About Pratt & Whitney Canada

Pratt & Whitney Canada (P&WC) is a global leader in aerospace innovation, proudly headquartered in Longueuil, Quebec, since 1928. We design and manufacture next-generation aircraft engines that power the world’s largest fleet of business, general aviation, and regional aircraft and helicopters.

For nearly 100 years, our teams have been at the forefront of propulsion technology, pushing boundaries to make flight more efficient and reliable. Our engines support missions that truly matter, from transporting people and essential goods, to enabling emergency medical services, humanitarian operations, and wildfire suppression around the world.

An Employer of Choice

Pratt & Whitney Canada was named one of Canada’s Best Employers for 2026 by Forbes, marking the 11th consecutive year the company has earned this recognition. Pratt & Whitney Canada also ranked #1 employer in the aerospace and defense industry in the country. In addition, our headquarters continues to be recognized among the top employers in the Montreal region.

Together, these distinctions reinforce our reputation as an employer of choice in Montreal, across Canada, and around the world.

Why Join Pratt & Whitney Canada’s Digital Technology Team?

We are on a digital transformation journey, redefining how we work, optimizing operations and transforming products and services to elevate employee and customer experiences.

As part of our Digital Technology team, you’ll help shape the future, working with advanced tools, automating processes and innovating across all business functions.

Our global organization is committed to cultivating an empowered and skilled team to bring advanced solutions and leading-edge digital capabilities to market for our customers.

Position Summary

The RTX Pratt & Whitney Cybersecurity organization is seeking a highly motivated and experienced Cybersecurity & Compliance Leader (CCL) to serve as a strategic partner to assigned business domains. This role sits at the intersection of cyber risk, compliance, and business operations, ensuring that enterprise cybersecurity priorities are understood, adopted, and executed within the business while providing leadership visibility into local risk posture.

The CCL is a trusted advisor, risk translator, and business-facing liaison, responsible for aligning cyber and compliance requirements with business objectives, driving risk governance, and ensuring readiness for internal and external regulatory expectations. The role is a key contributor to Pratt & Whitney’s Cyber Mission Assurance and overall enterprise cyber posture.

CCLs are not operators—they drive risk ownership, clarity, and business action, ensuring cyber enables mission success, operational continuity, and customer trust.

This role will also be responsible for supporting a DT controls program, in partnership with Enterprise Services, to validate independently the work performed by the first line of defense.

Our Team’s Guiding Principles

• Business First, Cyber Always: every interaction starts with business outcomes and concludes with secure implementation.
• Standardize Where Possible, Tailor Where Needed: consistency fosters efficiency; flexibility ensures relevance.
• Proactive Before Reactive: prioritize anticipation and early alignment rather than last-minute interventions.
• One Team, Many Voices: maintain unity across CMS while respecting the realities proper to each business unit.

What Will Your Day-to-Day Look Like?

Cybersecurity and Compliance Risk Leadership

• Serve as a responsible person and point of reference for business sectors to monitor the posture regarding cybersecurity and compliance risks for Digital Technology controls (Digital Controls).
• Help provide an integrated view of risks covering IT, OT, cloud, engineering, suppliers, and regulatory requirements.
• Ensure that risk decisions are taken in charge, provided with necessary resources, and prioritized by business sectors.

Business Partnership and Strategic Alignment

• Integrate considerations related to Digital Technology controls into business strategies, programs, and major initiatives, notably modernization, engineering systems, and manufacturing operations.
• Represent business needs to cybersecurity, compliance, and Digital Technology teams to ensure alignment and prioritization.
• Translate enterprise cybersecurity strategy, standards, and roadmaps into concrete action plans adapted to business sector needs.

Governance, Accountability, and Risk Reviews

• Lead digital technology control governance forums intended for business sectors, notably risk reviews, program follow-ups, and discussions related to compliance readiness.
• Ensure traceability and tracking of mitigation measures, funding decisions, and risk acceptances.
• Provide leaders with clear, concise, and actionable information on the digital technology controls posture, identified gaps, and progress achieved.

Compliance Readiness and Sustainment

• Collaborate with internal and external stakeholders to help maintain audit readiness according to applicable regulatory frameworks, notably CMMC, government customer requirements, and RTX policies.
• Identify gaps at the level of digital technology controls, coordinate corrective measures with business sectors, and ensure evidence and documentation are complete and accurate.

Communication, Change Management, and Stakeholder Engagement

• Communicate cybersecurity risks, policies, and changes in a clear, adapted, and accessible manner to business sectors.
• Mobilize leaders and teams by developing solid relationships and effective partnerships across different functions.
• Foster awareness and the adoption of a culture centered on secure behaviors and respect for compliance obligations.

Performance Measurement and Continuous Improvement

• Help define and make known key performance indicators (KPIs), metrics, and indicators related to the digital technology controls posture, in coherence with enterprise models.
• Identify systemic trends and opportunities for improvement, and collaborate with technical teams to help develop solutions.
• Promote optimization, innovation, and CORE principles to support operational excellence.
• CORE Principles: Promote best practices relying on RTX CORE principles (Customer Oriented Results and Excellence) to foster innovation and operational efficiency.

What You Need to Succeed

Required Qualifications

• Bachelor's degree in computer science, computer engineering, cybersecurity, or a related field with 12+ years of relevant experience, OR graduate degree with 10+ years of experience.
• Solid understanding of information security practices and frameworks, with expertise in risk identification, emerging threat analysis, and mitigation strategies.
• Demonstrated experience in multiple cybersecurity domains (e.g., security architecture, compliance, vulnerability management, incident response, application security).
• Experience in leadership and ability to influence without direct authority to successfully execute operational plans and service delivery.
• Excellent written and oral communication skills to produce clear presentations and reports adapted to technical and non-technical audiences.
• Solid skills in analytical reasoning, critical thinking, prioritization, and attention to detail, with a willingness to innovate and excel.

Desired Qualifications

• Ability to mobilize and inspire cross-functional teams, foster collaboration, and build consensus.
• Good understanding of business strategies, processes, and planning, with an aptitude to integrate cybersecurity into operations.
• Ability to establish and maintain credibility through sustained expertise in cybersecurity, digital, and/or the aerospace and defense industry.
• High adaptability and ease in complex and evolving organizational environments.
• Marked interest in working with customers and partners, and ability to build trusting relationships.
• Knowledge of Agile methods and their implementation.
• Security certifications (CISSP, CEH, GEVA, or equivalent).

What We Offer

• Pension and savings plan with employer contributions
• Group insurance program
• Opportunities for advancement (career progression)
• Merit or recognition program
• Health and wellness program, including telemedicine
• Recreational and sports club
• Nearby daycares
• Transportation accessibility or public transit program and free parking

Working at Pratt & Whitney Canada

The masculine is used solely for the purpose of lightening the text. We will review employment applications from all qualified candidates.

At Pratt & Whitney Canada, we combine passion, boldness, and rigor to design, manufacture, and maintain the most advanced and reliable aircraft engines in the world.

Our work and the quality of our products contribute to the success of our customers, who in turn save lives, support commerce, connect communities, and protect freedoms.

At Pratt & Whitney Canada, you have the opportunity to make a difference every day; you just have to look up. Are you ready to surpass yourself?

The successful candidate must submit to a judicial background check and obtain all necessary clearances related to the handling and transfer of controlled goods. The job offer is conditional upon the success of these verifications and obtaining the required clearances. If these conditions are not met, the job offer will be withdrawn.