Lead - Cybersecurity

Purpose/Objective

The Lead - Cybersecurity is responsible for safeguarding AdaniConneX's operational data center infrastructure by establishing and managing a robust cybersecurity framework covering IT and Operational Technology (OT) environments.
The role will lead cybersecurity governance, cyber risk management, incident response, network and endpoint security, cyber resilience, regulatory compliance, and third-party cybersecurity assurance across multiple operational data centers.
The incumbent will drive a proactive security culture, ensure adherence to cybersecurity policies and standards, strengthen cyber resilience, and support business continuity while enabling safe, secure, sustainable, and compliant data center operations.

Key Responsibilities of Role

Cybersecurity Strategy, Governance & Compliance - Develop, implement, and continuously enhance cybersecurity policies, standards, frameworks, and operational procedures across the business.
- Establish cybersecurity governance mechanisms and drive periodic cybersecurity performance reviews with business leadership.
- Define cyber KPIs, KRIs, scorecards, and reporting frameworks.
- Ensure compliance with cybersecurity regulations, customer requirements, contractual obligations, and industry standards.
- Maintain cyber risk registers and monitor closure of identified risks and audit observations.
Cyber Hygiene & Technology Controls - Govern and continuously improve cyber hygiene controls across all operational sites.
- Ensure effective Identity & Access Management (IAM), Privileged Access Management (PAM), Multi-Factor Authentication (MFA), and user access governance.
- Drive endpoint security, anti-virus management, security patch deployment, and operating system/application security updates.
- Manage backup infrastructure, restoration testing, and cyber recovery controls.
- Ensure OEM-supported security configurations and technology lifecycle compliance across critical systems.
Operational Technology (OT) Security - Develop and implement cybersecurity controls for Operational Technology environments including BMS, DCIM, IBMS, EPMS, CCTV, Access Control Systems, PLCs, and Building Automation Systems.
- Ensure secure integration and segregation of IT and OT networks.
- Lead OT vulnerability assessments, security audits, and remediation programs.
- Collaborate with Operations, Engineering, and OEM partners to strengthen resilience of mission-critical operational systems.
Network & Endpoint Security - Manage enterprise and data center network security architecture.
- Govern firewalls, IDS/IPS, NAC, VPNs, secure remote access, network segmentation, and threat detection controls.
- Implement and manage Endpoint Detection & Response (EDR/XDR) solutions.
- Continuously monitor network and endpoint security posture and drive corrective actions.
Cybersecurity Incident Response & Crisis Management - Lead cybersecurity incident detection, investigation, containment, eradication, and recovery activities.
- Develop and maintain incident response plans, cyber playbooks, escalation matrices, and response procedures.
- Conduct root cause analysis and implement preventive and corrective actions.
- Coordinate with leadership, OEMs, customers, service providers, and regulatory agencies during cybersecurity incidents.
- Conduct cyber crisis simulations, tabletop exercises, and business continuity testing.
Cyber Risk Management & Vulnerability Management - Conduct periodic cyber risk assessments for infrastructure, applications, networks, OT systems, and critical business processes.
- Lead vulnerability assessments, penetration testing, security reviews, and threat exposure assessments.
- Prioritize and drive remediation of identified vulnerabilities within defined timelines.
- Monitor emerging cyber threats and ensure timely mitigation of associated risks.
Cybersecurity Solutions & Technology Deployment - Evaluate, recommend, and implement cybersecurity technologies aligned with business and operational requirements.
- Drive deployment and lifecycle management of SIEM, SOAR, PAM, EDR/XDR, threat intelligence, vulnerability management, and other cybersecurity platforms.
- Collaborate with digital, automation, infrastructure, and project teams for integration of secure technologies.
Cybersecurity Audits & Assurance - Lead internal and external cybersecurity audits, assessments, certifications, and customer security reviews.
- Ensure readiness and compliance with standards such as ISO 27001, NIST Cybersecurity Framework, CIS Controls, and other relevant industry practices.
- Maintain cybersecurity documentation, evidence repositories, and compliance records.
Vendor & Third-Party Cyber Risk Management - Conduct cybersecurity assessments of OEMs, contractors, managed service providers, consultants, and third-party vendors.
- Review cybersecurity controls and contractual compliance of suppliers and service providers.
- Ensure remediation and mitigation of identified third-party cyber risks.
- Embed cybersecurity requirements into procurement, contracting, and vendor management processes.
Cybersecurity Awareness & Capability Building - Develop and implement cybersecurity awareness programs across operational data centers.
- Conduct periodic employee awareness campaigns, phishing simulations, training sessions, and security workshops.
- Build cybersecurity competency within operations, engineering, facility management, and support functions.
- Promote a strong cyber-aware culture across the organization.
ESG, Sustainability & Workplace Safety - Demonstrate active commitment to AdaniConneX's Environmental, Social & Governance (ESG) objectives and sustainability agenda.
- Promote environmentally responsible management of IT and electronic assets, including e-waste disposal and sustainable technology practices.
- Comply with all applicable Environment, Health & Safety (EHS) policies, procedures, and statutory requirements.
- Participate in safety audits, emergency response drills, incident investigations, and risk mitigation initiatives.
- Ensure safe working practices while executing cybersecurity projects and operational activities at data center facilities.
- Ensure vendors, contractors, and OEM representatives comply with site safety, environmental, security, and governance requirements.
Key Internal Stakeholders - Group Chief Information Security Officer - Head – Operations - Information Technology team - Engineering & Projects Teams - Digital & Automation Teams - Facility Management Teams - Risk & Compliance Teams - Procurement Teams - Physical Security Teams - Business Leadership Team Key External Stakeholders - OEM & technology Partners and cybersecurity consultants - Clients - Managed Security Service Providers - Audit Agencies - Regulatory Authorities

Technical Competencies

Cybersecurity Governance,Network Security,Incident Response & Management,Cyber Risk Management,Cybersecurity Compliance & Audit,Business Continuity,Endpoint Security

Qualifications and Experience

Educational Qualification - Bachelor or master’s degree in computer science, Information Technology, Electronics, Cybersecurity, Engineering, or related discipline.
Professional Certifications (Preferred) - CISSP - CISM - CISA - CEH - CCSP - ISO 27001 Lead Implementer / Lead Auditor - GIAC Certifications - GICSP (OT Security) - Microsoft Security Certifications - Cisco / Palo Alto Security Certifications Key Competencies Functional Competencies - Cybersecurity Governance - OT Security - Network Security Architecture - Endpoint Security - Incident Response & Crisis Management - Cyber Risk Management - Vulnerability Management - Security Operations - Third-Party Risk Management - Regulatory Compliance & Audits - Business Continuity & Cyber Resilience Behavioral Competencies - Strategic Thinking - Leadership & Team Development - Stakeholder Management - Analytical Problem Solving - Risk-Based Decision Making - Communication & Influencing Skills - Customer Orientation - Continuous Improvement Mindset