Dear Aspirant!

We empower our people to stay resilient and relevant in a constantly changing world. We’re looking for people who are always searching for creative ways to grow and learn. People who want to make a real impact, now and in the future. Does that sound like you? Then it seems like you’d make a great addition to our vibrant international team.

We are looking for: Cybersecurity Operations Lead

You’ll make an impact by:

Lead day-to-day operations across vulnerability management, remediation coordination, ACP administration, operational reporting, and security governance support.
Own operational workflows, workload distribution, queue health, backlog tracking, aging management, SLA monitoring, and escalation of overdue or blocked activities.
Coordinate vulnerability remediation with asset owners, infrastructure teams, application teams, OT/plant stakeholders, vendors, and designated onshore/DTS/C&T SMEs.
Ensure vulnerability findings are processed consistently using severity categories, prioritization rules, remediation SLAs and escalation criteria approved through the agreed governance process.
Coordinate remediation planning and track agreed actions; escalate business-impact assessments, risk determinations, residual-risk decisions, and production-sensitive remediation approvals to the designated authority.
Oversee ACP administrative workflows, including documentation completeness, evidence collection, asset-record maintenance, review scheduling, RTP action tracking, exception tracking, and status reporting.
Ensure ACP records and protection-concept documentation reflect decisions and technical inputs provided or validated by the responsible Asset Owner and DTS/C&T SME; do not independently approve protection requirements or protection concepts.
Own operational KPIs, service capacity planning, backlog and aging metrics, workload forecasting, staffing inputs, and management reporting.
Develop and maintain operating procedures, workflow guidance, RACI definitions, escalation paths, reporting standards, and quality checks for consistent service delivery.
Facilitate operational reviews with stakeholders, communicate dependencies and delivery risks, and ensure decisions and actions are assigned to authorized owners.
Drive continuous improvement and automation for ticket workflows, evidence tracking, reporting, and repeatable operational tasks.
Mentor analysts and engineers on process execution, documentation quality, stakeholder coordination, and consistent application of approved procedures.
Support audit readiness by ensuring operational records, evidence references, status reports, and action logs are complete and retrievable.
Provide operational leadership and technical coordination for vulnerability remediation and ACP activities. Escalate risk acceptance, OT architecture, compensating-control selection, ACP technical approval, and production-impacting remediation decisions to designated DTS/C&T SMEs.
For OT/manufacturing environments—including SCADA, substations, utilities, HMI, PLC, RTU, and DCS—ensure work follows established change-control processes and is coordinated with plant operations and the designated technical authority.
Track and report OT-related remediation dependencies, vendor constraints, maintenance-window requirements, and unresolved blockers without independently authorizing production changes.

Use your skills to move the world forward!

B.E./B.Tech. in Computer Science, Information Technology, Cybersecurity, Engineering, or a related discipline; postgraduate qualification is preferred.
Typically 8+ years of experience in cybersecurity, IT security operations, vulnerability management, security governance, or related domains.
Demonstrated experience coordinating technical operations, cross-functional stakeholders, service delivery, and operational reporting.
Experience in manufacturing, industrial, OT-connected, or critical-infrastructure environments is preferred.
Relevant certifications such as CISSP, CISM, CRISC, CEH, GIAC, ISO 27001, IEC 62443, or equivalent are preferred.
Strong experience in cybersecurity operations, vulnerability management processes, remediation coordination, and operational service delivery.
Ability to coordinate teams and stakeholders while applying established prioritization rules, SLAs, escalation criteria, and governance processes.
Good understanding of vulnerability concepts, CVE/CVSS, scan findings, remediation workflows, evidence-based closure, and exception tracking.
Experience with vulnerability-management platforms such as Tenable, Qualys, Wiz, Rapid7, or equivalent.
Experience managing KPIs, operational dashboards, backlog, aging, workload forecasting, capacity utilization, and management reporting.
Working knowledge of ACP, security governance, asset inventories, evidence management, RTP/action tracking, and audit preparation.
Ability to interpret technical information and coordinate technical work while escalating risk decisions and technical approvals to authorized SMEs.
Understanding of IT/OT environments, including SCADA, substations, utilities, HMI, PLC, RTU, DCS, and industrial control systems.
Awareness of OT-specific constraints such as production availability, safety, maintenance windows, vendor dependencies, legacy assets, and plant change-control procedures.
Familiarity with security frameworks such as ISO 27001, IEC 62443, NIST CSF, CIS Controls, or equivalent is preferred.
Experience with ticketing/workflow tools, reporting platforms, and process automation; scripting or API automation is an advantage.
Strong stakeholder management, communication, facilitation, escalation, and team mentoring skills.
Ability to maintain clear operational documentation and communicate status, blockers, dependencies, and trends to technical and management audiences.

Create a better #TomorrowWithUs!

This role is based in Chennai, where you’ll get the chance to work with teams impacting entire cities, countries - and the shape of things to come.

We value your unique identity and perspective and are fully committed to providing equitable opportunities and building a workplace that reflects the diversity of society. Come bring your authentic self and create a better tomorrow with us.

We’re Siemens. A collection of over 312,000 minds building the future, one day at a time in over 200 countries. We're dedicated to equality, and we encourage applications that reflect the diversity of the communities we work in. All employment decisions at Siemens are based on qualifications, merit and business need. Bring your curiosity and imagination and help us shape tomorrow.

Find out more about Siemens careers at:

Find out more about the Digital world of Siemens here:

Cybersecurity Operations Lead

Start with your email