Head of Cybersecurity and Blockchain

**Head of Cybersecurity and Blockchain** Location: Pune / Bangalore Experience: 15+ Years Industry: Electric Vehicles (EV), IoT, Automotive, Telematics Employment Type: Full-time About Us We are a fast-growing 2-wheeler EV startup transforming urban mobility through smart connectivity, cutting-edge technology, and sustainable innovation. As we scale our products and operations, cybersecurity remains central to protecting our riders, platforms, manufacturing environments, and data ecosystems. Role Overview We are seeking a strategic and hands-on Head of Cybersecurity to lead and scale the organizationʼs cybersecurity program across connected products, cloud infrastructure, manufacturing systems, enterprise systems, and customer platforms. The role will own and drive cybersecurity across all aspects of Spiroʼs ecosystem, including: -Software Security -IoT & Telematics Security -Product & Embedded Security -OT / Factory 4.0 Security -Cloud & Infrastructure Security -Enterprise Security -Data Privacy & Governance -Application Security The ideal candidate must possess deep expertise in IoT and telematics security, cloud security, Factory 4.0 / OT environments, and data privacy, while also demonstrating the ability to thrive in a high-growth startup environment with evolving priorities and rapid execution cycles. We are specifically looking for a leader with strong startup experience who is comfortable operating in dynamic environments with fast decision-making, and aggressive scaling targets with the ability to balance business agility and security requirements. Key Responsibilities **Cybersecurity Strategy & Leadership** -Define, implement, and continuously evolve the enterprise cybersecurity strategy and roadmap. -Build and lead a high-performing cybersecurity team and external security partnerships. -Establish security governance, policies, standards, and reporting mechanisms. -Drive a security-first culture across engineering, product, and business functions. -Partner closely with executive leadership to align cybersecurity strategy with business growth objectives. **Product, Software & IoT Security** -Secure connected 2-wheeler platforms, telematics systems, mobile applications, APIs, backend services, and embedded systems. -Lead threat modeling, secure architecture reviews, vulnerability assessments, and penetration testing for connected products and software platforms. -Implement secure software development lifecycle (SSDLC) practices across engineering teams. -Oversee firmware security, secure boot, OTA update security, API security, and device identity management. -Evaluate and secure emerging technology integrations, including blockchain-enabled platforms, digital identity systems, connected mobility ecosystems, and secure transaction frameworks where applicable. **Cloud & Infrastructure Security** -Lead the security architecture and governance of cloud environments, including IAM, VPC security, encryption, monitoring, logging, and key management. -Implement DevSecOps practices and secure CI/CD pipelines. -Enhance cloud detection and response capabilities, including SIEM, EDR/XDR, and security monitoring. -Oversee security posture management across cloud-native environments and SaaS platforms. **OT / Factory 4.0 Security** -Design and enforce cybersecurity controls for smart manufacturing systems, industrial IoT (IIoT), and operational technology (OT) environments. -Secure manufacturing networks, robotics, production systems, and connected factory assets. -Ensure alignment with industrial cybersecurity standards and operational resilience best practices. **Data Privacy & Compliance** -Ensure compliance with applicable global and regional privacy regulations, including GDPR and DPDP. -Define and implement enterprise data governance, classification, retention, and protection policies. -Support compliance initiatives aligned with ISO 27001, ISO 21434, IEC 62443, and NIST frameworks. I **ncident Response & Risk Management** -Establish and lead incident response, cyber crisis management, and forensic investigation processes. -Conduct enterprise-wide risk assessments, third-party security reviews, and security audits. -Develop and maintain cyber resilience, business continuity, and disaster recovery strategies. **Qualifications** **Experience** -15+ years of cybersecurity experience, including at least 5 years in a senior leadership role. -Strong experience working in high-growth startups, technology-driven organizations, or rapidly scaling environments. -Proven ability to build and mature cybersecurity capabilities in organizations undergoing rapid expansion and operational scaling. -Exposure to blockchain-enabled mobility ecosystems, secure digital identity frameworks, or distributed ledger technologies within IoT and connected platforms. **Technical & Domain Expertise** -IoT and telematics security -Cloud security -Product and embedded systems security -Factory 4.0 / OT security -DevSecOps and application security -Data privacy and compliance frameworks -Enterprise and infrastructure security **Preferred Certifications** -CISSP – Certified Information Systems Security Professional -CISM – Certified Information Security Manager -CISA – Certified Information Systems Auditor -AWS Certified Security – Specialty -CEH, OSCP, or equivalent offensive security certifications **Preferred Industry Experience** -Automotive, mobility, EV, or connected device ecosystems -Familiarity with ISO 21434, ISO 27001, IEC 62443, and NIST frameworks **What We Offer** -Opportunity to shape the cybersecurity posture of a next-generation EV company -Work alongside passionate innovators in a fast-paced, mission-driven environment -High ownership and opportunity to build security capabilities from the ground up -Competitive compensation and equity participation -Flexible work culture with continuous learning and growth opportunities