Cyber security analyst Engineer

Cybersecurity Engineer – IT & OT

---

Title:

“Senior”- based on years of experience

Location:

New Delhi, India

Reports to:

Head of IT

Leadership responsibility:

No direct reports anticipated

---

As part of ASE’s IT team located in New Delhi, India and various locations in Europe, manage all aspects of cybersecurity for the company. This includes IT cybersecurity within ASE’s Microsoft and Azure environments, and Operational Technology (OT) related cybersecurity for ASE’s Solar/BESS physical assets. As part of a close-knit team, the individual in this position will also be expected to cover other team members in various aspects of IT support, though focus will be on cybersecurity.

Job responsibilities:

• Daily security and threat monitoring and investigation
• Vulnerability management
• IT environment: Firewalls, Networks, Bastion, overall security structure
• Azure environment cybersecurity management (Bastion and other)
• M365 security (policies etc)
• Change Advisory Board management
• Training, Test Phishing, Security newsletters, cyber insurance standards compliance
• Mail flow management and Email security policies – Exchange, Mimecast
• Internet access management / web filtering
• Certificate life cycle
• Patch management
• Incident management, resolution, reporting (internal and external, external in conjunction with Compliance), development and implementation of mitigation actions and training
• Business Continuity Planning, Disaster Recovery Planning, Incident Response Planning
• OT environment
  • OT security policy, access controls, and resilience standards
• Data Governance & Cybersecurity, ensuring compliance with:
  • ASE common IT policies
  • Vendor security guidelines
  • Ensure secure credentials, API keys, and server access.
• SOC (NIS2 requirement): Rule setting, maintenance, monitoring
• NIS2 compliance (ISO 27001, training, SOC, Reporting)
• Remain up to date on European and UK cybersecurity requirements, coordinating closely with ASE’s Compliance Manager
• Monthly/Quarterly reporting

This is not an exhaustive list of responsibilities for this role.

---

Minimum Requirements:

• Degree in a relevant IT field.
• Minimum 5 years of experience in IT functions specializing in cybersecurity
• Experience in:
  • Cybersecurity in a Microsoft and Azure environment
  • Renewable Industry, particularly Solar/BESS
  • Operational Technology and SCADA-related security measures
  • AI technology usage around cybersecurity
  • Microsoft 365 and Azure environment
• Knowledge of international standards, in particular ISO 27001
• Knowledge of European cybersecurity regimes such as NIS2 (EU) and CSRB (UK)
• Experience implementing standards, infrastructure and controls for ISO 27001 certification and maintenance.
• Information Standards Management System development and maintenance
• International experience, (particularly Europe will be considered a plus)
• Willingness to operate out of hours and provide cybersecurity incident management coverage where required
• Ability to work independently and in a team environment.
• Excellent communication and interpersonal skills.
• Collaborative spirit and culturally aware
• Fluency in spoken and written English

Nice to have:

• German or Dutch language skills a plus