Cybersecurity & Compliance Leader (CCL) | Responsable cybersécurité et conformité (CCL)

Date Posted / Date d’affichage: 2026-09-17

Country / Pays: Canada

Location / Emplacement: CA-QC-LONGUEUIL-J01 ~ 1000 Blvd Marie-Victorin ~ J01 BLDG

English will follow

Job Title: Cybersecurity & Compliance Leader (CCL)

About Pratt & Whitney Canada

Pratt & Whitney Canada (P&WC) is a global leader in aerospace innovation, headquartered in Longueuil, Quebec, since 1928. We design and manufacture next-generation aircraft engines that power the world’s largest fleet of airplanes and helicopters in business aviation, general aviation, and regional aviation.

For nearly 100 years, our teams have been at the forefront of propulsion technologies, pushing boundaries to make our engines more efficient and reliable. Our engines support essential missions, from passenger and cargo transport to emergency medical services, humanitarian operations, and firefighting worldwide.

An Employer of Choice

Pratt & Whitney Canada was recognized as one of Canada's Top Employers for 2026 by Forbes for the 11th consecutive year. The company also ranked first among employers in Canada's aerospace and defense industry. In addition, our headquarters consistently ranks among the top employers in the Montreal region.

Together, these distinctions confirm our reputation as an employer of choice in Montreal, Canada, and globally.

Why join Pratt & Whitney Canada’s Digital Technology team?

We are undergoing a digital transformation, redefining how we work, optimizing our operations, and transforming our products and services to improve employee and customer experiences.

As a member of our Digital Technology team, you will help shape the future by working with advanced tools, automating processes, and innovating across all business functions.

Our global organization is committed to cultivating an autonomous and skilled team to bring advanced solutions and cutting-edge digital capabilities to our customers.

Role Summary

The RTX Pratt & Whitney Cybersecurity organization is seeking an experienced and highly motivated Cybersecurity & Compliance Leader (CCL) to act as a strategic partner to assigned business areas. This role sits at the intersection of cyber risk, compliance, and business operations, ensuring that the company's cybersecurity priorities are understood, adopted, and implemented within business units while providing leadership visibility into the local risk posture.

The CCL acts as a trusted advisor, risk translator, and liaison with business units. They are responsible for aligning cybersecurity and compliance requirements with business objectives, driving risk governance, and ensuring preparedness for internal and external regulatory requirements. This role is a key contributor to Pratt & Whitney's cyber mission assurance and overall enterprise cybersecurity posture.

CCL's are not operators—they drive risk accountability, clarity, and action within business units so that cybersecurity supports mission success, operational continuity, and customer trust.

This role will also be responsible for supporting a DT controls program, in partnership with Enterprise Services, to independently validate the work performed by the first line of defense.

Team Guiding Principles

• Business first, cybersecurity always: every interaction begins with business outcomes and concludes with secure implementation.
• Standardize when possible, adapt when necessary: consistency drives efficiency; flexibility ensures relevance.
• Proactivity before reactivity: prioritize anticipation and early alignment over last-minute interventions.
• One team, multiple voices: maintain unity across the CMS while respecting the realities inherent to each business unit.

What your day-to-day will look like

Cybersecurity and Compliance Risk Leadership

• Act as the responsible person and point of reference for business sectors to monitor the posture regarding cybersecurity and compliance risks for Digital Controls.
• Help provide an integrated view of risks covering IT, OT, cloud, engineering, suppliers, and regulatory requirements.
• Ensure that risk-related decisions are supported, resourced, and prioritized by business sectors.

Business Partnership and Strategic Alignment

• Integrate digital technology control considerations into business strategies, programs, and major initiatives, notably modernization, engineering systems, and manufacturing operations.
• Represent the needs of business sectors to cybersecurity, compliance, and digital technology teams to ensure alignment and prioritization.
• Translate the company's cybersecurity strategy, standards, and roadmaps into concrete action plans tailored to the needs of business sectors.

Governance, Accountability, and Risk Reviews

• Lead digital technology control governance forums intended for business sectors, notably risk reviews, program follow-ups, and discussions related to compliance readiness.
• Ensure traceability and tracking of mitigation measures, funding decisions, and risk acceptance.
• Provide leaders with clear, concise, and actionable information on the posture of digital technology controls, identified gaps, and progress made.

Compliance Readiness and Maintenance

• Collaborate with internal and external stakeholders to help maintain audit readiness according to applicable regulatory frameworks, notably CMMC, government customer requirements, and RTX policies.
• Identify gaps in digital technology controls, coordinate corrective measures with business sectors, and ensure that evidence and documentation are complete and accurate.

Communication, Change Management, and Stakeholder Engagement

• Communicate cybersecurity risks, policies, and changes clearly, adaptively, and accessibly to business sectors.
• Mobilize leaders and teams by developing strong relationships and effective partnerships across different functions.
• Foster awareness and adoption of a culture centered on safe behaviors and compliance obligations.

Performance Measurement and Continuous Improvement

• Help define and promote key performance indicators (KPIs), metrics, and indicators related to the posture of digital technology controls, in consistency with company models.
• Identify systemic trends and improvement opportunities, and collaborate with technical teams to help develop solutions.
• Promote optimization, innovation, and CORE principles to support operational excellence.
• CORE Principles: Promote best practices by relying on RTX CORE (Customer Oriented Results and Excellence) principles to foster innovation and operational efficiency.

What you need to succeed

Required Qualifications

• Bachelor's degree in computer science, computer engineering, cybersecurity, or a related field with 12+ years of relevant experience, OR a graduate degree with 10+ years of experience.
• Solid understanding of information security practices and frameworks, with expertise in risk identification, emerging threat analysis, and mitigation strategies.
• Demonstrated experience in multiple cybersecurity domains (e.g., security architecture, compliance, vulnerability management, incident response, application security).
• Leadership experience and the ability to influence without direct authority to successfully drive operational plans and service delivery.
• Excellent written and oral communication skills to produce clear presentations and reports tailored to technical and non-technical audiences.
• Strong analytical reasoning, critical thinking, prioritization, and attention to detail, with a drive to innovate and excel.

Preferred Qualifications

• Ability to mobilize and inspire cross-functional teams, foster collaboration, and build consensus.
• Good understanding of business strategies, processes, and planning, with the ability to integrate cybersecurity into operations.
• Ability to establish and maintain credibility through sustained expertise in cybersecurity, digital, and/or the aerospace and defense industry.
• High adaptability and comfort in complex and evolving organizational environments.
• Strong interest in working with clients and partners, and the ability to build trusting relationships.
• Knowledge of Agile methods and their implementation.
• Security certifications (CISSP, CEH, GEVA, or equivalent).

What we offer

• Retirement and savings plan program with employer matching
• Group insurance program
• Advancement opportunities (career progression)
• Program de m