Senior Manager - OT Security

About Us

Role Overview

The Senior Manager – OT Security is responsible for designing, implementing, and governing cybersecurity strategies across Operational Technology (OT) environments. This includes industrial control systems (ICS), SCADA, IIoT, and plant automation infrastructure. The role ensures protection of critical assets, minimizes operational risks, and aligns OT security with enterprise cybersecurity frameworks

Key Responsibilities

OT Security Strategy & Governance:                                                                                                                                                           Define and drive the OT cybersecurity strategy aligned with enterprise security goals.
•    Establish / Maintain governance frameworks for securing ICS/SCADA environments.
•    Develop / Maintain OT-specific cybersecurity policies, standards, and procedures.
•    Ensure alignment with standards such as IEC 62443, NIST CSF, ISO 27001.

Risk Management & Compliance (across all Business Units of Tata AutoComp):
•    Conduct OT risk assessments, vulnerability assessments, and threat modelling.
•    Identify critical assets and implement risk mitigation strategies.
•    Ensure compliance with regulatory requirements and industry standards.
•    Lead OT security audits and remediation initiatives.

Security Architecture & Implementation
•    Design secure OT network architectures (segmentation, zones, conduits).
•    Implement security controls including: 
o    OT firewalls
o    Intrusion Detection/Prevention Systems (IDS/IPS)
o    Network monitoring tools
o    Endpoint protection for industrial systems
•    Oversee secure integration between IT and OT environments.

Threat Monitoring & Incident Response
•    Establish monitoring capabilities for OT environments.
•    Lead incident response planning and execution for OT-specific cyber incidents.
•    Collaborate with SOC teams to integrate OT visibility into SIEM platforms.
•    Drive forensic investigations and root-cause analysis.

Vendor & Stakeholder Management
•    Work closely with plant operations, engineering, and Group / BU IT teams.
•    Manage OEMs, system integrators, and security vendors.
•    Evaluate and onboard OT security solutions and technologies.

. Program Management & Leadership
•    Lead and mentor OT security teams and cross-functional stakeholders.
•    Manage budgets, projects, and timelines for OT security initiatives.
•    Drive awareness programs and training for plant personnel

Emerging Technologies & Innovation
•    Evaluate emerging OT security solutions (Zero Trust for OT, AI-based monitoring).
•    Drive adoption of IIoT security frameworks and best practices.
•    Improve resilience through automation and advanced analytics.

Qualification

• Education:
  Bachelor’s/Master’s in Computer Science, Cybersecurity, Electronics, or related field

Experience

• 12–18 years of experience:
• 5+ years in OT/ICS security roles
• Experience in manufacturing, energy, utilities, or similar sectors

Additional Requirement

Certifications (Preferred)

• CISSP (Highly preferred)
• CISM / CISA
• GIAC (GICSP / GRID)
• IEC 62443 certifications
• CCSP / Azure Security (for hybrid environments)

Key Performance Indicators (KPIs)

• Reduction in OT security risks and vulnerabilities
• Compliance audit success rate
• Incident response effectiveness (MTTR, detection time)
• OT visibility and monitoring coverage
• Implementation of security projects on time and budget

• Nice to Have

  • Experience with Digital Transformation / Industry 4.0 initiatives
  • Knowledge of cloud integration with OT (Azure IoT, AWS IoT)
  • Experience in Zero Trust for industrial environments

Competencies