Director – Product Cybersecurity, Supply Chain Risk Management

This is a fully remote position, open to applicants in Massachusetts.

📋 Description

• Oversee the strategy and execution of Cyber Supply Chain Risk Management (C-SCRM) for products within DoD and commercial aerospace programs.

• Collaborate with Engineering, Supply Chain, Enterprise Services, Quality, and RTX leadership to establish strategy and coordinate initiatives.

• Identify and address cyber supply chain risks associated with RTX products and services.

• Establish secure product development and assurance practices for DoD and commercial aerospace initiatives.

• Incorporate C-SCRM practices into RFPs, proposals, and contractual language, including SBOM/HBOM, provenance, and assurance artifacts.

• Lead supplier product cybersecurity risk assessments and assurance activities.

• Assess supplier development practices, provenance, counterfeit controls, and alignment with standards.

• Specify cyber supply chain requirements for components, firmware, software, and services provided by suppliers.

• Ensure traceability from mission- and safety-critical functions to sub-tier suppliers.

• Embed C-SCRM controls into product and acquisition lifecycles, covering architecture trades, supplier selection, verification planning, and sustainment channels.

• Provide executive-level reporting on cyber supply chain risk posture, vulnerabilities, counterfeit exposure, and trends.

• Counsel leadership on emerging C-SCRM threats, regulatory changes, and strategic investment necessities.

• Represent RTX in cross-industry and government forums concerning C-SCRM, aerospace assurance, and supply chain security.

• Develop, monitor, and enhance Product Cybersecurity C-SCRM KPIs and metrics.

• Report directly to the VP of RTX Product Cybersecurity.

⛳️ Requirements

• Bachelor's Degree or equivalent experience with a minimum of 15 years in the field, or an Advanced Degree with at least 12 years of experience.

• At least 12 years of experience in product, cybersecurity, or supply chain domains.

• Proficient in guiding programs through secure engineering and assurance processes.

• Experience in creating and evaluating mission-critical function trees.

• Skilled in generating and reviewing supplier-to-function mapping matrices.

• Familiarity with SBOMs, HBOMs, provenance maps, and trusted component registries.

• Knowledge of threat models and compromise scenario libraries related to mission/safety impacts.

• Proven ability to communicate and negotiate with government customers, regulators, standards organizations, and prime/sub-tier suppliers.

• Capability to obtain and maintain a U.S. government-issued security clearance.

• An active and existing Secret security clearance is required starting from day one.

• U.S. citizenship is required.

• Preferred ability to influence senior leadership and align engineering, supply chain, quality, and program teams.

• Must be able to work from one of the 50 U.S. states, excluding U.S. Territories.

🏝️ Benefits

• Medical insurance

• Dental insurance

• Vision insurance

• Life insurance

• Short-term disability

• Long-term disability

• 401(k) match

• Flexible spending accounts

• Flexible work schedules

• Employee assistance program

• Employee Scholar Program

• Parental leave

• Paid time off

• Holidays

• Potential annual short-term and/or long-term incentive compensation programs

• Remote work primarily from home

• Potential travel to the site as needed