Enterprise Information Security Leader

RPM xConstruction, LLC; McKinney, Northern (TX, KY); Hybrid; USD 120,000 - 160,000; Full time

Job summary

RPM xConstruction, LLC is seeking a senior information security leader to develop and govern the company’s information security program across corporate IT, field offices, and project sites. You will align strategy with NIST CSF, NIST SP 800-171, and CMMC 2.0, driving risk-informed decisions for bids and operations.

You will own the SSP/POA&M, coordinate audits, and oversee security controls across cloud, on-premise, and field systems, while leading incident response and security training

Qualifications

• 7+ years in information security, risk management, or IT compliance with leadership experience.
• Experience supporting CMMC, NIST SP 800-171, or similar federal/defense requirements preferred.
• Construction/real estate or project-based industries experience is a plus.

Responsibilities

• Develop, implement, and update RPM's enterprise information security strategy, policies, and standards.
• Own compliance with cybersecurity requirements for DoD/government contracts and monitor CMMC rollout.
• Maintain SSP/POA&M and support audits, assessments, and vendor risk management.
• Lead incident response, security monitoring, and reporting to executive leadership.
• Ensure secure architecture, IAM, and secure deployment of project management and field systems.

Skills

Leadership

Risk management

Cross-functional collaboration

Executive communication

Incident response

Education

Bachelor's degree in Information Security, Computer Science, IT, or related field

Master's degree preferred

Job description

RPM xConstruction, LLC is seeking a senior information security leader to develop and govern the company’s information security program across corporate IT, field offices, and project sites. You will align strategy with NIST CSF, NIST SP 800-171, and CMMC 2.0, driving risk-informed decisions for bids and operations.

You will own the SSP/POA&M, coordinate audits, and oversee security controls across cloud, on-premise, and field systems, while leading incident response and security training