Director, Cybersecurity Architecture

About the role

IFF, a global leader in flavors, fragrances, food ingredients and health & biosciences, is hiring a Director, Cybersecurity Architecture in Chennai. The Director leads the strategy, design and engineering of security across Infrastructure Security, Operational Technology (OT) Security and Vulnerability Management, reporting to the Chief Information Security Officer. The role covers the architecture and technical controls protecting IFF's enterprise infrastructure and manufacturing environments, and its global vulnerability management program.

Key responsibilities

• Infrastructure Security: own the security architecture for network, cloud (multi-cloud/hybrid), endpoint, identity and data center environments; define security reference architectures, standards and design patterns with zero-trust and defense-in-depth; lead core security controls such as network segmentation, firewalls, cloud security posture, privileged access and endpoint protection; partner with infrastructure, cloud and platform teams to integrate security into design and deployment.
• OT Security: lead security strategy and architecture for OT, ICS/SCADA and plant-floor networks at global manufacturing sites; establish IT/OT convergence standards, network segmentation and secure remote access; build OT asset visibility, threat detection and vulnerability management; align to frameworks such as IEC 62443 and NIST CSF; partner with site leadership on security awareness and incident readiness.
• Vulnerability Management: own the enterprise program covering continuous identification, prioritization and remediation of vulnerabilities; define risk-based prioritization using CVSS, EPSS, threat intelligence and asset criticality; lead vulnerability scanning, attack surface management and remediation tracking; report posture and remediation performance to the CISO, DTS leadership and governance and audit stakeholders.
• Leadership and strategy: lead and grow a globally distributed team of security architects, engineers and specialist partners; set a multi-year security architecture roadmap; advise the CISO and business leaders on risk and investment; manage budget, vendors and strategic partners; champion security-by-design and represent Cybersecurity Architecture in governance, audit and regulatory engagements.

Required profile

• Bachelor's degree in Computer Science, Information Security, Engineering or a related field, or equivalent professional experience.
• 12+ years of progressive cybersecurity experience, including 5+ years leading technical teams in globally distributed and remote environments.
• Expertise in infrastructure security, OT/ICS security and vulnerability management, with advanced knowledge in at least two of them.
• Experience designing and implementing security programs aligned to NIST CSF, ISO 27001 and IEC 62443.
• Hands-on experience leading enterprise vulnerability management or attack surface management programs.
• Experience securing OT environments in manufacturing, chemical, process industry or similar settings.
• Relevant certifications such as CISSP, CISM, SABSA, GICSP or Azure/AWS security certifications, and/or experience in a regulated multinational organization.

Required skills

• Cloud security (Azure and/or AWS)
• Network security, identity and access management, zero-trust architectures
• Security architecture and engineering

What we offer

• Hybrid work model
• Opportunities for professional growth and development