Deputy General Manager - Network & Cybersecurity

Job Purpose

This role includes Network & Cybersecurity owns the organisation's network architecture and cybersecurity strategy, standards, and operations. Currently an individual, hands-on senior role, the position is responsible for establishing a robust security posture across corporate office, plant/FAB sites, and group entities, and for building out the Network & Cybersecurity function/team as it scales.

Role & responsibilities

• Define and drive the network architecture and cybersecurity strategy/roadmap aligned with business, regulatory, and industry requirements.
• Own the organisation's cybersecurity posture, including policies, standards, and controls covering identity & access, endpoint, network, and cloud security.
• Lead security operations threat monitoring, vulnerability management, and incident response and remediation hands-on in the near term, transitioning to a team-based model as the function grows.
• Own network architecture and design across corporate office, plants/FAB, and group entities, working closely with the Network, Server & System Admin team for implementation.
• Evaluate, select, and implement security tools and technologies (firewalls, SIEM, EDR, DLP, etc.) in coordination with vendors.
• Drive compliance with applicable security standards and regulations (e.g. ISO 27001, ITGC, data privacy requirements), leading certification and audit processes.
• Conduct periodic risk assessments, penetration testing, and security awareness programmes across the organisation.
• Define and own incident response plans, and the security dimensions of business continuity/disaster recovery, in coordination with the Application Support & Backup/DR team.
• Manage the Network & Cybersecurity budget, including tools, licenses, and services.
• Report on the organisation's cybersecurity posture, risks, and incidents to the SGM IT and senior management as required.

Preferred candidate profile

• Education: B.E./B.Tech/MCA in Computer Science, IT, or related discipline. Certifications such as CISSP, CISM, CEH, or equivalent strongly preferred.
• Experience: 12-16 years in network and cybersecurity roles, including experience building or scaling a security function.

Skills Required

• Deep expertise in network architecture and security technologies.
• Strong knowledge of cybersecurity frameworks, standards, and regulatory requirements.
• Hands-on incident response and security operations capability, combined with strategic planning skills.
• Vendor evaluation and management for security tools and services.
• Ability to operate effectively as an individual contributor while building a future team.
• Strong communication skills, including reporting to senior management on security posture and risk.