Chief Information Security Officer

Purpose/Objective-

To lead and drive the Business Unit's cybersecurity vision, strategy, governance, risk management, and cyber resilience program. The role is responsible for safeguarding AGEL's IT, OT, SCADA, Cloud, Digital, and Business-Critical Assets against evolving cyber threats while ensuring compliance with regulatory, contractual, and Group Cyber Security requirements. The incumbent will establish a security-first culture, enhance cyber maturity, and ensure business continuity across the organization's renewable energy operations

Key Roles & Responsibilities-

Strategic Leadership

• Define and implement the BU Cyber Security Strategy aligned with AGEL's business objectives and Group Cyber Security framework.
• Develop and maintain the Cyber Security Roadmap, including IT, OT, SCADA, Cloud, Digital Platforms, and Emerging Technologies.
• Establish cyber resilience capabilities to protect business operations, generation assets, and critical infrastructure.
• Drive security transformation initiatives and adoption of industry best practices (NIST, ISO 27001, IEC 62443, Zero Trust, etc.).
• Present cyber risk posture, security metrics, and strategic recommendations to senior leadership and governance committees.

Governance, Risk & Compliance (GRC)

• Establish and oversee Information Security Governance across the BU.
• Develop and maintain cybersecurity policies, standards, procedures, and controls.
• Lead enterprise cyber risk assessments and risk treatment programs.
• Ensure compliance with applicable regulations, industry standards, and internal audit requirements.
• Manage third-party and supply-chain cyber risk programs.

Cyber Security Operations

• Oversee Security Operations Center (SOC), threat monitoring, detection, and response activities.
• Ensure continuous monitoring of IT and OT environments.
• Lead cybersecurity incident response, investigation, recovery, and reporting activities.
• Direct vulnerability management, penetration testing, attack surface management, and remediation programs.
• Build threat intelligence capabilities and proactive threat-hunting programs.

OT & Critical Infrastructure Security

• Develop and implement cybersecurity controls for renewable energy assets, substations, SCADA, EMS, and OT environments.
• Ensure secure design and operation of generation and transmission infrastructure.
• Drive OT risk assessments and cyber resilience programs.
• Collaborate with Engineering, O&M, and Digital teams to secure operational technology environments.

Cloud & Application Security

• Establish cloud security governance across Azure, AWS, and hybrid environments.
• Ensure secure software development lifecycle (SSDLC) practices.
• Oversee application security testing, code security reviews, and DevSecOps implementation.
• Drive implementation of identity and access management controls.

Audit & Assurance

• Lead internal and external cyber security audits.
• Ensure timely closure of audit observations and security findings.
• Conduct cyber readiness assessments and maturity evaluations.
• Benchmark the BU's cybersecurity posture against industry standards and peers.

Business Continuity & Disaster Recovery

• Own cyber resilience, business continuity, and disaster recovery planning.
• Conduct periodic cybersecurity crisis simulations and cyber drills.
• Ensure recovery readiness for critical business systems and OT environments.

Stakeholder Management

• Partner with Group CISO, CIO, Digital, Operations, Engineering, Risk, Legal, and Compliance teams.
• Liaise with regulators, auditors, law enforcement agencies, OEMs, and cybersecurity partners.
• Lead cybersecurity awareness initiatives across the organization.
• Build a strong cybersecurity culture amongst employees and contractors.

Qualifications and Experience-

Educational Qualifications Essential

• Bachelor's degree in engineering, Computer Science, Information Technology, or related discipline.

Preferred

• Master's Degree/MBA in Information Systems, Cyber Security, Risk Management, or equivalent.

Experience

• 15–20 years of overall experience in Information Technology and Cyber Security.
• Minimum 10–12 years in senior cybersecurity leadership roles.
• Experience managing large-scale enterprise Cyber Security, SOC, Risk, Compliance, and Incident Response functions.
• Strong experience securing Critical Infrastructure, Energy, Utilities, Manufacturing, Oil & Gas, Renewable Energy, or similar sectors.
• Exposure to IT, OT, Cloud Security, SCADA and Digital Transformation programs.
• Experience engaging with Board, CXOs, Audit Committees, and Regulatory Authorities.