Director - Product Cybersecurity Supply Chain Risk Management

Job description

Date Posted: 2026-08-17 Country: United States of America Location: US-MA-REMOTE Position Role Type: Unspecified U.S. Citizen, U.S. Person, or Immigration Status Requirements: U.S. citizenship is required, as only U.S. citizens are authorized to access certain necessary systems. Security Clearance Type: DoD Clearance: Secret Security Clearance Status: Active and existing security clearance required after day 1 RTX Corporation is an Aerospace and Defense company that provides advanced systems and services for commercial, military and government customers worldwide. It comprises three industry-leading businesses – Collins Aerospace Systems, Pratt & Whitney, and Raytheon. Its 185,000 employees enable the company to operate at the edge of known science as they imagine and deliver solutions that push the boundaries in quantum physics, electric propulsion, directed energy, hypersonics, avionics and cybersecurity. The company, formed in 2020 through the combination of Raytheon Company and the United Technologies Corporation aerospace businesses, is headquartered in Arlington, VA. The following position is to join our RTX Corporate team: Role Overview: The Director of Product Cyber Supply Chain Risk Management is responsible for leading the strategy and execution of cyber supply chain risk practices across the product lifecycle. This role ensures that products for both DoD and commercial aerospace sectors are designed, built, and delivered securely by integrating supplier risk oversight, secure‑by‑design expectations, vulnerability and counterfeit risk management, and assurance requirements into engineering and supply chain workflows. The Director partners with Business Unit (BU) Engineering & Program Management, Supply Chain, Quality, and Enterprise Services to identify and mitigate cyber supply chain risks to mission‑critical and safety‑critical functions. The role drives integration of C‑SCRM into system engineering, acquisition, and supplier management processes and aligns practices with relevant security and quality standards. This leader provides executive visibility into cyber supply chain risk posture, shapes long‑range C‑SCRM strategy, and champions continuous improvement of C‑SCRM capabilities across RTX. This role will report into the VP of RTX Product Cybersecurity. What You Will Do: Lead the Cyber Supply Chain Risk Management (C‑SCRM) strategy and execution for products, with clear focus on supplier, component, and lifecycle assurance for DoD and commercial aerospace programs. Partner with RTX leadership (Engineering, Supply Chain, Enterprise Services, Quality) to define C‑SCRM strategy, coordinate key initiatives, and identify cyber supply chain risks to RTX products and services. Support DoD and commercial aerospace pursuits by defining secure supplier product development and assurance practices and integrating them into RFPs, proposals, and contract language (e.g., SBOM/HBOM, provenance, assurance artifacts). Drive Supplier Product Cybersecurity Risk Assessments and Assurance activities, including evaluation of development practices, provenance, counterfeit controls, and alignment to relevant standards. Define and drive cyber supply chain requirements for supplier‑provided components, firmware, software , and services, ensuring traceability from mission/safety‑critical functions down to sub‑tier suppliers. Integrate C‑SCRM controls into the product lifecycle and acquisition lifecycle, including architecture trades, supplier selection, verification planning, and sustainment/maintenance channels. Deliver clear, actionable reporting on cyber supply chain risk posture, vulnerabilities, counterfeit exposure, and trends to executive and senior leaders. Advise leadership on emerging C‑SCRM threats (e.g., firmware implants, silicon backdoors, compromised build pipelines, gray‑market infiltration), regulatory developments, and strategic investment needs. Represent RTX in cross‑industry and government forums related to C‑SCRM, aerospace assurance, and supply chain security, as appropriate. Establish, track, and continuously refine Product Cybersecurity C‑SCRM KPIs and metrics. Qualifications You Must Have: Requires a University Degree or equivalent experience and a minimum 15 years of experience, or an Advanced Degree and a minimum 12 years experience . Minimum of 12 years experience in product, cybersecurity, or supply chain fields Experience guiding programs through secure engineering and assurance processes, including generation and review of key artifacts such as: Mission critical function trees. Supplier to function mapping matrices. SBOMs, HBOMs, provenance maps, and trusted component registries. Threat models and compromise scenario libraries tied to mission/safety impacts. Experience communicating and negotiating with external bodies (government customers, regulators, standards organizations, prime/sub tier suppliers) on C SCRM, assurance, and quality expectations. The ability to obtain and maintain a U.S. government issued security clearance is required. U.S. citizenship is required, as only U.S. citizens are eligible for a security clearance. Qualifications We Prefer: Demonstrated ability to influence senior leadership and drive alignment across engineering, supply chain, quality, and program teams with differing priorities. Learn More & Apply Now! Work Location: Remote - MA Please consider the following role type definition as you apply for this role: Remote: This position is currently designated as remote. However, the successful candidate will be required to work from one of the 50 U.S. states (excluding U.S. Territories). Employees who are working in Remote roles will work primarily offsite (from home). An employee may be expected to travel to the site location as needed. As part of our commitment to maintaining a secure hiring process, candidates may be asked to attend select steps of the interview process in-person at one of our office locations, regardless of whether the role is designated as on-site, hybrid or remote. The salary range for this role is 186,200 USD - 353,800 USD. The salary range provided is a good faith estimate representative of all experience levels. RTX considers several factors when extending an offer, including but not limited to, the role, function and associated responsibilities, a candidate’s work experience, location, education/training, and key skills. Hired applicants may be eligible for benefits, including but not limited to, medical, dental, vision, life insurance, short-term disability, long-term disability, 401(k) match, flexible spending accounts, flexible work schedules, employee assistance program, Employee Scholar Program, parental leave, paid time off, and holidays. Specific benefits are dependent upon the specific business unit as well as whether or not the position is covered by a collective-bargaining agreement. Hired applicants may be eligible for annual short-term and/or long-term incentive compensation programs depending on the level of the position and whether or not it is covered by a collective-bargaining agreement. Payments under these annual programs are not guaranteed and are dependent upon a variety of factors including, but not limited to, individual performance, business unit performance, and/or the company’s performance. This role is a U.S.-based role. If the successful candidate resides in a U.S. territory, the appropriate pay structure and benefits will apply. RTX anticipates the application window closing approximately 40 days from the date the notice was posted. However, factors such as candidate flow and business necessity may require RTX to shorten or extend the application window. RTX is an Equal Opportunity Employer. All qualified applicants will receive consideration for employment without regard to race, color, religion, sex, sexual orientation, gender identity, national origin, age, disability or veteran status, or any other applicable state or federal protected class. RTX provides affirmative action in employment for qualified Individuals with a Disability and Protected Veterans in compliance with Section 503 of the Rehabilitation Act and the Vietnam Era Veterans’ Readjustment Assistance Act. Privacy Policy and Terms: Click on this link to read the Policy and Terms