Chief Information Security Officer

Cement manufacturing involves complex industrial processes and supply chains that rely heavily on digital systems. This role is vital in protecting the operational technology (OT) environments, ERP platforms, and logistics systems that drive production efficiency and cost optimization. By securing these assets, the cybersecurity lead helps prevent downtime, intellectual property theft, and supply chain disruptions—directly contributing to the business's profitability and reputation in the infrastructure sector. This position reports to the Group Chief Information Security Officer (GCISO). Key Responsibilities - Develop and implement a robust cybersecurity strategy tailored to Adani Cement's operational and technological landscape, ensuring alignment with the Group's overarching security framework. - Lead the identification, assessment, and mitigation of cybersecurity risks across IT and OT environments, including cement manufacturing plants, grinding units, and ready-mix concrete facilities. - Establish and enforce security policies, standards, and procedures to protect critical infrastructure and sensitive data. - Oversee the deployment and management of advanced security technologies, including intrusion detection systems, firewalls, endpoint protection, and threat intelligence platforms. - Collaborate with the Group CISO and other business units to ensure alignment with Adani Group's cybersecurity objectives and compliance with global and local regulatory requirements. - Drive incident response and recovery efforts, ensuring minimal disruption to operations and adherence to best practices in crisis management. - Conduct regular security audits, vulnerability assessments, and penetration testing to identify and address potential threats. - Lead cybersecurity awareness and training programs to foster a culture of security across all levels of the organization. - Monitor emerging cybersecurity trends and threats, and proactively adapt strategies to address evolving risks. - Support the integration of cybersecurity measures in the adoption of green energy technologies and digital transformation initiatives. Required Qualifications & Experience - Certified Information Systems Security Professional (CISSP), Certified Information Security Manager (CISM), or equivalent certification is mandatory. - 15-20 years of experience in cybersecurity, with at least 5 years in a senior leadership role, preferably within the manufacturing or industrial sector. - Proven track record in managing cybersecurity for large-scale, multi-location operations, including IT and OT environments. Educational Background - Bachelor's degree in Computer Science, Information Technology, or a related field. - Master's degree in Cybersecurity, Information Assurance, or Business Administration is preferred. Years & Type of Experience - 15-20 years of experience in cybersecurity, with a focus on risk management, incident response, and regulatory compliance. - Extensive experience in securing industrial control systems (ICS) and operational technology (OT) environments. Domain Expertise - Deep understanding of cybersecurity frameworks such as NIST, ISO 27001, and CIS Controls. - Expertise in securing IT and OT systems in the manufacturing sector, including cement production facilities. - Knowledge of regulatory requirements and standards relevant to the cement industry and critical infrastructure. Digital & Operational Tools - Proficiency in security information and event management (SIEM) tools such as Splunk or QRadar. - Experience with endpoint detection and response (EDR) solutions like CrowdStrike or Carbon Black. - Familiarity with industrial cybersecurity solutions, including SCADA security and network segmentation tools. Leadership Capabilities - Demonstrated ability to lead cross-functional teams and drive organizational change in cybersecurity practices. - Strong stakeholder management skills, with experience in engaging with senior leadership and regulatory bodies. - Proven track record of managing large budgets and delivering measurable improvements in security posture. - Strategic thinker with the ability to align cybersecurity initiatives with business objectives and sustainability goals.