Head of Information Security

Job description

**Role : Head Information & Security Office** **Experience : 18 - 26 Years** **Location –Mumbai, Hyderabad** **Mode of Interview: Virtual** **Job Description** The Head of Information & Security will be responsible for establishing and securing the complete digital and information backbone of the AI Data Centre business. This includes: - Setting up the enterprise-wide ERP and business systems. - Designing the technology architecture for corporate, project, and operational systems. - Establishing cybersecurity governance and compliance across IT, OT, and cloud environments. - Ensuring that the digital infrastructure supports project execution, operations, finance, and customer engagement at hyperscaler-grade reliability and security. This is a foundational role in creating a digitally integrated, secure, and scalable organization for India’s largest AI-ready data centre platform. **2. Key Responsibilities** A. Enterprise IT Architecture & ERP Implementation - Define and implement the Enterprise Architecture Roadmap covering corporate, project, and operations functions. - Lead the end-to-end implementation of a fit-for-purpose ERP system — covering Finance, Supply Chain, HR, Projects, and Asset Management. - Select and oversee the ERP platform (SAP S/4HANA, Oracle Fusion, or TCS proprietary ERP) based on scalability and cost optimization. - Ensure ERP integration with other business systems — PMO dashboards, DCIM, SCADA, finance models, and procurement portals. - Establish data governance frameworks for master data, access control, and reporting consistency. - Develop a Management Information System (MIS) with real-time visibility into KPIs (cost, schedule, uptime, safety, financial performance). - Build enterprise-grade collaboration and workflow systems (email, document management, project collaboration, internal communication tools). B. IT Infrastructure, Networks & Cloud Systems - Design and deploy robust IT infrastructure across headquarters, regional offices, and data centre sites. - Implement secure and redundant network connectivity, integrating on-premise and cloud-based systems. - Establish IT operations centres for network, server, and end-user support. - Implement hybrid cloud architecture for enterprise workloads, with data residency compliance. - Develop and enforce data backup, archival, and recovery policies. - Manage relationships with OEMs, service providers, and IT partners (TCS Digital, Tata Communications, etc.). C. Cybersecurity Governance & CISO Functions - Build a comprehensive cybersecurity framework that aligns with ISO 27001, SOC 2, NIST, and India’s CERT-In regulations. - Set up a Security Operations Centre (SOC) for 24×7 monitoring of IT, OT, and cloud assets. - Implement Zero-Trust Architecture across all digital assets and networks. - Oversee identity and access management (IAM), endpoint protection, and data encryption standards. - Conduct vulnerability assessment and penetration testing (VAPT) on all critical systems. - Coordinate cybersecurity readiness with hyperscaler clients (Google, AWS, OpenAI, Microsoft). - Maintain incident response playbooks and conduct simulated cyberattack drills. - Prepare and submit periodic Cybersecurity Posture Reports to the CEO, Board, and Tata Group CISO. D. Digital Integration Across Project Lifecycle - Integrate digital systems across design, construction, and operations workflows — connecting the ERP with the DCIM and PMO systems. - Collaborate with the CTO and COO to ensure seamless data flows between engineering design (BIM), construction progress, cost tracking, and asset management. - Implement field mobility solutions for project teams — including digital inspection tools, photo logs, and asset tagging. - Develop AI- and ML-driven analytics for predictive maintenance and energy optimization. - Enable real-time dashboards for leadership and investor reporting through unified data pipelines. E. Data Governance, Compliance & Risk Management - Develop data classification and retention policies. - Ensure compliance with India’s Digital Personal Data Protection Act (DPDPA 2023) and global privacy norms (GDPR, CCPA). - Implement data-loss prevention (DLP), encryption, and secure transmission protocols. - Maintain comprehensive audit trails for all business systems. - Manage digital risk through continuous monitoring, risk assessments, and internal audits. F. Business Continuity & Disaster Recovery - Develop Business Continuity Plans (BCP) and Disaster Recovery (DR) systems for corporate IT and operational technology (OT). - Ensure multi-site redundancy for ERP, network, and security systems. - Define and test Recovery Time Objective (RTO) and Recovery Point Objective (RPO) metrics across systems. - Conduct semi-annual BCP/DR simulation drills. G. Leadership & Governance - Build and lead an integrated Digital & Information Technology Organization, including IT Operations, Cybersecurity, and Data Governance teams. - Define key performance metrics for system uptime, data quality, and incident response. - Drive cultural adoption of digital-first and security-by-design principles across the organization. - Serve as secretary to the Digital Governance & Security Council, co-chaired by the CEO. - Represent the company in Tata Group digital councils and external cybersecurity forums.