Job description

Mission

JOB PURPOSE: 

The Sr Cybersecurity Engineer is responsible for safeguarding the company’s information, systems, and digital infrastructure. The role ensures that cybersecurity is embedded within all system and network designs, while driving compliance with international standards and regulatory requirements. The position develops and enforces security policies, leads regular audits, and monitors internal systems to proactively identify and mitigate potential risks.

In addition, the role is a key enabler of business continuity by implementing and testing disaster recovery plans and ensuring IT governance, compliance, and risk management frameworks are consistently applied. The Sr. Cyber Security will act as a subject matter expert, collaborating with cross-functional teams, engaging stakeholders at all levels, and ensuring staff awareness and capability through effective training programs.

RESPONSIBILITIES/DUTIES 

Supervision & Governance

•Oversee the assessment and approval of security policy exceptions and change management requests.

•Take ownership of cybersecurity governance, policies, and procedures to ensure compliance with business, regulatory, and legal requirements.

•Build a strong security culture across the business, ensuring both employees and external partners understand the importance of security testing and compliance.

•Provide clear and comprehensive reports on testing, risk assessments, and security audits to both technical and non-technical audiences.

•Lead the evaluation of information protection technologies to identify and address potential weaknesses.

Operations & Risk Management

•Monitor and assess data processing systems to ensure logical controls are effective and up to standards.

•Coordinate with infrastructure and business systems teams to implement security controls, policies, and risk mitigation measures.

•Manage incident response processes, ensuring timely escalation, containment, and resolution of security events.

•Drive disaster recovery and business continuity plans, ensuring regular testing and readiness.

Continuous Improvement

•Identify opportunities to improve security processes, controls, and systems in line with international best practices.

•Stay updated with evolving cyber threats, technologies, and industry benchmarks by participating in professional forums and industry conferences.

•Recommend innovative solutions to strengthen security posture, optimize costs, and enhance productivity.

Reporting & Documentation

•Develop and deliver timely cybersecurity dashboards, highlighting gaps, risks, and performance against benchmarks.

•Ensure security reports, policies, and audit trails are accurate, accessible, and meet organizational standards.

Additional Responsibilities

•Support security-related enhancement projects to strengthen the company’s IT infrastructure.

•Perform other assignments as directed in alignment with business and security objectives.

•Ability to manage multiple assessments independently, prioritizing tasks effectively.

•Relevant certifications in SIEM/SOAR/EDR platforms (e.g., Splunk, ELK, LogRhythm, Sentinelone, Palo Alto XSIAM, or equivalent) are preferred.

Safety Responsibilities

•Promote a positive safety culture within the workplace and attend any safety-related meetings or briefings as required within the job role.

•Comply with the requirements of RDMC RQHSE Policy and Safety Management System.

•Be mindful that Safety, Security, and Environmental protection are everyone’s responsibility. 

•All staff members are accountable for reporting and intervening in any Safety, Security, or Environmental violations.

ESSENTIAL QUALIFICATIONS, KNOWLEDGE & EXPERIENCE

Qualifications

•Bachelor’s degree in Computer Science, Information Technology, Cyber Security, or a related field.

•Professional Cyber Security certifications preferred: CISSP, eCIR, OSCP, eCTH.

Knowledge

•Strong understanding of IT networks, access management, and cloud-hosting concepts.

•Ability to assess technology systems from both a technical and business perspective.

•Skilled in communicating complex cybersecurity topics to non-technical audiences.

•Broad knowledge of IT systems and in-depth understanding of associated security risks.

•Familiarity with cybersecurity risk management and control frameworks.

•Familiarity with information security standards and best practices (e.g., ISO 27001, NIST).

Experience

•5-7 years of experience in cybersecurity or a related field

•Strong engineering background with demonstrated technical expertise.

•Proven experience in managing cybersecurity within complex and dynamic environments.

•Industry experience in service sectors such as finance or related fields is highly desirable.

•Solid knowledge of network infrastructure, Linux/Windows administration, and system monitoring, with expertise in security telemetry (firewall, EDR, proxy, and other log sources).

DESIRED BEHAVIORS & EXPERIENCES

•Excellent interpersonal and leadership skills, with the ability to influence and engage stakeholders at all levels.

•Strong communication skills, with the ability to translate technical concepts into clear business value.

•Assertive and confident decision-maker, with the ability to drive organizational change.

•Enthusiastic, proactive, and self-motivated, with a strong commitment to continuous learning.

•Highly organized, detail-oriented, and resilient under pressure.