Lead Cybersecurity & GRC IT - OT Security

Position : Lead Cybersecurity & GRC | IT/OT Security

CG Semi | Sanand, Gujarat

About the Role

Lead Cybersecurity & GRC (IT/OT Security)

hands-on cybersecurity leadership role

OT / Industrial Cybersecurity experience

Key Responsibilities :

Cybersecurity Strategy & GRC

• Assess cybersecurity maturity across IT, OT, manufacturing systems, applications, cloud, infrastructure and third parties.
• Establish the cybersecurity maturity baseline, target state, KPIs/KRIs and risk-based roadmap.
• Own cyber-risk registers, remediation plans, exception management and leadership reporting.
• Support

  ISO/IEC 27001 / ISMS

  , audit readiness, customer assessments and continuous improvement.

IT & Enterprise Cybersecurity

• Lead security across

  IAM, PAM, MFA, EDR, SIEM/SOC, network, endpoint, cloud, vulnerability management, application/API security, data protection and incident response

  .
• Define and maintain enterprise IT/OT cybersecurity architecture and security standards.
• Embed security-by-design into new applications, infrastructure, integrations and technology initiatives.

OT / Manufacturing Cybersecurity

• Build and lead the OT security program covering:
• IT/OT network segmentation
• Industrial DMZ
• OT asset visibility
• OT monitoring and threat detection
• Secure vendor remote access
• Legacy-system risk management
• OT vulnerability and patch management
• Removable-media controls
• Backup and cyber recovery
• Balance cybersecurity controls with

  production uptime, equipment constraints, safety and manufacturing continuity

  .

Semiconductor Manufacturing & Equipment Security

• Secure critical manufacturing environments, including

  MES, QMS/SPC/PLM, test and traceability systems, CIM/EAP, SECS/GEM, equipment integrations and host systems

  .
• Establish cybersecurity requirements covering equipment hardening, OS support, access control, network security, malware protection, logging, patching, firmware, vendor access and recovery.
• Apply relevant semiconductor equipment-security practices including

  SEMI E187 / SEMI E188

  .
• Partner with Manufacturing, Engineering, Automation, Equipment and IT teams to protect production-critical systems, including

  Siemens Opcenter MES

  and factory integrations.

Data, IP, Privacy & Regulatory Security

• Protect intellectual property, engineering/process data, manufacturing data, source code, customer information and other sensitive assets.
• Strengthen

  DLP, data classification, encryption, access controls and insider-risk management

  .
• Support

  India DPDP

  readiness and

  CERT-In

  cybersecurity incident reporting requirements.

Security Operations & Cyber Resilience

• Establish effective

  247 IT/OT monitoring and incident response

  .
• Drive ransomware, OT compromise, data-breach and privileged-account response playbooks.
• Strengthen backup protection, disaster recovery, cyber recovery and restoration readiness.

Third-Party & Supply-Chain Security

• Establish security requirements for

  OEMs, system integrators, cloud providers, MSSPs/MDR providers and technology vendors

  .
• Strengthen third-party risk assessment, secure remote access, contractual cybersecurity requirements and supplier accountability.

Required Experience

• 12 - 15+ years

  of progressive cybersecurity experience.
• Strong experience in enterprise cybersecurity, including

  IAM/PAM, SOC/SIEM, network security, vulnerability management, incident response, security architecture and cyber resilience

  .

• Meaningful OT / Industrial Cybersecurity experience is mandatory.

• Experience securing manufacturing or industrial environments where availability and production continuity are critical.
• Experience developing cybersecurity maturity assessments, target-state architectures and multi-year security roadmaps.
• Strong experience managing cybersecurity teams, vendors, MSSPs/MDR providers and specialist partners.
• Ability to communicate cybersecurity risks and investment priorities effectively to senior management.

• Candidates with experience in one or more of the following will be strongly preferred:

• Semiconductor / OSAT / Fab / Assembly & Test

• Advanced packaging or semiconductor manufacturing

• SEMI E187 / SEMI E188

• ISA/IEC 62443

• OT network segmentation / Industrial DMZ
• Siemens Opcenter or equivalent

  MES

• SECS/GEM, CIM, EAP and equipment connectivity

• Manufacturing equipment cybersecurity
• Greenfield factory cybersecurity
• Ransomware resilience and OT cyber recovery
• ISO/IEC 27001 / ISMS implementation
• Data/IP protection and insider-risk programs

Preferred Certifications :

CISSP | CISM | CISA | CRISC | GICSP | ISA/IEC 62443 | ISO/IEC 27001 Lead Implementer / Lead Auditor | CCSP | GIAC

proven IT/OT cybersecurity leadership and manufacturing security experience will carry greater weight

Frameworks & Standards

Exposure to relevant frameworks and standards such as:

NIST CSF | NIST OT Security | ISA/IEC 62443 | SEMI E187/E188 | ISO/IEC 27001 | CIS Controls | MITRE ATT&CK / ATT&CK for ICS | Zero Trust

Candidate Profile :

We are specifically looking for someone who can:

• Operate effectively across

  enterprise IT and factory OT

  .
• Understand the relationship between cybersecurity, manufacturing uptime and business continuity.
• Build security architecture rather than only manage compliance.
• Work credibly with

  MES, Automation, Equipment, Engineering, Infrastructure, Applications and business teams

  .
• Technically challenge OEMs, system integrators and cybersecurity partners.
• Translate complex cyber risks into clear business language.
• Lead confidently through major cybersecurity incidents.
• Build a measurable, resilient and risk-based cybersecurity operating model.

Position:

Interested candidates can apply through either channel:

Google Form:

Email:

Email Subject:

Candidate Details Required ,Please share:

• Full Name
• Current Company
• Current Designation
• Current Location
• Total Experience
• Relevant Cybersecurity Experience
• OT / Industrial Cybersecurity Experience
• Semiconductor / OSAT / Manufacturing Experience
• SEMI E187 / E188 experience
• ISA/IEC 62443 experience
• ISO/IEC 27001 / ISMS experience
• Highest Qualification
• Professional Certifications
• Current Fixed CTC
• Variable / Bonus
• Expected Fixed CTC
• Notice Period / Earliest Joining Date
• Current Offers, if any
• Willingness to relocate to Sanand, Gujarat:

  Yes / No