Cyber Security Engineer (GRC profile)

Company Description:

PSA International (PSA) is a leading global port operator with over 70 terminals in 45 countries. PSA collaborates with customers and partners to develop world-class port ecosystems and deliver innovative supply chain solutions. PSA India, an early participant in Indias container terminal privatization program, has investments in Mundra, Chennai and Navi Mumbai.

PSA India is seeking a Cyber Security Engineer to play a key role in strengthening the organizations cybersecurity posture through a combination of policy governance, risk management and security operations. This position requires a hands-on and collaborative professional who can balance governance and compliance needs with technical oversight of operational controls and processes.

Entity : PSA Cargo Solutions India Private Limited

Department : Cyber Security

Job Location : (Work from Office - Monday to Friday)

PSA INDIA

Platina Building, Unit No -07B, Floor No- 7th Block,

Bandra Kurla Complex, Bandra East, Mumbai 400051, India

Website: https://india.globalpsa.com/

Follow us: Facebook | LinkedIn | X | YouTube

Job Responsibilities

The successful candidate shall be responsible for the following across multiple Business Units within PSA India:

• Lead and support cybersecurity governance, risk management, and compliance programs, including IT security operations and risk assessments, to protect PSA Indias systems, business applications, and data against cyber threats.
• Develop, implement, and enforce cybersecurity policies, standards, and guidelines for both IT and OT security environments across all BUs.
• Strengthen cybersecurity readiness and resilience of the BUs by developing and managing a suite of security tools and services, e.g., vulnerability management systems, phishing exercises, red-teaming, bug bounty programs, etc.
• Work closely with each BUs IT and business leadership to understand unique risks and tailor cybersecurity controls accordingly.
• Work with Regional IT and BU IT to enhance cyber awareness capabilities via awareness tools, phishing training, cybersecurity circulars, and table-top exercises.
• Provide guidance, procedures, and control frameworks for cybersecurity matters across BUs.
• Track and report progress of cybersecurity initiatives, projects, and key risk indicators (KRIs) / key performance indicators (KPIs) at BU level and consolidated level.
• Perform regular security assessments, gap analyses, and improvement planning based on compliance requirements for each BU.
• Handle security incidents, including detection, response, resolution, and forensic investigation, coordinating across BUs.
• Review system design (network design and application architecture) to identify IT security risks and recommend mitigation measures.
• Keep updated with the evolving information/cybersecurity landscape, regulations, and industry standards.

Skills and Experience :

The successful candidate shall have some or all of the following skills and experiences:

• Degree (BSc or B.Tech) in Computer Science, Information Security, or a related field.
• At least 4 years of relevant experience in IT security, with strong focus on GRC and managing cybersecurity across multiple business units or locations.
• At least 1 year of system administration and/or network domains.
• Strong knowledge of industry best practices and frameworks pertaining to IT Controls, including ISO 27001/2, PCI-DSS, NIST, SOC2, etc.
• Understand infrastructure components and services of both on-premises and commercial cloud environments, such as AWS and Azure.
• Experience in supporting IT security incidents, security testing, and security operations.
• Proven ability to work with multiple business units, understand diverse risk profiles, and communicate cybersecurity requirements effectively to non-technical stakeholders.
• A cohesive, effective team player and communicator with a positive and eager-to-learn attitude.

Preferred Certifications

• Good understanding of OT security standards (e.g., IEC 62443)
• CompTIA Security+, CEH, ISO 27001 Lead Implementer/Auditor, or equivalent