Director - Cyber Security

Function: Digital

Location: Bangalore

Reporting To: Global CIO

At Tata Consumer Products Ltd, we stand #Forbetter – Planet, Sourcing, Nutrition, Communities. And #ForBetter Opportunities …. Here’s an exciting one!

How does this Job align to our Strategy?

At the core of Tata Consumer Products' business approach lie six strategic pillars that serve as the foundation for its growth and success: Strengthening & Accelerating our Core Business, Driving Digital and Innovation, Unlocking Synergies, Creating a Future-Ready Organization, Exploring New Opportunities and Embedding Sustainability.

This job opportunity closely aligns with Driving Digital and Innovation key strategic pillar. The job encompasses leading and driving comprehensive enterprise cybersecurity and IT risk management strategy.

This job is at N-3 level (N corresponds to CEO’s level)

Top dimensions:

Geography: India/Global

Direct reports:

Complexity of the role (Optional) :

Matrix Reports :

Type of Role : People Manager

Primary Stakeholders (Optional) :

What are the Key Deliverables in this role ?

Financial Outcomes

Budget Management:

• Develop and manage the cybersecurity budget to ensure cost-efficient allocation of resources while maintaining a strong security posture.
• Optimize investment in cybersecurity technologies, training programs, and risk mitigation initiatives.

Risk Reduction:

• Minimize financial losses due to breaches, attacks, and vulnerabilities by implementing effective security controls.
• Quantify and reduce potential costs associated with regulatory fines and damages caused by non-compliance.  

Customer Service

Secure Data:

• Ensure the confidentiality, integrity, and availability of company’s & customer’s data to build and maintain consumer trust.  

• Implement robust cybersecurity measures for safeguarding sensitive customer information across digital platforms
• Collaborate with regional and global business stakeholders to align cybersecurity efforts with business objectives and priorities.  
• Communicate cybersecurity strategies and outcomes effectively to internal and external stakeholders, including customers, partners, and regulators.  

Internal Processes

Strategic Leadership

• Define and execute the enterprise-wide Information Security strategy aligned with business objectives.
• Serve as the primary point of contact for all cybersecurity matters, including board-level reporting and audits.

Cloud & Infrastructure Security

• Drive security governance and controls across all cloud platforms (SaaS, PaaS, IaaS).
• Implement best-in-class security architecture, configurations, and monitoring on cloud workloads.

Endpoint Security

• Ensure robust endpoint protection strategies across all employee and enterprise devices.
• Drive implementation and management of advanced threat protection solutions.

Application Security

• Lead application security initiatives including secure SDLC practices, code reviews, and DevSecOps integration.
• Collaborate with application teams to ensure security-by-design principles.

Cybersecurity Operations

• Oversee 24x7 threat monitoring, incident response, and SOC operations.
• Manage Vulnerability Assessment and Penetration Testing (VAPT) across all digital assets.
• Lead threat intelligence, risk management, and mitigation planning.

Governance, Risk & Compliance

• Ensure compliance with global standards (e.g., ISO 27001, NIST, GDPR) and industry regulations.
• Define, maintain, and enforce security policies, processes, and awareness programs.

Vendor & Third-Party Security

• Manage security evaluations of third-party services and SaaS solutions.
• Drive vendor risk assessments and contractual security clauses.

Innovation and Learning

Technology Innovation:

• Drive adoption of emerging cybersecurity technologies such as AI-powered threat detection, zero-trust architecture, and blockchain-based security systems to proactively address evolving threats.  

Team Development:

• Build, mentor, and retain a high-performing cybersecurity team, fostering a culture of continuous learning and professional growth.   

What are the Critical success factors for the Role ?

Bachelor's or Master's degree in IT/Computer Science or related field

Proven experience (12-18 years) in cyber security

         Deep understanding of cybersecurity frameworks, technologies, and tools. Proficiency in ethical hacking, risk assessment,

         & vulnerability management.

         Strong leadership skills to establish global security strategies and lead cross-geographical teams effectively

         Ability to align cybersecurity plans with broader organizational goals while mitigating risks proactively.

         Demonstrated success in crafting and executing Cyber Security frameworks & strategies that drive business continuity

         Familiarity with the consumer goods industry, domain knowledge, leading cyber security for a small to mid-size organization

Expertise in resolving complex security incidents and identifying innovative solutions to emerging threats.

Excellent communication skills with the ability to engage and influence stakeholders at all levels

What are the Desirable success factors for the Role ?

Familiarity with relevant cyber security regulations and compliance standards.