Director - Product Cybersecurity Supply Chain Risk Management

RTX; Boston (MA); Remote; USD 160,000 - 230,000; Full time

Job summary

RTX Corporation seeks a Director of Product Cyber Supply Chain Risk Management to lead strategy and execution across the product lifecycle, partnering with Engineering, Supply Chain, Quality, and Enterprise Services to embed secure supplier risk practices in design and procurement for DoD and aerospace programs.

The role requires deep expertise in secure engineering, supplier risk assessments, SBOM/HBOM provenance, and KPI-driven reporting to executives.

Qualifications

• Typically requires a University Degree or equivalent experience and a minimum 14 years of experience, or an Advanced Degree and a minimum 12 years experience.
• Minimum of 12 years experience in product, cybersecurity, or supply chain fields
• Experience guiding programs through secure engineering and assurance processes, including integration into requirements, architecture, and supplier management

Responsibilities

• Lead the Cyber Supply Chain Risk Management (C‑SCRM) strategy and execution for products, with focus on supplier, component, and lifecycle assurance for DoD and commercial aerospace programs.
• Partner with RTX leadership to define C‑SCRM strategy, coordinate initiatives, and identify cyber supply chain risks to RTX products and services.
• Define secure supplier product development and assurance practices and integrate them into RFPs, proposals, and contract language (SBOM/HBOM, provenance, assurance artifacts).
• Drive supplier cybersecurity risk assessments and assurance activities, including evaluation of development practices, provenance, counterfeit controls, and alignment to standards.
• Define and drive cyber supply chain requirements for supplier-provided components, firmware, software, and services, ensuring traceability across tiers.
• Integrate C‑SCRM controls into the product and acquisition lifecycles, including architecture trades, supplier selection, verification planning, and sustainment.

Skills

Cybersecurity

Supply chain

Leadership

DoD knowledge

Education

University degree or equivalent

Advanced degree

Job description

Date Posted:2026-09-10Country:United States of America

Location:US-MA-REMOTE

Position Role Type:Unspecified

U.S. Citizen, U.S. Person, or Immigration Status Requirements: U.S. citizenship is required, as only U.S. citizens are authorized to access certain necessary systems.

Security Clearance Type: DoD Clearance: Secret

Security Clearance Status: Active and existing security clearance required after day 1RTX Corporation is an Aerospace and Defense company that provides advanced systems and services for commercial, military and government customers worldwide. It comprises three industry-leading businesses – Collins Aerospace Systems, Pratt & Whitney, and Raytheon. Its 185,000 employees enable the company to operate at the edge of known science as they imagine and deliver solutions that push the boundaries in quantum physics, electric propulsion, directed energy, hypersonics, avionics and cybersecurity. The company, formed in 2020 through the combination of Raytheon Company and the United Technologies Corporation aerospace businesses, is headquartered in Arlington, VA. The following position is to join our RTX Corporate team:Role Overview:The Director of Product Cyber Supply Chain Risk Management is responsible for leading the strategy and execution of cyber supply chain risk practices across the product lifecycle. This role ensures that products for bothDoD and commercial aerospace sectorsare designed, built, and delivered securely by integrating supplier risk oversight, secure‑by‑design expectations, vulnerability and counterfeit risk management, and assurance requirements into engineering and supply chain workflows. The Director partners with Business Unit (BU) Engineering & Program Management, Supply Chain, Quality, and Enterprise Services to identify and mitigate cyber supply chain risks to mission‑critical and safety‑critical functions. The role drives integration of C‑SCRM into system engineering, acquisition, and supplier management processes and aligns practices with relevantsecurity and quality standards. This leader provides executive visibility into cyber supply chain risk posture, shapes long‑range C‑SCRM strategy, and champions continuous improvement of C‑SCRM capabilities across RTX. This role will report into the VP of RTX Product Cybersecurity.What You Will Do:

• Lead theCyber Supply Chain Risk Management (C‑SCRM)strategy and execution for products, with clear focus on supplier, component, and lifecycle assurance for DoD and commercial aerospace programs.

• Partner with RTX leadership (Engineering, Supply Chain, Enterprise Services, Quality) to define C‑SCRM strategy, coordinate key initiatives, and identify cyber supply chain risks to RTX products and services.

• Support DoD and commercial aerospace pursuits by defining secure supplier product development and assurance practices and integrating them into RFPs, proposals, and contract language (e.g., SBOM/HBOM, provenance, assurance artifacts).

• Drive Supplier Product Cybersecurity Risk Assessments and Assuranceactivities, including evaluation of development practices, provenance, counterfeit controls, and alignment to relevant standards.

• Define and drivecyber supply chain requirements for supplier‑provided components, firmware, software , and services, ensuring traceability from mission/safety‑critical functions down to sub‑tier suppliers.

• Integrate C‑SCRM controls into theproduct lifecycle and acquisition lifecycle, including architecture trades, supplier selection, verification planning, and sustainment/maintenance channels.

• Deliver clear, actionable reporting on cyber supply chain risk posture, vulnerabilities, counterfeit exposure, and trends to executive and senior leaders.

• Advise leadership on emerging C‑SCRM threats (e.g., firmware implants, silicon backdoors, compromised build pipelines, gray‑market infiltration), regulatory developments, and strategic investment needs.

• Represent RTX in cross‑industry and government forums related to C‑SCRM, aerospace assurance, and supply chain security, as appropriate.

• Establish, track, and continuously refine Product Cybersecurity C‑SCRM KPIs and metrics.Qualifications You Must Have:

• Typically requires a University Degree or equivalent experience and a minimum 14 years of experience, or an Advanced Degree and a minimum 12 years experience.

• Minimum of 12 years experience in product, cybersecurity, or supply chain fields

• Experience guiding programs through secure engineering and assurance processes, including