Deputy General Manager - OT Security

About Company

Founded in 2011, ReNew, is one of the largest renewable energy companies globally, with a leadership position in India. Listed on Nasdaq under the ticker RNW, ReNew develops, builds, owns, and operates utility-scale wind energy projects, utility-scale solar energy projects, utility-scale firm power projects, and distributed solar energy projects. In addition to being a major independent power producer in India, ReNew is evolving to become an end-to-end decarbonization partner providing solutions in a just and inclusive manner in the areas of clean energy, green hydrogen, value-added energy offerings through digitalisation, storage, and carbon markets that increasingly are integral to addressing climate change. With a total capacity of more than 13.4 GW (including projects in pipeline), ReNew’s solar and wind energy projects are spread across 150+ sites, with a presence spanning 18 states in India, contributing to 1.9 % of India’s power capacity. Consequently, this has helped to avoid 0.5% of India’s total carbon emissions and 1.1% India’s total power sector emissions. In the over 10 years of its operation, ReNew has generated almost 1.3 lakh jobs, directly and indirectly. ReNew has achieved market leadership in the Indian renewable energy industry against the backdrop of the Government of India’s policies to promote growth of this sector. ReNew’s current group of stockholders contains several marquee investors including CPP Investments, Abu Dhabi Investment Authority, Goldman Sachs, GEF SACEF and JERA. Its mission is to play a pivotal role in meeting India’s growing energy needs in an efficient, sustainable, and socially responsible manner. ReNew stands committed to providing clean, safe, affordable, and sustainable energy for all and has been at the forefront of leading climate action in India.

Job Description

OT Security Architecture & Governance

•Develop, implement, and enforce OT security policies, procedures, reference architectures, and technical standards aligned with the organization’s security framework and applicable requirements, including relevant CEA cybersecurity requirements, NCIIPC advisories where applicable, and ISA/IEC 62443 practices.
•Design and implement risk-based OT network architectures using zones, conduits, security boundaries, industrial demilitarised zones, controlled data flows, and resilient communications. Ensure designs address distributed sites, central and local SCADA, plant controllers, substations, remote operations, legacy equipment, latency, OEM dependencies, and loss-of-communications scenarios.
•Lead OT security governance, define minimum baseline security standards, manage approved deviations, and track compliance across wind, solar, hydro, and associated grid-connected assets.

Security Implementation & Operations

•Lead the design, deployment, testing, commissioning, and validation of OT security controls, including network segmentation, industrial firewalls, secure remote access, privileged access, endpoint controls appropriate for OT, asset visibility, security monitoring, logging, backup protection, and resilient recovery arrangements.
•Work closely with OEMs, EPC partners, engineering teams, and O&M teams to define security requirements and validate their implementation during design reviews, procurement, factory acceptance testing, site acceptance testing, commissioning, and operational handover.
•Establish and monitor secure configuration baselines for OT assets; manage hardening, approved deviations, firmware and software versions, unsupported or end-of-life components, vulnerability remediation, compensating controls, and risk-based maintenance throughout the asset lifecycle.

Monitoring, Incident Response

•Implement and operate OT security monitoring that provides asset visibility, identifies anomalous communications and malicious activity, generates actionable alerts, and integrates appropriately with enterprise security operations without introducing unacceptable risk to plant performance or availability.
•Lead the coordinated response to OT cybersecurity incidents, prioritising personnel safety, plant stability, evidence preservation, regulatory obligations, controlled containment, and restoration of operations, Coordinate with site operations, engineering, IT, OEMs, legal, communications, and leadership through defined escalation and crisis-management procedures.

Regulatory Compliance

•Responsible for periodic OT audit and risk assessments, VA/PT, and compliance assessments aligned with CEA, RLDC/NLDC, SECI requirements.

Collaboration & Integration

•Work closely with IT, cybersecurity, network, and infrastructure teams to ensure secure IT–OT interfaces.
•Support cross-functional OT security initiatives

Training, Awareness & Documentation

•Conduct OT security training for site engineers, OEM partners, and contractors per internal policy requirements.
•Develop documentation including system architecture diagrams, SOPs, incident playbooks, and audit compliance evidence.

Experience : 12 to 17 Years

Location : Gurugram, Haryana