We see it as our daily mission to make a significant contribution to greater safety and efficiency on roads and railways. That goes for passenger and goods transport - all over the world.
Making mobility safe on roads and railways - that is the mission driving us each and every day at Knorr-Bremse. It has been that way for over 110 years. Today the Knorr-Bremse Group, based in Munich, is the world's leading manufacturer of braking systems and a leading supplier of safety-critical sub-systems for rail and commercial vehicles. As an innovator in our fields, we advance developments in mobility and transport technologies.
Location: Chennai, India Reports to: Manager Security Capability Management (Munich), who reports to the CISO
Purpose of the Role
This is a unique hybrid role designed to establish and lead our new integrated security organization in the Asia-Pacific (APAC) region, based out of our strategic hub in Chennai. The successful candidate will act as the Regional Security Coordinator (RSC) for APAC, ensuring consistent, risk-based security execution across all local entities. Simultaneously, they will serve as the Local Team Lead, building a new, multi-disciplinary security team from the ground up and acting as the local legal supervisor for all security personnel in Chennai.
This position is critical for translating our global enterprise security strategy into actionable regional plans while fostering a center of excellence for security operations and governance in India.
Core Challenges
You will be expected to immediately address the following strategic challenges:
1.
Team Formation & Talent Acquisition: Build and hire the planned security resources in Chennai, including Security Operations Center (SOC) managers, Product Security Incident Response Team (PSIRT) members, product vulnerability monitoring specialists, and other key security governance functions like supply chain security and AI security governance.
2.
PSIRT Capability Implementation: In close coordination with the Security Operations Director and team leads in Europe, establish a new Product Security Incident Response Team (PSIRT) in Chennai. This critical capability must be built from scratch and become fully operational within the first six months.
3.
AI Security Governance: Implement a robust AI security risk management framework tailored for the AI innovation development team that is also being established in Chennai.
Key Responsibilities
As Regional Security Coordinator (APAC):
Regional Security Strategy: Act as the primary contact for all ISMS activities in the region. Translate global security policies into actionable regional plans and coordinate regional feedback to the central security organization.
Coordination & Community: Onboard, guide, and coordinate a community of local security roles such as Local Security Officers, Site Security Managers, Business Continuity Managers, Product Security Engineers across the APAC region to ensure alignment, provide support, and drive continuous improvement.
Risk Management: Coordinate regional risk assessments, maintain the regional risk register, track policy exceptions, and prioritize remediation for regional findings.
Incident Management: Lead regional incident response activities, declare incident severity, and act as the primary liaison with the global Incident Response (Cyber Monitoring and Defense Center) and PSIRT teams.
Governance & Reporting: Maintain and report on regional security KPIs, providing monthly updates to the CISO and regional leadership. Support both internal and external audits.
Supplier & OT Security: Support supplier security assessments and oversee security measures in Operational Technology (OT) environments.
As Local Team Lead (Chennai):
Team Building & Leadership: Recruit, lead, and develop a high-performing, multi-disciplinary team of cybersecurity specialists in Chennai. Foster a culture of collaboration, innovation, and excellence.
Local Supervision: Serve as the legal supervisor for all members of the various security teams based in Chennai, providing guidance and ensuring alignment with local regulations and corporate goals.
Project Execution: Take ownership of and lead local cybersecurity projects and initiatives, including the stand-up of the PSIRT and the implementation of AI security controls.
Strategic Collaboration: Report directly to the Director of Information Security Governance in Munich and collaborate closely with international teams to ensure global security standards are effectively implemented and managed from Chennai.
