Lead - Cybersecurity

Cybersecurity Strategy, Governance & Compliance

• Develop, implement, and continuously enhance cybersecurity policies, standards, frameworks, and operational procedures across the business.


• Establish cybersecurity governance mechanisms and drive periodic cybersecurity performance reviews with business leadership.


• Define cyber KPIs, KRIs, scorecards, and reporting frameworks.


• Ensure compliance with cybersecurity regulations, customer requirements, contractual obligations, and industry standards.


• Maintain cyber risk registers and monitor closure of identified risks and audit observations.

Cyber Hygiene & Technology Controls

• Govern and continuously improve cyber hygiene controls across all operational sites.


• Ensure effective Identity & Access Management (IAM), Privileged Access Management (PAM), Multi-Factor Authentication (MFA), and user access governance.


• Drive endpoint security, anti-virus management, security patch deployment, and operating system/application security updates.


• Manage backup infrastructure, restoration testing, and cyber recovery controls.


• Ensure OEM-supported security configurations and technology lifecycle compliance across critical systems.

Operational Technology (OT) Security

• Develop and implement cybersecurity controls for Operational Technology environments including BMS, DCIM, IBMS, EPMS, CCTV, Access Control Systems, PLCs, and Building Automation Systems.


• Ensure secure integration and segregation of IT and OT networks.


• Lead OT vulnerability assessments, security audits, and remediation programs.


• Collaborate with Operations, Engineering, and OEM partners to strengthen resilience of mission-critical operational systems.

Network & Endpoint Security

• Manage enterprise and data center network security architecture.


• Govern firewalls, IDS/IPS, NAC, VPNs, secure remote access, network segmentation, and threat detection controls.


• Implement and manage Endpoint Detection & Response (EDR/XDR) solutions.


• Continuously monitor network and endpoint security posture and drive corrective actions.

Cybersecurity Incident Response & Crisis Management

• Lead cybersecurity incident detection, investigation, containment, eradication, and recovery activities.


• Develop and maintain incident response plans, cyber playbooks, escalation matrices, and response procedures.


• Conduct root cause analysis and implement preventive and corrective actions.


• Coordinate with leadership, OEMs, customers, service providers, and regulatory agencies during cybersecurity incidents.


• Conduct cyber crisis simulations, tabletop exercises, and business continuity testing.

Cyber Risk Management & Vulnerability Management

• Conduct periodic cyber risk assessments for infrastructure, applications, networks, OT systems, and critical business processes.


• Lead vulnerability assessments, penetration testing, security reviews, and threat exposure assessments.


• Prioritize and drive remediation of identified vulnerabilities within defined timelines.


• Monitor emerging cyber threats and ensure timely mitigation of associated risks.

Cybersecurity Solutions & Technology Deployment

• Evaluate, recommend, and implement cybersecurity technologies aligned with business and operational requirements.


• Drive deployment and lifecycle management of SIEM, SOAR, PAM, EDR/XDR, threat intelligence, vulnerability management, and other cybersecurity platforms.


• Collaborate with digital, automation, infrastructure, and project teams for integration of secure technologies.

Cybersecurity Audits & Assurance

• Lead internal and external cybersecurity audits, assessments, certifications, and customer security reviews.


• Ensure readiness and compliance with standards such as ISO 27001, NIST Cybersecurity Framework, CIS Controls, and other relevant industry practices.


• Maintain cybersecurity documentation, evidence repositories, and compliance records.

Vendor & Third-Party Cyber Risk Management

• Conduct cybersecurity assessments of OEMs, contractors, managed service providers, consultants, and third-party vendors.


• Review cybersecurity controls and contractual compliance of suppliers and service providers.


• Ensure remediation and mitigation of identified third-party cyber risks.


• Embed cybersecurity requirements into procurement, contracting, and vendor management processes.

Cybersecurity Awareness & Capability Building

• Develop and implement cybersecurity awareness programs across operational data centers.


• Conduct periodic employee awareness campaigns, phishing simulations, training sessions, and security workshops.


• Build cybersecurity competency within operations, engineering, facility management, and support functions.


• Promote a strong cyber-aware culture across the organization.

ESG, Sustainability & Workplace Safety

• Demonstrate active commitment to AdaniConneX's Environmental, Social & Governance (ESG) objectives and sustainability agenda.


• Promote environmentally responsible management of IT and electronic assets, including e-waste disposal and sustainable technology practices.


• Comply with all applicable Environment, Health & Safety (EHS) policies, procedures, and statutory requirements.


• Participate in safety audits, emergency response drills, incident investigations, and risk mitigation initiatives.


• Ensure safe working practices while executing cybersecurity projects and operational activities at data center facilities.


• Ensure vendors, contractors, and OEM representatives comply with site safety, environmental, security, and governance requirements.

Key Internal Stakeholders

• Group Chief Information Security Officer


• Head – Operations


• Information Technology team


• Engineering & Projects Teams


• Digital & Automation Teams


• Facility Management Teams


• Risk & Compliance Teams


• Procurement Teams


• Physical Security Teams


• Business Leadership Team

Key External Stakeholders

• OEM & technology Partners and cybersecurity consultants


• Clients


• Managed Security Service Providers


• Audit Agencies


• Regulatory Authorities

Educational Qualification

• Bachelor or master’s degree in computer science, Information Technology, Electronics, Cybersecurity, Engineering, or related discipline.

Professional Certifications (Preferred)

• CISSP


• CISM


• CISA


• CEH


• CCSP


• ISO 27001 Lead Implementer / Lead Auditor


• GIAC Certifications


• GICSP (OT Security)


• Microsoft Security Certifications


• Cisco / Palo Alto Security Certifications

Key Competencies Functional Competencies

• Cybersecurity Governance


• OT Security


• Network Security Architecture


• Endpoint Security


• Incident Response & Crisis Management


• Cyber Risk Management


• Vulnerability Management


• Security Operations


• Third-Party Risk Management


• Regulatory Compliance & Audits


• Business Continuity & Cyber Resilience

Behavioral Competencies

• Strategic Thinking


• Leadership & Team Development


• Stakeholder Management


• Analytical Problem Solving


• Risk-Based Decision Making


• Communication & Influencing Skills


• Customer Orientation


• Continuous Improvement Mindset