Lead, Cybersecurity Program

Porter Airlines; Toronto; On-site; CAD 110,000 - 165,000; Full time

Job summary

Porter Airlines Inc. is seeking a Lead, Cybersecurity Program reporting to the Director, Cybersecurity, to deliver and operationalize key cybersecurity capabilities across Porter’s technology environment.

This hands-on, delivery-focused role focuses on implementing, integrating, and adopting core tools and controls, including IAM, CMDB, and other security platforms, and coordinating with Infrastructure, Data, and Enterprise Applications.

Qualifications

• 5-8 years of experience in cybersecurity, IT delivery, or related roles.
• Proven experience implementing cybersecurity tools (IAM/Okta experience strongly preferred).
• Experience working across infrastructure and application environments.
• Strong delivery mindset with the ability to execute end-to-end initiatives.
• Ability to work cross-functionally and influence without direct authority.

Responsibilities

• Lead end-to-end implementation of cybersecurity tools (IAM, CMDB, cloud, endpoint and data security).
• Coordinate delivery across multiple teams and vendor deployments.
• Embed cybersecurity tools into operational processes and drive adoption.
• Translate cybersecurity policies and standards into practical controls and ensure consistent application.
• Track progress of cybersecurity initiatives and report outcomes.

Skills

Cybersecurity program mgmt

Risk management

Stakeholder communication

Project management

Cross-functional collaboration

Security policy development

Education

CISSP or equivalent

Tools

Okta

ServiceNow/CMDB

Job description

Job Summary

Reporting to the Director, Cybersecurity, the Lead, Cybersecurity Program is responsible for delivering and operationalizing key cybersecurity capabilities across Porter’s technology environment.

This role focuses on the implementation, integration, and adoption of core cybersecurity tools and controls, including identity and access management, asset and configuration management (CMDB), and other foundational security platforms.

While aligned to Porter’s broader cybersecurity program and control framework, this role is primarily accountable for execution — ensuring that security solutions are deployed effectively, embedded into day-to-day operations, and delivering measurable outcomes.

Working closely with Infrastructure, Enterprise Applications, Data, and external partners, this role bridges cybersecurity strategy and hands‑on delivery. This is a hands‑on, delivery‑focused role centered on building and implementing cybersecurity capabilities. It is not a monitoring, audit, or SOC‑focused role.

Duties & Responsibilities

Cybersecurity Tool Implementation & Delivery:

• Lead end‑to‑end implementation of cybersecurity tools (e.g., IAM, CMDB, cloud, endpoint and data security)
• Manage vendor evaluation, solution design, deployment, and rollout
• Coordinate delivery across multiple teams and concurrent initiatives
• Ensure integration with existing systems, platforms, and workflows

Operationalization & Adoption:

• Embed cybersecurity tools into operational processes across IT and business teams
• Define ownership models, workflows, and support structures
• Drive adoption and ensure sustained usage across the organization
• Establish and track metrics (coverage, usage, effectiveness, risk reduction)

Security Controls Implementation:

• Translate cybersecurity policies and standards into practical, implementable controls
• Partner with delivery teams to embed controls into systems and projects
• Ensure consistent application of controls across platforms and environments

Cyber Program Alignment:

• Support delivery of cybersecurity roadmap initiatives with a focus on execution
• Contribute to risk assessments and third‑party reviews where tied to implementation efforts
• Ensure solutions align with Porter’s cybersecurity framework and control objectives

Cross‑Team Collaboration:

• Partner with Infrastructure, Enterprise Applications, Data, and PMO teams
• Coordinate dependencies across internal teams and external vendors
• Act as the bridge between cybersecurity strategy and execution
• Active participation in Porter’s Safety Management System (SMS) including, reporting hazards and incidents encountered in daily operation; understand comply and promote the Company Safety Policy

Program Execution & Reporting:

• Track progress of cybersecurity initiatives and key deliverables
• Provide clear, outcome‑based reporting on implementation and impact
• Identify risks, gaps, and delivery challenges early and drive resolution

Behavioural Competencies

• Concern for Safety: Identifying hazardous or potentially hazardous situations and taking appropriate action to maintain a safe environment for self and others.
• Teamwork: Working collaboratively with others to achieve organizational goals.
• Passenger/Customer Service: Providing service excellence to internal and/or external customers (passengers).
• Initiative: Dealing with situations and issues proactively and persistently, seizing opportunities that arise.
• Results Focus: Focusing efforts on achieving high quality results consistent with the organization’s standards.
• Fostering Communication: Listening and communicating openly, honestly, and respectfully with different audiences, promoting dialogue and building consensus.

Qualifications

Qualifications:

• 5-8 years of experience in cybersecurity, IT delivery, or related roles
• Proven experience implementing cybersecurity tools (IAM/Okta experience strongly preferred)
• Experience working across infrastructure and application environments
• Strong delivery mindset with the ability to execute end‑to‑end initiatives
• Ability to work cross‑functionally and influence without direct authority

Nice to have:

• Experience with CMDB (eg: ServiceNow)
• Familiarity with cloud environments and SaaS security
• Experience in regulated or operationally complex environments

Key Skills:

• Cybersecurity Program Management
• Risk Management
• Security Policy and Standards Development
• Stakeholder Communication
• Collaboration and Teamwork
• Project Management
• Knowledge of relevant security technologies and tools

Success Measures:

• Successful delivery and rollout of key cybersecurity tools
• Adoption and integration of tools into operational processes
• Measurable improvements in control coverage and effectiveness
• Clear ownership and sustainment of implemented capabilities

Location

Toronto Downtown Office (250 Yonge Street) #LI-Hybrid

Company Description

Since 2006, Porter Airlines has been elevating the experience of economy air travel for every passenger, providing genuine hospitality with style, care and charm. Porter’s fleet of Embraer E195-E2 and De Havilland Dash 8‑400 aircraft serves North America, including a coast‑to‑coast domestic Canadian network, the U.S., Mexico, the Caribbean and Central America. Headquartered in Toronto, Porter is an Official 4 Star Airline® in the World Airline Star Rating®. Visit www.flyporter.com or follow @porterairlines on Instagram, Facebook and X.