Corporate Product Cybersecurity Governance & Incident Response Leader (Remote - Secret Clearance Required)

Date Posted:

2025-10-17

Country:

United States of America

Location:

MA133: Tewksbury, Ma Bldg 3 Concord 50 Apple Hill Drive Concord - Building 3, Tewksbury, MA, 01876 USA

Position Role Type:

Unspecified

U.S. Citizen, U.S. Person, or Immigration Status Requirements:

Active and transferable U.S. government issued security clearance is required prior to start date.​ U.S. citizenship is required, as only U.S. citizens are eligible for a security clearance​

Security Clearance:

Secret - Current

RTX Corporation is an Aerospace and Defense company that provides advanced systems and services for commercial, military and government customers worldwide. It comprises three industry-leading businesses – Collins Aerospace Systems, Pratt & Whitney, and Raytheon. Its 185,000 employees enable the company to operate at the edge of known science as they imagine and deliver solutions that push the boundaries in quantum physics, electric propulsion, directed energy, hypersonics, avionics and cybersecurity. The company, formed in 2020 through the combination of Raytheon Company and the United Technologies Corporation aerospace businesses, is headquartered in Arlington, VA.   

The following position is to join our RTX Corporate team:

Summary of Role:

The Corporate Product Cybersecurity Governance and Incident Response Leader will be responsible for building, running, and maintaining a comprehensive, mature approach to product cybersecurity governance, risk management as well incident response.  The leader will engage with cross business and corporate teams across multiple functions including Engineering, Enterprise Services, Legal and Supply Chain. The Corporate Product Cybersecurity Governance and Incident Response Leader will report to the RTX Chief Product Cybersecurity Officer and will be responsible for the development and maintenance of existing and new Product Cybersecurity metrics, processes and policies, work instructions, tools and training needed to meet the RTX Product Cybersecurity mission objectives. The leader will also be responsible for providing oversight of risk management and incident response processes for all RTX products.  This role must communicate effectively with executive stakeholders and succeed as a change leader. This role will also collaborate with other stakeholders on the identification of industry and company trends related to cybersecurity governance, incidents and threats that impact our products.  The position will be executed with considerable autonomy.

What You Will Do:

• Oversight and implementation of Product Cybersecurity processes and work instructions at the Enterprise level as they relate to risk management and incident response frameworks
• Partner with key stakeholders across business units and functions on Product Cybersecurity related risks and incident response.
• Lead the development and implementation of risk and incident response policies, procedures, and standards.
• Collaborate with corporate organizations on the identification of industry and company trends related to incidents and threats.
• Drive operations according to government standards and regulations.
• Lead and partner with stakeholders to develop, communicate, and execute product cybersecurity crisis management plans and playbooks.
• Coordinate and lead product cybersecurity incident tabletops, process and procedure testing and corrective actions.
• Conduct incident after action reviews to identify strengths, improvement opportunities and track corrective actions.
• Develop metrics programs to track status, trends, and effectiveness of product cybersecurity risk management and incidents on programs.

Qualifications You Must Have:

• Requires a University Degree or equivalent experience and a minimum 14 years of experience, or an Advanced Degree and a minimum 12 years experience.
• 12+ years in product development of commercial and/or defense products.
• 5 + years experience developing and implementing cybersecurity requirements derived from NIST 800-53 and the Risk Management Framework,  for the Department of Defense, FAA,  or Intelligence Community.
• Experience leading teams of 5-10 people and managing cost and schedule for cross-company initiatives.
• Experience in implementing security risk management activities such as those found in the Secure Software Development Lifecycle (SSDLC) framework.
• Active and transferable U.S. government issued security clearance is required prior to start date. U.S. citizenship is required, as only U.S. citizens are eligible for a security clearance.

Qualifications We Prefer:

• Experience working with organizations such as Aviation ISAC,