The Role
Leads the organization’s information security and cybersecurity strategy, ISMS, audits, threat monitoring, risk assessments, vulnerability management, penetration testing, incident response, and enterprise security operations. Oversees network, endpoint, cloud, data center, and connectivity security; manages vendors, budgets, infrastructure, and cybersecurity teams; conducts plant and branch reviews; and drives security awareness and business-aligned governance.
Summary Generated by Built In
Role & responsibilities
- Develop and execute the Group's Information Security and Cybersecurity strategy.
- Lead and manage the Information Security Management System (ISMS) across the organization.
- Plan, coordinate, and ensure successful completion of ISO 27001, TISAX, customer, and internal security audits.
- Monitor cybersecurity threats, security incidents, vulnerabilities, and cyber-attack attempts, implementing proactive preventive measures.
- Ensure the confidentiality, integrity, and availability of enterprise information assets.
- Oversee enterprise firewall, network security, VPN, endpoint security, data center, and cloud security operations.
- Ensure secure and reliable connectivity across corporate offices, manufacturing plants, branches, and remote users.
- Lead cyber risk assessments, vulnerability management, penetration testing, and incident response activities.
- Establish security policies, standards, and governance frameworks aligned with business objectives.
- Evaluate and implement new cybersecurity technologies and best practices.
- Coordinate with ISPs, OEMs, cybersecurity vendors, and service providers while optimizing costs and service quality.
- Prepare and manage cybersecurity and IT infrastructure budgets.
- Lead, mentor, recruit, and develop the cybersecurity and infrastructure teams.
- Conduct periodic plant and branch visits to review IT infrastructure, security controls, and network availability.
- Drive cybersecurity awareness programs and promote a security-first culture across the organization.
Collaborate with business leaders and participate in Management Review Meetings (MRM) to support business and digital transformation initiatives
Requirements
Preferred Certifications
- CISSP
- CISM
- ISO/IEC 27001 Lead Implementer/Lead Auditor
- CEH
- CCSP
- CompTIA Security+
- Fortinet, Palo Alto, Cisco Security, or equivalent certifications.
Skills Required
- CISSP certification
- CISM certification
- ISO/IEC 27001 Lead Implementer or Lead Auditor certification
- CEH certification
- CCSP certification
- CompTIA Security+ certification
- Fortinet, Palo Alto, Cisco Security, or equivalent certification
Am I A Good Fit?
Get Personalized Job Insights.
Our AI-powered fit analysis compares your resume with a job listing so you know if your skills & experience align.
Success! Refresh the page to see how your skills align with this role.
The Company
What We Do
Roots Group of Companies is an India-based diversified manufacturing group established in 1970. Its businesses span automotive components, industrial cleaning equipment, precision equipment, cast components, electronics manufacturing services, and metrology. The group supplies products and solutions to automotive brands and industrial, institutional, and commercial customers, while expanding its presence through manufacturing facilities and offices in India and international markets.
