Corporate Product Cybersecurity Governance & Incident Response Leader (Remote – Secret Clearance Required)

Date Posted:

2025-10-17

Country:

United States of America

Location:

MA133: Tewksbury, Ma Bldg 3 Concord 50 Apple Hill Drive Concord – Building 3, Tewksbury, MA, 01876 USA

Position Role Type:

Unspecified

U.S. Citizen, U.S. Person, or Immigration Status Requirements:

Active and transferable U.S. government issued security clearance is required prior to start date. U.S. citizenship is required, as only U.S. citizens are eligible for a security clearance

Security Clearance:

Secret – Current

RTX Corporation is an Aerospace and Defense company that provides advanced systems and services for commercial, military and government customers worldwide. It comprises three industry-leading businesses – Collins Aerospace Systems, Pratt & Whitney, and Raytheon. Its 185,000 employees enable the company to operate at the edge of known science as they imagine and deliver solutions that push the boundaries in quantum physics, electric propulsion, directed energy, hypersonics, avionics and cybersecurity. The company, formed in 2020 through the combination of Raytheon Company and the United Technologies Corporation aerospace businesses, is headquartered in Arlington, VA.

The following position is to join our RTX Corporate team:

Summary of Role:

The Corporate Product Cybersecurity Governance and Incident Response Leader will be responsible for building, running, and maintaining a comprehensive, mature approach to product cybersecurity governance, risk management as well incident response. The leader will engage with cross business and corporate teams across multiple functions including Engineering, Enterprise Services, Legal and Supply Chain. The Corporate Product Cybersecurity Governance and Incident Response Leader will report to the RTX Chief Product Cybersecurity Officer and will be responsible for the development and maintenance of existing and new Product Cybersecurity metrics, processes and policies, work instructions, tools and training needed to meet the RTX Product Cybersecurity mission objectives. The leader will also be responsible for providing oversight of risk management and incident response processes for all RTX products. This role must communicate effectively with executive stakeholders and succeed as a change leader. This role will also collaborate with other stakeholders on the identification of industry and company trends related to cybersecurity governance, incidents and threats that impact our products. The position will be executed with considerable autonomy.

What You Will Do:

• Oversight and implementation of Product Cybersecurity processes and work instructions at the Enterprise level as they relate to risk management and incident response frameworks
• Partner with key stakeholders across business units and functions on Product Cybersecurity related risks and incident response.
• Lead the development and implementation of risk and incident response policies, procedures, and standards.
• Collaborate with corporate organizations on the identification of industry and company trends related to incidents and threats.
• Drive operations according to government standards and regulations.
• Lead and partner with stakeholders to develop, communicate, and execute product cybersecurity crisis management plans and playbooks.
• Coordinate and lead product cybersecurity incident tabletops, process and procedure testing and corrective actions.
• Conduct incident after action reviews to identify strengths, improvement opportunities and track corrective actions.
• Develop metrics programs to track status, trends, and effectiveness of product cybersecurity risk management and incidents on programs.

Qualifications You Must Have:

• Requires a University Degree or equivalent experience and a minimum 14 years of experience, or an Advanced Degree and a minimum 12 years experience.
• 12+ years in product development of commercial and/or defense products.
• 5 + years experience developing and implementing cybersecurity requirements derived from NIST 800-53 and the Risk Management Framework, for the Department of Defense, FAA, or Intelligence Community.
• Experience leading teams of 5-10 people and managing cost and schedule for cross-company initiatives.
• Experience in implementing security risk management activities such as those found in the Secure Software Development Lifecycle (SSDLC) framework.
• Active and transferable U.S. government issued security clearance is required prior to start date. U.S. citizenship is required, as only U.S. citizens are eligible for a security clearance.

Qualifications We Prefer:

• Experience working with organizations such as Aviation ISAC, NDIA and NIST that define guidance and standards on cyber for government organization.
• Experience with DO-326 standards.
• Prior experience in cyber incident response.
• Expert organizational, interpersonal, analytical, verbal, and written communication skills are essential.
• Problem solving and analytical abilities including the ability to critically evaluate information gathered from multiple sources, reconcile conflicts, decompose high-level information into details and apply sound business knowledge.
• Experience in working with real time operating systems.
• Ability to build and maintain customer relationships; strong team player, able to meet deadlines and adjust to changing priorities.
• Demonstrated focus on process development and implementation that spans organizational boundaries.
• Expertise in security related software architecture, development, integration, and testing, cyber detection and response, cyber threat intelligence and operations.
• Self-starter with ability to work independently and to manage multiple tasks/projects in a disciplined and organized fashion while maintaining attention to detail.
• Ability to work collaboratively with team members, some of which may be geographically distributed.
• Experienced in organizational and business change management.

Learn More & Apply Now!

Work Location: Remote

Please consider the following role type definition as you apply for this role:

Remote: This position is currently designated as remote. However, the successful candidate will be required to work from one of the 50 U.S. states (excluding U.S. Territories). Employees who are working in Remote roles will work primarily offsite (from home). An employee may be expected to travel to the site location as needed.

As part of our commitment to maintaining a secure hiring process, candidates may be asked to attend select steps of the interview process in-person at one of our office locations, regardless of whether the role is designated as on-site, hybrid or remote.

The salary range for this role is 176,000 USD – 352,000 USD. The salary range provided is a good faith estimate representative of all experience levels. RTX considers several factors when extending an offer, including but not limited to, the role, function and associated responsibilities, a candidate’s work experience, location, education/training, and key skills.

Hired applicants may be eligible for benefits, including but not limited to, medical, dental, vision, life insurance, short-term disability, long-term disability, 401(k) match, flexible spending accounts, flexible work schedules, employee assistance program, Employee Scholar Program, parental leave, paid time off, and holidays. Specific benefits are dependent upon the specific business unit as well as whether or not the position is covered by a collective-bargaining agreement.

Hired applicants may be eligible for annual short-term and/or long-term incentive compensation programs depending on the level of the position and whether or not it is covered by a collective-bargaining agreement. Payments under these annual programs are not guaranteed and are dependent upon a variety of factors including, but not limited to, individual performance, business unit performance, and/or the company’s performance.

This role is a U.S.-based role. If the successful candidate resides in a U.S. territory, the appropriate pay structure and benefits will apply.

RTX anticipates the application window closing approximately 40 days from the date the notice was posted. However, factors such as candidate flow and business necessity may require RTX to shorten or extend the application window.

RTX is an Equal Opportunity Employer. All qualified applicants will receive consideration for employment without regard to race, color, religion, sex, sexual orientation, gender identity, national origin, age, disability or veteran status, or any other applicable state or federal protected class. RTX provides affirmative action in employment for qualified Individuals with a Disability and Protected Veterans in compliance with Section 503 of the Rehabilitation Act and the Vietnam Era Veterans’ Readjustment Assistance Act.

Privacy Policy and Terms:

Click on this link to read the Policy and Terms

Read Full Description