Chief Information Security Officer

Purpose/Objective-
To lead and drive the Business Unit's cybersecurity vision, strategy, governance, risk management, and cyber resilience program. The role is responsible for safeguarding AGEL's IT, OT, SCADA, Cloud, Digital, and Business-Critical Assets against evolving cyber threats while ensuring compliance with regulatory, contractual, and Group Cyber Security requirements. The incumbent will establish a security-first culture, enhance cyber maturity, and ensure business continuity across the organization's renewable energy operations
Key Roles & Responsibilities-
Strategic Leadership
Define and implement the BU Cyber Security Strategy aligned with AGEL's business objectives and Group Cyber Security framework.
Develop and maintain the Cyber Security Roadmap, including IT, OT, SCADA, Cloud, Digital Platforms, and Emerging Technologies.
Establish cyber resilience capabilities to protect business operations, generation assets, and critical infrastructure.
Drive security transformation initiatives and adoption of industry best practices (NIST, ISO 27001, IEC 62443, Zero Trust, etc.).
Present cyber risk posture, security metrics, and strategic recommendations to senior leadership and governance committees.
Governance, Risk & Compliance (GRC)
Establish and oversee Information Security Governance across the BU.
Develop and maintain cybersecurity policies, standards, procedures, and controls.
Lead enterprise cyber risk assessments and risk treatment programs.
Ensure compliance with applicable regulations, industry standards, and internal audit requirements.
Manage third-party and supply-chain cyber risk programs.
Cyber Security Operations
Oversee Security Operations Center (SOC), threat monitoring, detection, and response activities.
Ensure continuous monitoring of IT and OT environments.
Lead cybersecurity incident response, investigation, recovery, and reporting activities.
Direct vulnerability management, penetration testing, attack surface management, and remediation programs.
Build threat intelligence capabilities and proactive threat-hunting programs.
OT & Critical Infrastructure Security
Develop and implement cybersecurity controls for renewable energy assets, substations, SCADA, EMS, and OT environments.
Ensure secure design and operation of generation and transmission infrastructure.
Drive OT risk assessments and cyber resilience programs.
Collaborate with Engineering, O&M, and Digital teams to secure operational technology environments.
Cloud & Application Security
Establish cloud security governance across Azure, AWS, and hybrid environments.
Ensure secure software development lifecycle (SSDLC) practices.
Oversee application security testing, code security reviews, and DevSecOps implementation.
Drive implementation of identity and access management controls.
Audit & Assurance
Lead internal and external cyber security audits.
Ensure timely closure of audit observations and security findings.
Conduct cyber readiness assessments and maturity evaluations.
Benchmark the BU's cybersecurity posture against industry standards and peers.
Business Continuity & Disaster Recovery
Own cyber resilience, business continuity, and disaster recovery planning.
Conduct periodic cybersecurity crisis simulations and cyber drills.
Ensure recovery readiness for critical business systems and OT environments.
Stakeholder Management
Partner with Group CISO, CIO, Digital, Operations, Engineering, Risk, Legal, and Compliance teams.
Liaise with regulators, auditors, law enforcement agencies, OEMs, and cybersecurity partners.
Lead cybersecurity awareness initiatives across the organization.
Build a strong cybersecurity culture amongst employees and contractors.
Qualifications and Experience-
Educational Qualifications Essential
Bachelor's degree in engineering, Computer Science, Information Technology, or related discipline.
Preferred
Master's Degree/MBA in Information Systems, Cyber Security, Risk Management, or equivalent.
Experience
15–20 years of overall experience in Information Technology and Cyber Security.
Minimum 10–12 years in senior cybersecurity leadership roles.
Experience managing large-scale enterprise Cyber Security, SOC, Risk, Compliance, and Incident Response functions.
Strong experience securing Critical Infrastructure, Energy, Utilities, Manufacturing, Oil & Gas, Renewable Energy, or similar sectors.
Exposure to IT, OT, Cloud Security, SCADA and Digital Transformation programs.
Experience engaging with Board, CXOs, Audit Committees, and Regulatory Authorities.

Work arrangement
No