Date Posted:
2026-05-07
Country:
United States of America
Location:
US-CT-REMOTE
Position Role Type:
Remote
U.S. Citizen, U.S. Person, or Immigration Status Requirements:
This job requires a U.S. Person. A U.S. Person is a lawful permanent resident as defined in 8 U.S.C. 1101(a)(20) or who is a protected individual as defined by 8 U.S.C. 1324b(a)(3). U.S. citizens, U.S. nationals, U.S. permanent residents, or individuals granted refugee or asylee status in the U.S. are considered U.S. persons. For a complete definition of 9U.S. Person9 go here: https://www.ecfr.gov/current/title-22/chapter-I/subchapter-M/part-120/subpart-C/section-120.62
Security Clearance Type:
None/Not Required
Security Clearance Status:
Not Required
RTX is seeking a highly experienced, strategic and proactive leader to serve as the Senior Manager - Supplier Cyber Risk & Resilience. This role will be responsible for developing, implementing, and managing a comprehensive supplier cyber risk management function in collaboration with RTX's supply chain and product security teams. The ideal candidate will have a strong background in cybersecurity, supply chain risk management, and leadership, with the ability to drive cross-functional initiatives and ensure compliance with regulatory and corporate standards.
The Senior Manager 6 Supplier Cyber Risk & Resilience reports to the Director 6 Digital Risk and is responsible for managing the supplier cyber risk & resilience program for Enterprise Services, Pratt Whitney, Collins Aerospace and Raytheon. The role will require a deep understanding of supplier cyber risk & resilience management, the ability to lead through transformation, and successfully partner with key Enterprise functions, Internal Audit and RTX business units.
What You Will Do:
Establish and operationalize a robust supplier cyber risk & resilience management program to identify, assess, and support resolution of cyber and resilience risks across RTX9s supply chain.
Identify, implement and maintain processes, methodology, tools and technologies to support supplier cyber risk and resilience management.
Plan and conduct supplier cyber & resilience assessments, identify risks, document risk assessments in standard report deliverable, and support implementation of risk mitigation strategies.
Document and manage findings and remediation plans in RTX9s authoritative source of record throughout the entire finding lifecycle.
Support evaluation of supplier compliance with RTX cybersecurity policies, industry standards, and government regulations (e.g., NIST, CMMC, DFARS).
Build strong relationships with suppliers to promote cybersecurity best practices and drive continuous improvement in supplier cyber risk management.
Lead efforts to address supplier-related cybersecurity incidents, including root cause analysis and corrective actions.
Develop and maintain key performance indicators (KPIs) and dashboards to measure the effectiveness of the supplier cyber risk management program.
Provide regular status update on program health to Director - Digital Risk.
Drive supplier and internal awareness programs to enhance understanding of cybersecurity risks and requirements.
Partner with RTX supply chain, product security, and other relevant teams to align supplier cyber risk management strategies with corporate objectives.
Partner with cross-functional teams, including IT, Cyber Defense, Internal Audit, Legal, and Compliance, to ensure a cohesive and integrated approach to digital risk management.
Partner with other GRC functions to drive the development and implementation of risk-based policies and controls to safeguard digital assets and ensure compliance with industry standards and regulations.
Stay updated on industry trends, regulatory changes, and best practices related to digital risk.
Must be willing occasionally travel onsite in Dallas, TX or Farmington, CT.
Qualification You Must Have:
A University Degree in and a minimum of 10 years of prior relevant experience, or an Advanced Degree in a related field and a minimum of 7 years of relevant experience.
Prior relevant work experience must include digital risk management, cybersecurity, or a related discipline.
Experience working in a global, heavily regulated industry.
Qualifications We Prefer:
3+ years of experience in a risk advisory or consulting firm.
Strong understanding of digital risk management frameworks, standards, and best practices (e.g., NIST 800-53, NIST 800-171, ISO 27001, CMMC).
Proven track record of successfully building or transforming supplier cyber risk management programs in large, complex organizations, preferably within the Aerospace and Defense or Financial Services industries.
Proven ability to lead cross-functional teams and manage complex projects in a matrixed organization.
Familiarity with supply chain processes and product security requirements.
Ability to communicate with all levels of management verbally and written, facilitate effective meetings, build effective working relationships and partnerships, and strong interpersonal skills
Excellent analytical, problem-solving, and decision-making skills
Relevant certifications such as CISSP, CISM, CRISC, or similar are desirable.
Highly proficient in Microsoft Office products with experience in preparing presentations and presenting to executive leadership.
General knowledge of IT, Artificial Intelligence and cybersecurity with experience in the following areas: incident response, business continuity/ disaster recovery, vulnerability management, application security, database security, identity & access management, OT security, cloud security, third-party & supply chain risk management.
Excellent analytical, problem-solving, and decision-making skills.
What We Offer:
Whether you9re just starting out on your career journey or are an experienced professional, we offer a robust total rewards package with compensation; healthcare, wellness, retirement and work/life benefits; career development and recognition programs. Some of the benefits we offer include parental (including paternal) leave, flexible work schedules, achievement awards, educational assistance and child/adult backup care.
Location:
Please ensure the role type defined below is appropriate for your needs before applying to this role. This position is classified as:
Remote: Employees who are working in Remote roles will work primarily offsite (from home).
As part of our commitment to maintaining a secure hiring process, candidates may be asked to attendselect steps of the interview process in-person at one of our office locations, regardless of whether the role is designated as on-site, hybrid or remote.
The salary range for this role is 132,400 USD - 251,600 USD. The salary range provided is a good faith estimate representative of all experience levels. RTX considers several factors when extending an offer, including but not limited to, the role, function and associated responsibilities, a candidate9s work experience, location, education/training, and key skills.
Hired applicants may be eligible for benefits, including but not limited to, medical, dental, vision, life insurance, short-term disability, long-term disability, 401(k) match, flexible spending accounts, flexible work schedules, employee assistance program, Employee Scholar Program, parental leave, paid time off, and holidays. Specific benefits are dependent upon the specific business unit as well as whether or not the position is covered by a collective-bargaining agreement.
Hired applicants may be eligible for annual short-term and/or long-term incentive compensation programs depending on the level of the position and whether or not it is covered by a collective-bargaining agreement. Payments under these annual programs are not guaranteed and are dependent upon a variety of factors including, but not limited to, individual performance, business unit performance, and/or the company9s performance.
This role is a U.S.-based role. If the successful candidate resides in a U.S. territory, the appropriate pay structure and benefits will apply.
RTX anticipates the application window closing approximately 40 days from the date the notice was posted. However, factors such as candidate flow and business necessity may require RTX to shorten or extend the application window.
