Cybersecurity Executive

Purpose/Objective

The Cybersecurity Executive will be responsible for safeguarding RMRW's information assets, digital infrastructure, enterprise applications, cloud environments, and operational technology (OT) systems from cyber threats.
The role will drive cybersecurity governance, risk management, incident response, security operations, regulatory compliance, and security awareness initiatives across Head Office and Project Sites.

Key Responsibilities of Role

a { text-decoration: none; color: #464feb; } tr th, tr td { border: 1px solid #e6e6e6; } tr th { background-color: #f5f5f5; } Cybersecurity Governance & Strategy - Implement and maintain the cybersecurity framework aligned with business objectives.
- Develop cybersecurity policies, standards, and procedures across RMRW operations.
- Ensure compliance with organizational and regulatory cybersecurity requirements.
- Conduct periodic security reviews and risk assessments.
Security Operations Management - Monitor and manage Security Operations Center (SOC) activities.
- Ensure continuous monitoring of networks, servers, applications, and cloud environments.
- Investigate security incidents and coordinate response activities.
- Lead vulnerability management and remediation programs.
Infrastructure & Network Security - Manage network security controls including Firewalls, IDS/IPS, VPNs, WAF, and NAC solutions.
- Ensure secure configuration of infrastructure, data centers, and cloud workloads.
- Perform security assessments and penetration testing.
Identity & Access Management - Govern user access controls and privileged account management.
- Implement role-based access control (RBAC).
- Monitor authentication systems and access compliance.
Cloud Security - Secure Azure, AWS, and hybrid-cloud environments.
- Implement cloud security policies, monitoring, and compliance controls.
- Assess cloud architecture for security vulnerabilities and risks.
Security Risk & Compliance - Conduct cybersecurity audits and compliance assessments.
- Support ISO 27001, NIST, and other cybersecurity framework implementations.
- Maintain risk registers and mitigation plans.
Incident Response & Business Continuity - Lead incident investigation, containment, recovery, and post-incident reviews.
- Develop and test Cyber Incident Response Plans.
- Support Disaster Recovery (DR) and Business Continuity Planning (BCP).
Security Awareness - Conduct cyber awareness and phishing simulation programs.
- Promote cybersecurity best practices across projects and corporate functions.
- Train employees on cyber hygiene and information security requirements.

Technical Competencies

Reduction in Cybersecurity Risks,Vulnerability Closure Rate,Compliance Audit Score,Network & Endpoint Security Compliance,Cybersecurity Maturity Improvement

Qualifications and Experience

Educational Qualification - B.
E.
/B.
Tech in Computer Science, Information Technology, Cybersecurity, Electronics, or related discipline.
- Master's Degree in Information Security / Technology Management preferred.
Experience - 9+ years of experience in Information Security, Cybersecurity Operations, or Security Governance.