The role is based in Hyderabad, India (Hybrid role). Be part of a motivated, passionate, and open-minded team where together we can achieve greatness and make a real impact. Your potential is our inspiration.

Where You’ll Make a Difference

• Lead and manage the Cyber Fusion Center’s day-to-day operations, ensuring effective collaboration across security monitoring, detection engineering, incident response, threat intelligence, and security automation functions.

• Own and manage enterprise email security platforms, including policy tuning, threat detection, phishing defense, reporting, escalation processes, and continuous improvement of email protection capabilities.

• Oversee endpoint security strategy and operations, including endpoint detection and response, policy enforcement, endpoint coverage, exception handling, and integration with broader security operations workflows.

• Manage SIEM capabilities, including log source onboarding, use case development, correlation rules, alert quality, dashboarding, metrics, and continuous improvement of detection coverage.

• Lead SOAR automation strategy, including development and optimization of playbooks, automated enrichment, response workflows, analyst efficiency improvements, and measurable reduction of manual effort.

• Build and mature the threat intelligence program by collecting, analyzing, prioritizing, and operationalizing intelligence to improve detection, prevention, incident response, and executive awareness. Develop operational metrics, executive reporting, and performance indicators to measure detection effectiveness, response readiness, automation value, endpoint coverage, and overall Cyber Fusion Center maturity.

• Plan, coordinate, and facilitate cybersecurity tabletop exercises to test incident readiness, validate roles and responsibilities, identify process gaps, and improve organizational response maturity. Manage the enterprise Incident Response Plan, ensuring it remains current, accurate, tested, aligned with business and regulatory requirements, and continuously improved based on lessons learned.

• Serve as a senior escalation point during high-priority cybersecurity incidents, coordinating technical response, executive communications, stakeholder alignment, containment, eradication, recovery, and post-incident review activities. Lead, coach, and develop a high-performing team of cybersecurity professionals, fostering accountability, continuous improvement, technical excellence, and a strong security operations culture.

• Partner with IT, Legal, Privacy, Compliance, Risk, Internal Audit, and business stakeholders to align cybersecurity operations with enterprise risk management, regulatory expectations, and business priorities. Ensure compliance with requirements mandating security tools on all applicable endpoints, including tracking coverage, identifying gaps, reporting exceptions, and driving remediation with infrastructure and endpoint teams.

What Makes You the Right Fit

• Bachelor’s degree in Computer Science, Information Systems, Cybersecurity, Information Technology or any other relevant discipline.

• Minimum 10+ years of progressive experience in cybersecurity, information security, security operations, incident response, threat detection, or related technology leadership roles.

• 2-4 years of team leadership experience, managing teams of 10-15 employees in a high-performance environment.

• Demonstrated experience managing or leading security operations capabilities, such as a SOC, Cyber Fusion Center, incident response team, detection engineering function, or security platform operations team.

• Hands-on leadership experience with email security, endpoint security, SIEM, SOAR, threat intelligence, incident response, and security monitoring technologies.

• Strong understanding of cybersecurity frameworks, regulatory expectations, audit requirements, and operational controls related to enterprise security tooling and endpoint protection coverage.

• Proven ability to manage major security incidents, coordinate cross-functional response, communicate with senior leadership, and drive effective post-incident improvement actions.

• Experience developing and maintaining incident response plans, runbooks, playbooks, tabletop exercises, escalation procedures, and operational readiness documentation.

• Strong leadership, communication, stakeholder management, and decision-making skills, with the ability to influence technical and non-technical audiences.

How Would You Stand Out?

• Relevant industry certification required or strongly preferred, such as CISSP, CISM, CISA, GIAC, CCSP, or other cybersecurity, risk, incident response, or technology leadership certifications.

Why Choose Us?

• Multinational and supporting environment

• Health insurance

• Training opportunities

• Learning and development programs

Important Information Regarding This Position

For your awareness, IFF has announced its intention to sell its Food Ingredients Business to CVC Capital Partners. The sale is presently expected to close in the first half of 2027, pending regulatory approvals and other closing conditions. The Food Ingredient business unit will remain a part of IFF until close and, at such time, it will transition to CVC Capital Partners. In applying for this position, you acknowledge your awareness that the position is a part of the Food Ingredient business unit and has been identified to transition to CVC Capital Partners.