Assistant General Manager (AGM) - IT Infra & Information Security

Position Title: Assistant General Manager (AGM) - IT Infrastructure & Information Security
Department: Information Technology
Reports To: AVP- IT
Location: Andheri (Mumbai)

Position Summary:
The Assistant General Manager (AGM) - IT Infrastructure & Information Security is
responsible for overseeing the strategic and operational management of the organization's
IT infrastructure and ensuring the integrity, confidentiality, and availability of the company’s
information. The AGM will lead the implementing and managing infrastructure, security
protocols, and compliance initiatives to safeguard against data breaches and ensure
efficient IT operations. development, implementation, and management of the company's
cybersecurity strategy, ensuring the security of company assets, intellectual property, and
sensitive information. This role requires a deep understanding of cybersecurity principles,
infrastructure management, and risk mitigation strategies.

Key Responsibilities:

1. Site IT Infrastructure Management:
Oversee IT infrastructure operations at all manufacturing sites, ensuring that local IT
teams are equipped to manage and support site-specific systems.
Coordinate with local teams to align infrastructure with corporate IT standards,
optimize performance, and ensure security compliance.
Ensure that IT infrastructure aligns with the specific operational needs of each
manufacturing site.

2. System Monitoring and Uptime:
Continuously monitor system uptime, availability, and overall infrastructure health
across all manufacturing sites.
Proactively identify and address potential issues to minimize downtime and ensure
systems are operating at peak performance.
Implement tools and processes for real-time system monitoring and reporting to
management.

3. Network and Connectivity Oversight:
Manage network connectivity across manufacturing sites to ensure robust, secure,
and reliable communication between locations and headquarters.
Maintain an accurate inventory of IT assets, including network devices, servers, and
other critical hardware, at each site.
Ensure consistent and secure network access for all users and systems, including the
implementation of secure remote access for on-site and remote personnel.

4. Server Landscape Management:
Oversee the management of server environments across Microsoft, Linux, and
VMware platforms at manufacturing sites.
Ensure that servers are running efficiently, securely, and are properly maintained.
Manage system upgrades, patches, and optimizations to enhance security,
performance, and scalability.

5. CADA and OT Device Management:
Work closely with SCADA (Supervisory Control and Data Acquisition) systems and
operational technology (OT) devices, ensuring seamless integration and operation of
critical manufacturing systems.
Enhance the reliability and operational efficiency of SCADA systems and OT devices,
troubleshooting and resolving issues in real-time.
Collaborate with engineering teams to ensure that IT infrastructure meets the
specific needs of production environments.

6. Travel Requirements:
Frequent travel to manufacturing sites is required for on-site assessments,
coordination of IT initiatives, and ensuring effective site management.
Conduct regular site visits to review infrastructure, assess operational needs, provide
support, and facilitate upgrades and improvements.
Provide on-site leadership during any critical IT incidents or infrastructure issues that
require immediate attention.

7. Cybersecurity Strategy Development:
Develop, implement, and continuously improve the cybersecurity strategy, aligning it
with business goals, organizational needs, and industry best practices.
Ensure the protection of company assets, intellectual property, and sensitive data
through proactive security measures and initiatives.
Regularly assess cybersecurity risks and update strategies to address emerging
threats.

8. Cybersecurity Analyst Support:
Provide expert guidance on cybersecurity principles, protocols, and best practices.
Support the identification of vulnerabilities, potential threats, and security gaps
within the infrastructure.
Recommend and implement security measures to mitigate risks and improve the
overall security posture of the organization.

9. Security Appliance Management:
Oversee the configuration, management, and continuous monitoring of security
appliances, including SIEM systems, firewalls, and endpoint protection tools.
Manage and implement endpoint security solutions (e.g., antivirus, Endpoint
Detection and Response (EDR), Mobile Device Management (MDM)) to prevent
malware attacks and unauthorized access.
Ensure all security appliances are properly configured and tuned for optimal
performance.

10. Monitoring & Incident Detection:
Monitor network traffic, system logs, and user activities to detect anomalies,
suspicious behaviour, and potential security incidents.
Provide timely alerts for detected incidents, leading detailed analysis to assess the
severity of incidents.
Collaborate with internal teams to respond to and resolve security incidents in a
swift and efficient manner.

11. Disaster Recovery & Business Continuity:
Develop and maintain comprehensive disaster recovery and business continuity
plans to ensure minimal downtime in the event of a cyber-attack or security breach.
Conduct regular drills, tests, and simulations to ensure that the company’s disaster
recovery and business continuity plans are effective and up to date.

12. Network Configuration and Segmentation:
Configure and manage network segmentation to optimize security and reduce
potential attack surfaces.
Implement and maintain Virtual Private Networks (VPNs) and domain policies to
ensure secure and controlled access to internal systems and data.
Regularly review and update network configurations to comply with evolving
security needs and organizational changes.

13. Collaboration with IT Teams:

Collaborate with system administrators, developers, and other IT teams to address
identified vulnerabilities and security risks across the IT infrastructure.
Ensure timely application of security patches and updates to address new
vulnerabilities.
Provide guidance on secure coding practices, application security, and infrastructure
hardening techniques.
Work with cross-functional teams to improve overall security through the
implementation of best practices in development, deployment, and maintenance
processes.

Education: Engineering degree in Information Technology, Cybersecurity, Computer Science,
or a related field. A Master's degree is a plus.

Experience:
Minimum of 10 - 25 years of experience in IT infrastructure management, with at least
3-5 years in a leadership role.
Experience managing IT infrastructure across multiple locations, ideally in a
manufacturing or industrial environment.
Hands-on experience with server management across Microsoft, Linux, and VMware
platforms.
Expertise in SCADA systems, operational technology (OT), and their integration with
IT infrastructure.
Proven experience in network management, connectivity, and asset management in
complex environments.
Strong expertise in cybersecurity principles, risk management, and the management
of security technologies (e.g., SIEM, firewalls, endpoint security).
Experience with disaster recovery, business continuity, and incident response
processes.
In-depth knowledge of network configurations, segmentation, and VPN
management.

Certifications:
Relevant certifications such as CISSP, CISM, CISA, or equivalent security
certifications.
ITIL, cloud security, and other infrastructure-related certifications are a plus.
Project management certifications (e.g., PMP) are advantageous.
Relevant certifications such as ITIL, CompTIA Network+, VMware Certified
Professional, or equivalent.
SCADA or OT-specific certifications are a plus.