About this role
Cybersecurity Strategy, Governance & Compliance
• Develop, implement, and continuously enhance cybersecurity policies, standards, frameworks, and operational procedures across the business. • Establish cybersecurity governance mechanisms and drive periodic cybersecurity performance reviews with business leadership. • Define cyber KPIs, KRIs, scorecards, and reporting frameworks. • Ensure compliance with cybersecurity regulations, customer requirements, contractual obligations, and industry standards. • Maintain cyber risk registers and monitor closure of identified risks and audit observations.
Cyber Hygiene & Technology Controls
• Govern and continuously improve cyber hygiene controls across all operational sites. • Ensure effective Identity & Access Management (IAM), Privileged Access Management (PAM), Multi-Factor Authentication (MFA), and user access governance. • Drive endpoint security, anti-virus management, security patch deployment, and operating system/application security updates. • Manage backup infrastructure, restoration testing, and cyber recovery controls. • Ensure OEM-supported security configurations and technology lifecycle compliance across critical systems.
Operational Technology (OT) Security
• Develop and implement cybersecurity controls for Operational Technology environments including BMS, DCIM, IBMS, EPMS, CCTV, Access Control Systems, PLCs, and Building Automation Systems. • Ensure secure integration and segregation of IT and OT networks. • Lead OT vulnerability assessments, security audits, and remediation programs. • Collaborate with Operations, Engineering, and OEM partners to strengthen resilience of mission-critical operational systems.
Network & Endpoint Security
• Manage enterprise and data center network security architecture. • Govern firewalls, IDS/IPS, NAC, VPNs, secure remote access, network segmentation, and threat detection controls. • Implement and manage Endpoint Detection & Response (EDR/XDR) solutions. • Continuously monitor network and endpoint security posture and drive corrective actions.
Cybersecurity Incident Response & Crisis Management
• Lead cybersecurity incident detection, investigation, containment, eradication, and recovery activities. • Develop and maintain incident response plans, cyber playbooks, escalation matrices, and response procedures. • Conduct root cause analysis and implement preventive and corrective actions. • Coordinate with leadership, OEMs, customers, service providers, and regulatory agencies during cybersecurity incidents. • Conduct cyber crisis simulations, tabletop exercises, and business continuity testing.
Cyber Risk Management & Vulnerability Management
• Conduct periodic cyber risk assessments for infrastructure, applications, networks, OT systems, and critical business processes. • Lead vulnerability assessments, penetration testing, security reviews, and threat exposure assessments. • Prioritize and drive remediation of identified vulnerabilities within defined timelines. • Monitor emerging cyber threats and ensure timely mitigation of associated risks.
Cybersecurity Solutions & Technology Deployment
• Evaluate, recommend, and implement cybersecurity technologies aligned with business and operational requirements. • Drive deployment and lifecycle management of SIEM, SOAR, PAM, EDR/XDR, threat intelligence, vulnerability management, and other cybersecurity platforms. • Collaborate with digital, automation, infrastructure, and project teams for integration of secure technologies.
Cybersecurity Audits & Assurance
• Lead internal and external cybersecurity audits, assessments, certifications, and customer security reviews. • Ensure readiness and compliance with standards such as ISO 27001, NIST Cybersecurity Framework, CIS Controls, and other relevant industry practices. • Maintain cybersecurity documentation, evidence repositories, and compliance records.
Vendor & Third-Party Cyber Risk Management
• Conduct cybersecurity assessments of OEMs, contractors, managed service providers, consultants, and third-party vendors. • Review cybersecurity controls and contractual compliance of suppliers and service providers. • Ensure remediation and mitigation of identified third-party cyber risks. • Embed cybersecurity requirements into procurement, contracting, and vendor management processes.
Cybersecurity Awareness & Capability Building
• Develop and implement cybersecurity awareness programs across operational data centers. • Conduct periodic employee awareness campaigns, phishing simulations, training sessions, and security workshops. • Build cybersecurity competency within operations, engineering, facility management, and support functions. • Promote a strong cyber-aware culture across the organization.
ESG, Sustainability & Workplace Safety
• Demonstrate active commitment to AdaniConneX's Environmental, Social & Governance (ESG) objectives and sustainability agenda. • Promote environmentally responsible management of IT and electronic assets, including e-waste disposal and sustainable technology practices. • Comply with all applicable Environment, Health & Safety (EHS) policies, procedures, and statutory requirements. • Participate in safety audits, emergency response drills, incident investigations, and risk mitigation initiatives. • Ensure safe working practices while executing cybersecurity projects and operational activities at data center facilities. • Ensure vendors, contractors, and OEM representatives comply with site safety, environmental, security, and governance requirements.
Key Internal Stakeholders
• Group Chief Information Security Officer • Head – Operations • Information Technology team • Engineering & Projects Teams • Digital & Automation Teams • Facility Management Teams • Risk & Compliance Teams • Procurement Teams • Physical Security Teams • Business Leadership Team
Key External Stakeholders
• OEM & technology Partners and cybersecurity consultants • Clients • Managed Security Service Providers • Audit Agencies • Regulatory Authorities
Educational Qualification
• Bachelor or master’s degree in computer science, Information Technology, Electronics, Cybersecurity, Engineering, or related discipline.
Professional Certifications (Preferred)
• CISSP • CISM • CISA • CEH • CCSP • ISO 27001 Lead Implementer / Lead Auditor • GIAC Certifications • GICSP (OT Security) • Microsoft Security Certifications • Cisco / Palo Alto Security Certifications
Key Competencies Functional Competencies
• Cybersecurity Governance • OT Security • Network Security Architecture • Endpoint Security • Incident Response & Crisis Management • Cyber Risk Management • Vulnerability Management • Security Operations • Third-Party Risk Management • Regulatory Compliance & Audits • Business Continuity & Cyber Resilience
Behavioral Competencies
• Strategic Thinking • Leadership & Team Development • Stakeholder Management • Analytical Problem Solving • Risk-Based Decision Making • Communication & Influencing Skills • Customer Orientation • Continuous Improvement Mindset