Director - Information Security

The Director - Security will lead Tata Digital's cyber defence capabilities and help protect customer, business, technology, and enterprise assets across the organisation and associated entities. The role owns the strategy, governance, and operational effectiveness of the Security Operations Centre (SOC), incident response, threat detection and hunting, vulnerability and exposure management, cloud security operations, security engineering, and cyber resilience. The incumbent will partner with Product Engineering, Cloud Operations, Infrastructure, DevSecOps, Privacy, Risk, Compliance, Legal, Communications, and Tata Group security stakeholders.

The candidate will have responsibilities across the following functions: Strategy, Governance and Leadership:

• Define and execute the Security Operations strategy, operating model, capability roadmap, and annual priorities aligned with Tata Digital's business and cybersecurity objectives.
• Establish governance mechanisms, policies, standards, procedures, service-level objectives, and management reporting for cyber defence operations.
• Provide clear security posture, incident, vulnerability, control-effectiveness, and operational-risk updates to the CISO, executive leadership, and relevant governance forums.
• Lead financial planning, technology investments, vendor governance, and capacity planning for Security Operations.

24x7 Security Operations:

• Lead Tata Digital's 24x7 in-house SOC and ensure continuous monitoring of cloud services, endpoints, servers, identities, networks, business applications, and customer-facing digital platforms.
• Drive effective triage, investigation, escalation, containment, and reporting through standardised playbooks and well-defined accountability.
• Continuously improve SIEM, EDR/XDR, SOAR, email security, network security, and other monitoring technologies.
• Mature detection coverage using threat-informed methodologies, including MITRE ATT& CK mapping, measurable use-case coverage, and regular control validation.

Incident Response and Cyber Crisis Management:

• Act as the senior operational leader for major cyber incidents, coordinating triage, containment, eradication, recovery, and executive communication.
• Maintain enterprise incident response plans, technical playbooks, crisis-management procedures, breach-response workflows, and escalation matrices.
• Coordinate incident response across Technology, Product, Privacy, Legal, Risk, Communications, Human Resources, business teams, and external partners.
• Lead post-incident reviews, root-cause analysis, lessons learned, and closure of identified control gaps.
• Plan and conduct cyber crisis simulations, tabletop exercises, red-team scenarios, and readiness assessments.