assessments and mitigation planning Manage vulnerability assessment and penetration testing (VAPT) programs. Ensure compliance with regulatory and legal requirements (e.g., DPDP Act). Manage internal and external security audits and ensure closure of findings. 3. Security Operations Oversee Security Operations Center (SOC) functions including monitoring, detection, and response. Define and track KPIs such as MTTD, MTTR, and incident severity. Enhance threat intelligence capabilities and proactive defense mechanisms. Ensure 24x7 monitoring of security events and incidents. 4. Incident Response Crisis Management Lead cyber incident response planning and execution. Coordinate with internal teams and external agencies during major incidents. Conduct root cause analysis (RCA) and implement corrective measures. Develop and test cyber crisis and business continuity plans. 5. Security Architecture Engineering Define secure architecture for enterprise IT systems (on-premise and loud). Implement / Manage controls across: o Network security (firewalls, IDS/IPS) o Endpoint security (EDR/XDR) o Identity Access Management (IAM, PAM) o Data security (DLP, encryption) Drive Zero Trust architecture adoption. 6. Cloud Digital Security Ensure secure adoption of cloud platforms (Azure, AWS). Oversee cloud security posture management (CSPM) and workload protection. Ensure secure APIs, applications, and DevSecOps pipelines. 7. Third-Party Vendor Risk Management Assess and manage risks from third-party vendors and partners. Implement vendor security assessment frameworks. Ensure contractual security requirements are enforced. 8. Leadership Stakeholder Management Lead and mentor cybersecurity teams. Collaborate with IT, business units, HR, Admin, legal, and compliance teams Present security posture and risk insights to senior leadership. Manage budgets and strategic security investments 9. Awareness Training Drive organization-wide security awareness programs. Conduct phishing simulations and user training. Promote a security-first culture across the enterprise Qualification Bachelor s/Master s in Computer Science, IT, Cybersecurity, or related field Experience Experience: 12 18 years of experience in IT security, with: o 5+ years in leadership/managerial roles o Experience managing enterprise-scale environments Additional Requirement Leadership Skills Strategic thinking and decision-making Strong communication and stakeholder management Crisis handling and problem-solving abilities Capability to lead cross-functional teams Certifications (Preferred) CISSP (Highly preferred) CISM / CISA CCSP / CCSK CEH / OSCP Key Performance Indicators (KPIs) Reduction in security incidents and risk exposure Incident response effectiveness (MTTD / MTTR) Compliance audit success rate Vulnerability remediation timelines Security awareness maturity level Knowledge of AI/ML in cybersecurity Exposure to DevSecOps and automation Experience in regulated industries (BFSI, Manufacturing, Pharma) ISO 27001 Lead Implementer / Auditor Experience with Zero Trust implementation Disclaimer: This job posting has been aggregated from external source. Role details, content, and availability are subject to change. Applicants are advised to confirm the latest information directly on the company website before applying.