Cybersecurity & Compliance Leader (CCL) | Responsable cybersécurité et conformité (CCL)

Date Posted: 2026-03-20

Country: Canada

Location: CA-QC-LONGUEUIL-J01 ~ 1000 Blvd Marie-Victorin ~ J01 BLDG *English will follow*

Job Title: Cybersecurity & Compliance Leader (CCL)

About Pratt & Whitney Canada

Pratt & Whitney Canada (P&WC) is a global leader in aerospace innovation, headquartered in Longueuil, Quebec, since 1928. We design and manufacture next-generation aircraft engines that power the world's largest fleet of business, general aviation, and regional aircraft and helicopters.

For nearly 100 years, our teams have been at the forefront of propulsion technology, pushing the boundaries to make our engines more powerful and reliable. Our engines support essential missions, from passenger and cargo transport to emergency medical services, humanitarian operations, and wildfire fighting, worldwide.

An Employer of Choice

Pratt & Whitney Canada has been recognized as one of Canada's top employers for 2026 by Forbes, for the 11th consecutive year. The company has also ranked as the top employer in the aerospace and defense industry in the country. Additionally, our headquarters continues to be among the best employers in the Montreal region.

Together, these accolades confirm our reputation as an employer of choice in Montreal, Canada, and globally.

Why Join Pratt & Whitney Canada's Digital Technologies Team?

We are undergoing a digital transformation, redefining how we work, optimizing our operations, and transforming our products and services to enhance the experiences of employees and customers.

As a member of our Digital Technologies team, you will contribute to shaping the future by working with advanced tools, automating processes, and innovating across all functions of the company.

Our global organization is committed to fostering an autonomous and skilled team to deliver advanced solutions and cutting-edge digital capabilities to our clients.

The Cybersecurity organization of RTX Pratt & Whitney is seeking an experienced and highly motivated Cybersecurity & Compliance Leader (CCL) to act as a strategic partner to assigned business domains. This role sits at the intersection of cyber risk, compliance, and business operations, ensuring that the company's cybersecurity priorities are understood, adopted, and implemented within business units, while providing visibility to leadership on the local risk posture.

The CCL acts as a trusted advisor, translator of risks, and liaison to business units. They are responsible for aligning cybersecurity and compliance requirements with business objectives, driving risk governance, and ensuring readiness for internal and external regulatory requirements. This role plays a key part in Pratt & Whitney's cyber mission assurance and the company's overall cybersecurity posture.

CCLs are not operators—they ensure risk accountability, clarity, and action within business units, so that cybersecurity supports mission success, operational continuity, and customer trust.

This role will also be responsible for implementing a DT controls program in partnership with Enterprise Services, to independently validate the work done by the first line of defense.

Team Leadership Principles

• Business first, cybersecurity always: every interaction begins with business outcomes and ends with secure implementation.
• Standardize where possible, adapt where necessary: consistency fosters efficiency; flexibility ensures relevance.
• Proactive over reactive: prioritize anticipation and early alignment over last-minute interventions.
• One team, many voices: maintain unity across the CMS while respecting the realities of each business unit.
• What Will Your Day Look Like?
• Cyber Risk and Compliance Leadership
• Act as the single point of accountability, business-side, for the cyber risk and compliance posture in assigned domains.
• Provide an integrated view of risks covering IT, OT, cloud, engineering, suppliers, and regulatory environments.
• Ensure that risk-related decisions are supported, funded, and prioritized by business units.
• Business Partnership and Strategic Alignment
• Integrate cybersecurity considerations into major strategies, programs, and initiatives (e.g., modernization, engineering systems, manufacturing operations).
• Represent business unit needs to cybersecurity, compliance, and Digital Technologies teams.
• Translate the company's cyber strategy, standards, and roadmaps into actionable, relevant plans for business.
• Governance, Accountability, and Risk Reviews
• Lead cybersecurity and compliance governance forums with business units (risk reviews, program tracking, audit preparation).
• Ensure traceability and tracking of mitigation actions, funding decisions, and risk acceptance.
• Provide leadership with clear, concise, and actionable information on posture, gaps, and progress.
• Compliance Preparation and Maintenance
• Collaborate with internal and external stakeholders to ensure readiness for audits according to applicable regulatory frameworks (e.g., CMMC, government customer requirements, RTX policies).
• Identify control gaps, coordinate remediation plans, and ensure the quality and completeness of documentation.
• Communication, Change Management, and Mobilization
• Communicate cybersecurity risks, policies, and changes clearly, appropriately, and business-oriented.
• Influence leaders and teams through strong relationships and effective cross-functional collaboration.
• Foster the adoption of secure and compliant behaviors.
• Performance Measurement and Continuous Improvement
• Define and promote performance indicators (KPIs) and metrics aligned with the company's models.
• Identify systemic trends and improvement opportunities; collaborate with technical teams to develop solutions.
• Promote optimization, innovation, and CORE principles to support operational excellence.
• CORE Principles: apply the best practices of the RTX CORE model (Customer Oriented Results and Excellence) to foster innovation and operational efficiency.

What You Need to Succeed

• Required Qualifications
• Bachelor's degree in computer science, computer engineering, cybersecurity, or related field with more than 12 years of relevant experience, OR advanced degree with more than 10 years of experience.
• Strong understanding of information security practices and frameworks, including risk identification, emerging threats, and mitigation strategies.
• Demonstrated experience in multiple cybersecurity domains (e.g., security architecture, compliance, vulnerability management, incident response, application security).
• Experience in leadership and ability to influence without direct authority to execute operational plans and deliver services.
• Excellent written and oral communication skills to produce clear, tailored presentations and reports for technical and non-technical audiences.
• Strong analytical reasoning, critical thinking, prioritization, and attention to detail, with a willingness to innovate and excel.
• Desired Qualifications
• Ability to mobilize and inspire cross-functional teams, foster collaboration, and build consensus.
• Good understanding of business strategies, processes, and planning, with the ability to integrate cybersecurity into operations.
• Ability to establish and maintain credibility through sustained expertise in cybersecurity, digital, and/or aerospace and defense industries.
• Strong adapt