Head of Information Security

Hello Aspirants,

This is one of the exiting opportunity with one of the topmost conglomerate in Mumbai Location for the position of Head - Information & Security.

Experience:

18.00 - 25.00 yrs

Job Location:

Mumbai (Work from Office)

Job Description:

1.

Role Overview
The Head - Information & Security will be responsible for establishing and securing the complete digital and information backbone of the AI Data Centre business.
This includes:
Setting up the enterprise-wide ERP and business systems.
Designing the technology architecture for corporate, project, and operational systems.
Establishing cybersecurity governance and compliance across IT, OT, and cloud environments.
Ensuring that the digital infrastructure supports project execution, operations, finance, and customer engagement at hyperscaler-grade reliability and security.

2.

Key Responsibilities
A. Enterprise IT Architecture & ERP Implementation
Define and implement the Enterprise Architecture Roadmap covering corporate, project, and operations functions.
Lead the end-to-end implementation of a fit-for-purpose ERP system — covering Finance, Supply Chain, HR, Projects, and Asset Management.
Select and oversee the ERP platform (SAP S/4

HANA, Oracle Fusion, or TCS proprietary ERP) based on scalability and cost optimization.
Ensure ERP integration with other business systems — PMO dashboards, DCIM, SCADA, finance models, and procurement portals.
Establish data governance frameworks for master data, access control, and reporting consistency.
Develop a Management Information System (MIS) with real-time visibility into KPIs (cost, schedule, uptime, safety, financial performance).
Build enterprise-grade collaboration and workflow systems (email, document management, project collaboration, internal communication tools).

B. IT Infrastructure, Networks & Cloud Systems
Design and deploy robust IT infrastructure across headquarters, regional offices, and data centre sites.
Implement secure and redundant network connectivity, integrating on-premise and cloud-based systems.
Establish IT operations centres for network, server, and end-user support.
Implement hybrid cloud architecture for enterprise workloads, with data residency compliance.
Develop and enforce data backup, archival, and recovery policies.

C. Cybersecurity Governance & Security Functions
Build a comprehensive cybersecurity framework that aligns with ISO 27001, SOC 2, NIST, and India’s CERT-In regulations.
Set up a Security Operations Centre (SOC) for 24×7 monitoring of IT, OT, and cloud assets.
Implement Zero-Trust Architecture across all digital assets and networks.
Oversee identity and access management (IAM), endpoint protection, and data encryption standards.
Conduct vulnerability assessment and penetration testing (VAPT) on all critical systems.
Coordinate cybersecurity readiness with hyperscaler clients (Google, AWS, OpenAI, Microsoft).
Maintain incident response playbooks and conduct simulated cyberattack drills.

D. Digital Integration Across Project Lifecycle
Integrate digital systems across design, construction, and operations workflows — connecting the ERP with the DCIM and PMO systems.
Ensure seamless data flows between engineering design (BIM), construction progress, cost tracking, and asset management.
Implement field mobility solutions for project teams — including digital inspection tools, photo logs, and asset tagging.
Develop AI- and ML-driven analytics for predictive maintenance and energy optimization.
Enable real-time dashboards for leadership and investor reporting through unified data pipelines.

E. Data Governance, Compliance & Risk Management
Develop data classification and retention policies.
Ensure compliance with India’s Digital Personal Data Protection Act (DPDPA 2023) and global privacy norms (GDPR, CCPA).
Implement data-loss prevention (DLP), encryption, and secure transmission protocols.
Maintain comprehensive audit trails for all business systems.
Manage digital risk through continuous monitoring, risk assessments, and internal audits.

F. Business Continuity & Disaster Recovery
Develop Business Continuity Plans (BCP) and Disaster Recovery (DR) systems for corporate IT and operational technology…