Head of Cybersecurity and Blockchain

Location: Pune / Bangalore

Experience: 15+ Years

Industry: Electric Vehicles (EV), IoT, Automotive, Telematics

Employment Type: Full-time

About Us

We are a fast-growing 2-wheeler EV startup transforming urban mobility through smart

connectivity, cutting-edge technology, and sustainable innovation. As we scale our products

and operations, cybersecurity remains central to protecting our riders, platforms, manufacturing

environments, and data ecosystems.

Role Overview

We are seeking a strategic and hands-on Head of Cybersecurity to lead and scale the organizations cybersecurity program across connected products, cloud infrastructure, manufacturing systems, enterprise systems, and customer platforms.

The role will own and drive cybersecurity across all aspects of Spiros ecosystem, including:

-Software Security

-IoT & Telematics Security

-Product & Embedded Security

-OT / Factory 4.0 Security

-Cloud & Infrastructure Security

-Enterprise Security

-Data Privacy & Governance

-Application Security

The ideal candidate must possess deep expertise in IoT and telematics security, cloud security,

Factory 4.0 / OT environments, and data privacy, while also demonstrating the ability to thrive in

a high-growth startup environment with evolving priorities and rapid execution cycles.

We are specifically looking for a leader with strong startup experience who is comfortable

operating in dynamic environments with fast decision-making, and aggressive scaling targets

with the ability to balance business agility and security requirements.

Key Responsibilities

Cybersecurity Strategy & Leadership

-Define, implement, and continuously evolve the enterprise cybersecurity strategy and roadmap.

-Build and lead a high-performing cybersecurity team and external security partnerships.

-Establish security governance, policies, standards, and reporting mechanisms.

-Drive a security-first culture across engineering, product, and business functions.

-Partner closely with executive leadership to align cybersecurity strategy with business growth

objectives.

Product, Software & IoT Security

-Secure connected 2-wheeler platforms, telematics systems, mobile applications, APIs,

backend services, and embedded systems.

-Lead threat modeling, secure architecture reviews, vulnerability assessments, and penetration

testing for connected products and software platforms.

-Implement secure software development lifecycle (SSDLC) practices across engineering

teams.

-Oversee firmware security, secure boot, OTA update security, API security, and device

identity management.

-Evaluate and secure emerging technology integrations, including blockchain-enabled platforms, digital identity systems, connected mobility ecosystems, and secure transaction frameworks where applicable.

Cloud & Infrastructure Security

-Lead the security architecture and governance of cloud environments, including IAM, VPC security, encryption, monitoring, logging, and key management.

-Implement DevSecOps practices and secure CI/CD pipelines.

-Enhance cloud detection and response capabilities, including SIEM, EDR/XDR, and security

monitoring.

-Oversee security posture management across cloud-native environments and SaaS

platforms.

OT / Factory 4.0 Security

-Design and enforce cybersecurity controls for smart manufacturing systems, industrial IoT (IIoT), and operational technology (OT) environments.

-Secure manufacturing networks, robotics, production systems, and connected factory assets.

-Ensure alignment with industrial cybersecurity standards and operational resilience best practices.

Data Privacy & Compliance

-Ensure compliance with applicable global and regional privacy regulations, including GDPR and DPDP.

-Define and implement enterprise data governance, classification, retention, and protection policies.

-Support compliance initiatives aligned with ISO 27001, ISO 21434, IEC 62443, and NIST frameworks.

Incident Response & Risk Management

-Establish and lead incident response, cyber crisis management, and forensic investigation processes.

-Conduct enterprise-wide risk assessments, third-party security reviews, and security audits.

-Develop and maintain cyber resilience, business continuity, and disaster recovery strategies.

Qualifications

Experience

-15+ years of cybersecurity experience, including at least 5 years in a senior leadership role.

-Strong experience working in high-growth startups, technology-driven organizations, or rapidly scaling environments.

-Proven ability to build and mature cybersecurity capabilities in organizations undergoing rapid

expansion and operational scaling.

-Exposure to blockchain-enabled mobility ecosystems, secure digital identity frameworks, or distributed ledger technologies within IoT and connected platforms.

Technical & Domain Expertise

-IoT and telematics security

-Cloud security

-Product and embedded systems security

-Factory 4.0 / OT security

-DevSecOps and application security

-Data privacy and compliance frameworks

-Enterprise and infrastructure security

Preferred Certifications

-CISSP – Certified Information Systems Security Professional

-CISM – Certified Information Security Manager

-CISA – Certified Information Systems Auditor

-AWS Certified Security – Specialty

-CEH, OSCP, or equivalent offensive security certifications

Preferred Industry Experience

-Automotive, mobility, EV, or connected device ecosystems

-Familiarity with ISO 21434, ISO 27001, IEC 62443, and NIST frameworks

What We Offer

-Opportunity to shape the cybersecurity posture of a next-generation EV company

-Work alongside passionate innovators in a fast-paced, mission-driven environment

-High ownership and opportunity to build security capabilities from the ground up

-Competitive compensation and equity participation

-Flexible work culture with continuous learning and growth opportunities