Lead Cyber Security

Role Purpose :

The role will be responsible for driving Dabur's enterprise cybersecurity operations and strengthening its overall security posture across infrastructure, network, endpoint, identity, cloud, applications, data and OT/plant environments.

The role will work closely with the CISO, CIO, internal IT teams and cybersecurity partners/MSSPs, with strong accountability for cyber incident management, vulnerability remediation, security controls and partner performance.

Key Responsibilities :

Security Operations & Incident Management :

- Oversee SOC/SIEM, EDR/XDR, threat monitoring and incident response.

- Ensure timely investigation, containment, RCA, remediation and escalation of critical incidents.

Cybersecurity Partner Management :

- Manage SOC/MSSP and other security partners against defined SLAs, KPIs and deliverables.

- Conduct performance reviews, challenge findings and ensure identified risks are driven through closure.

Vulnerability Management & Penetration Testing :

- Own enterprise vulnerability management and coordinate VA/PT, network/infrastructure penetration testing and application security assessments, ensuring critical/high vulnerabilities are remediated within agreed timelines.

Infrastructure, Endpoint & Identity Security :

- Strengthen security controls across endpoints, servers, networks and identity, including EDR/XDR, encryption, MFA, privileged access, segmentation and secure remote access.

Cloud & Application Security :

- Assess cloud, SaaS, applications and new digital initiatives for cybersecurity risks and drive security-by-design practices with application and infrastructure teams.

OT / Plant Cybersecurity :

- Work with plant, engineering and IT teams to strengthen manufacturing/OT cybersecurity, including IT/OT segmentation, access controls, vulnerability management and monitoring.

Third-Party Cyber Risk :

- Assess cybersecurity risks related to critical technology vendors and service providers and ensure identified risks are appropriately remediated.

Governance, Risk & Compliance :

- Support the CISO on cybersecurity governance, risk assessments, policies, audits, regulatory requirements and closure of audit/security observations.

Management Reporting :

- Provide regular dashboards to the CISO/CIO covering cyber incidents, vulnerabilities, penetration-test findings, security posture, partner performance, audit observations, OT risks and key remediation actions.

Candidate Profile :

- 8 - 10 years of progressive cybersecurity experience, preferably within a large enterprise, FMCG, manufacturing or distributed business environment.

- Strong experience across security operations, SOC/SIEM, EDR/XDR, vulnerability management, network/endpoint security and identity security.

- Proven experience managing SOC/MSSP and cybersecurity partners, including SLAs, KPIs and escalations.

- Hands-on experience in incident response, VA/PT, penetration testing and vulnerability remediation.

- Good understanding of cloud, application, data and third-party security.

- Exposure to OT/manufacturing cybersecurity will be a strong advantage.

- Ability to translate technical vulnerabilities and incidents into business risks and actionable recommendations for senior management.

Preferred Certifications :

- CISSP / CISM / CCSP / CEH / Security+ or relevant cloud, Microsoft, network or cybersecurity certifications.

Key Competencies :

- Cybersecurity Technical Depth | Ownership & Execution | Incident Management | Partner Management | Risk Assessment | Analytical Thinking | Stakeholder Management | Executive Communication.

Role Expectation :

- The successful candidate should be an execution-focused cybersecurity professional, not solely a GRC profile.

- The individual should be capable of operating as the CISO's key operational cybersecurity lead, independently driving security incidents, vulnerability closure, penetration testing, security-control improvements and partner accountability.

Equal Opportunity Employer :

- As a multi-category organization which caters to a wide range of customers across geographies; we believe a diverse workforce is an essential asset to cater to the business environment we operate in.

- As an equal opportunity employer, We at Dabur don't support and accept any kind of discrimination on the ground of colour, race, age, gender, religion, nationality, marital status, sexual orientation, etc.

- We promote and practice equal opportunities for every member of the Dabur family.

Skills

IT Security Strategy, Cyber Security, Security Protocols, Cloud Security, Applications Security, Security Operations Center, Incident Management, SIEM, IT Risk, IT Compliance, Vulnerability Management