Assoc Dir, Digital Supply Chain Risk & Resilience (Hybrid)

Date Posted:

2024-09-17

Country:

United States of America

Location:

UTVA5: Corp Arlington, VA 1000 Wilson Boulevard Suite 2300, Arlington, VA, 22209 USA

Position Role Type:

Unspecified

RTX Corporation is an Aerospace and Defense company that provides advanced systems and services for commercial, military and government customers worldwide. It comprises three industry-leading businesses – Collins Aerospace Systems, Pratt & Whitney, and Raytheon. Its 185,000 employees enable the company to operate at the edge of known science as they imagine and deliver solutions that push the boundaries in quantum physics, electric propulsion, directed energy, hypersonics, avionics and cybersecurity. The company, formed in 2020 through the combination of Raytheon Company and the United Technologies Corporation aerospace businesses, is headquartered in Arlington, VA.   

To realize our full potential, RTX is committed to creating a company where all employees are respected, valued and supported in the pursuit of their goals. We know companies that embrace diversity in all its forms not only deliver stronger business results, but also become a force for good, fueling stronger business performance and greater opportunity for employees, partners, investors and communities to succeed. 

The following position is to join our RTX Corporate, Enterprise Services, Research Center or BBN team:

Role Overview

We're looking for a highly motivated individual with a strong work ethic and the ability to work in a collaborative, fast-paced, changing environment. As the Associate Director of the Digital 3rd Party Supply Chain Risk & Resilience Team, you will play a crucial role in managing and mitigating risks associated with 3rd party suppliers while assuring the resilience of the RTX supply chain.  This role requires a forward-thinking leader with expertise in digital 3rd party supply chain cyber security risk management.

What You Will Do:

The Associate Director, Digital 3rd Party Supply chain Risk & Resilience is responsible for establishing and managing the Digital 3rd Party Supply Chain Risk Management and Resilience Program for Enterprise Services, Pratt Whitney, Collins Aerospace and Raytheon. In this role you will lead a team of talented professionals who will conduct cybersecurity assessments of 3rd party suppliers to determine their ability to protect RTX and Customer data as required by cybersecurity, privacy, financial, federal, state, industry and international laws and regulations.  You will design, deploy and operate a robust set of 3rd party risk & resilience services for Enterprise Services and the BU’s.  In this role you will work closely with service owners, subject matter experts, business unit & functional stakeholders, and key suppliers to test and report on  the ability of our suppliers to protect sensitive RTX and customer data. You will also partner with Supply Chain to mitigate risks associated with single source suppliers to assure the resiliency of the supply chain. This role reports into the Director, 3rd Party Digital Risk & Resilience and has responsibilities that include:

• Conduct thorough initial & ongoing risk assessments and due diligence required to evaluate the cybersecurity posture and compliance with DoD and industry regulations of 3rd party suppliers, vendors and cloud service providers
• Develop & promulgate risk mitigation strategy to 1) diversify the supplier base to reduce dependency on any single 3rd party provider or services and 2) develop contingency plans for critical 3rd party  services.
• Develop & test incident response plans that includes 3rd party suppliers.
• Ensure 3rd party suppliers handling RTX and Customer sensitive data have robust recovery plans and can support continuity of operations.
• Ensure 3rd party suppliers comply with all relevant regulations and industry standards for cybersecurity, ITAR and privacy.
• Conduct periodic reassessments of 3rd party supplier sensitive data handling practices
• Establish regular communication channels with 3rd party suppliers for reporting and managing risk. Implement reporting system for 3rd party supplier performance, risks and incidents
• Establish a communications program to collaborate and share threat intelligence and best practices with 3rd party suppliers
• Effectively manage communications and statuses across relevant stakeholders (from senior leaders to technical SMEs). Build presentations/content adjusted to a given audience on program strategy and status
• Establish and maintain 3rd party risk & resilience metrics and scorecards.
• Manage both direct and matrixed resources to accomplish key deliverables.

Qualifications You Mus