Senior Supply Chain Cyber Risk Analyst

RTX; Phoenix (AZ); Remote; USD 87,000 - 165,000; Full time

Benefits offered by this job

Medical

Dental

Vision

Life Insurance

Short-term Disability

Long-term Disability

401(k) match

Flexible Spending Accounts

Flexible work schedules

Job summary

RTX, a leading aerospace and defense company, seeks an experienced professional to lead key Supply Chain Cybersecurity and Risk Management initiatives. The role drives cybersecurity compliance, supplier risk visibility, and maturity of risk processes across Raytheon’s programs and supply base.

You will guide DFARS/CMMC requirements, incident reporting, and cross‑functional collaboration while shaping long‑term SCRM frameworks and training materials for organizational readiness.

Qualifications

• Typically requires a university degree or equivalent experience and minimum 5 years prior relevant experience, or an advanced degree in a related field and minimum 3 years’ experience.
• Experience supporting supply chain, risk management, or cyber‑related processes.
• Experience supporting operational processes, compliance activities, or risk‑related assessments.
• Experience analyzing datasets, synthesizing findings, and developing recommendations.
• Experience preparing clear, actionable summaries or recommendations based on analysis of issues, data trends, or cross‑functional inputs.
• Experience with Cybersecurity Maturity Model Certification (CMMC) and Cyber DFARS/FARS clauses.
• Experience with Tableau, SQL, Snowflake, or Alteryx.
• CORE Champion certification or equivalent.

Responsibilities

• Lead analysis of part numbers and suppliers at risk of non‑compliance with Cybersecurity Maturity Model Certification clauses.
• Identify program‑level impacts, advise Programs on required tracking and compliance expectations, and deliver high‑quality, executive‑ready briefings.
• Provide strategic insight on shifting requirements and their implications for the supply base.
• Serve as a primary interface for complex and time‑sensitive cybersecurity and CMMC‑related inquiries.
• Triage and disposition requests with limited oversight, coordinate with functional SMEs, and ensure accurate communication.
• Lead coordination with suppliers on annual representations and certifications attestation requirements, ensuring clarity, consistency, and compliance.
• Lead Raytheon’s portion of the Supply Chain Cyber Incident Reporting process.
• Review incident notifications from RTX Corporate, determine exposure using tools and internal data systems, assess potential impact, and drive timely, compliant cross‑functional responses.
• Provide guidance to team members on incident evaluation and documentation.
• Shape and mature Supply Chain Risk Management roles, responsibilities, and documentation across cybersecurity and related domains, including but not limited to financial risk, specialty materials, conflict minerals, and rare earth elements.
• Identify process gaps, recommend structural improvements, and influence the development of long‑term SCRM frameworks.
• Manage the development, refinement, and maintenance of training materials, Standard Work, Job Aids, and organizational guidance related to cybersecurity and CMMC.
• Ensure materials align with current policy, contractual requirements, and organizational expectations.
• Promote organizational readiness through clear communication and stakeholder enablement.
• Perform internal program risk analyses related to supplier compliance with DFARS 252.204‑7012, 252.204‑7020, and 252.204‑7021.
• Track, evaluate, and communicate program metrics and maturity indicators.
• Support Supply Chain personnel by interpreting CMMC certification requirements and clarifying expectations for supplier compliance.

Skills

Data analysis

Risk assessment

Cross-functional collaboration

Clear communication

CMMC

DFARS/FARS

Tableau

SQL

Snowflake

Alteryx

Education

Bachelor's degree or equivalent experience

Tools

Tableau

SQL

Snowflake

Alteryx

Job description

RTX, a leading aerospace and defense company, seeks an experienced professional to lead key Supply Chain Cybersecurity and Risk Management initiatives. The role drives cybersecurity compliance, supplier risk visibility, and maturity of risk processes across Raytheon’s programs and supply base.

You will guide DFARS/CMMC requirements, incident reporting, and cross‑functional collaboration while shaping long‑term SCRM frameworks and training materials for organizational readiness.