Lead, Cybersecurity Program

Job Summary

Reporting to the Director, Cybersecurity, the Lead, Cybersecurity Program is responsible for delivering and operationalizing key cybersecurity capabilities across Porter’s technology environment. This role focuses on the implementation, integration, and adoption of core cybersecurity tools and controls, including identity and access management, asset and configuration management (CMDB), and other foundational security platforms. While aligned to Porter’s broader cybersecurity program and control framework, this role is primarily accountable for execution — ensuring that security solutions are deployed effectively, embedded into day-to-day operations, and delivering measurable outcomes. Working closely with Infrastructure, Enterprise Applications, Data, and external partners, this role bridges cybersecurity strategy and hands-on delivery. This is a hands-on, delivery-focused role centered on building and implementing cybersecurity capabilities. It is not a monitoring, audit, or SOC-focused role. Duties & Responsibilities Cybersecurity Tool Implementation & Delivery: Lead end-to-end implementation of cybersecurity tools (e.g., IAM, CMDB, cloud, endpoint and data security) Manage vendor evaluation, solution design, deployment, and rollout Coordinate delivery across multiple teams and concurrent initiatives Ensure integration with existing systems, platforms, and workflows Operationalization & Adoption: Embed cybersecurity tools into operational processes across IT and business teams Define ownership models, workflows, and support structures Drive adoption and ensure sustained usage across the organization Establish and track metrics (coverage, usage, effectiveness, risk reduction) Security Controls Implementation: Translate cybersecurity policies and standards into practical, implementable controls Partner with delivery teams to embed controls into systems and projects Ensure consistent application of controls across platforms and environments Cyber Program Alignment: Support delivery of cybersecurity roadmap initiatives with a focus on execution Contribute to risk assessments and third-party reviews where tied to implementation efforts Ensure solutions align with Porter’s cybersecurity framework and control objectives Cross-Team Collaboration: Partner with Infrastructure, Enterprise Applications, Data, and PMO teams Coordinate dependencies across internal teams and external vendors Act as the bridge between cybersecurity strategy and execution Active participation in Porter’s Safety Management System (SMS) including, reporting hazards and incidents encountered in daily operation; understand comply and promote the Company Safety Policy Program Execution & Reporting: Track progress of cybersecurity initiatives and key deliverables Provide clear, outcome-based reporting on implementation and impact Identify risks, gaps, and delivery challenges early and drive resolution Behavioural Competencies Concern for Safety: Identifying hazardous or potentially hazardous situations and taking appropriate action to maintain a safe environment for self and others. Teamwork: Working collaboratively with others to achieve organizational goals. Passenger/Customer Service: Providing service excellence to internal and/or external customers (passengers). Initiative: Dealing with situations and issues proactively and persistently, seizing opportunities that arise. Results Focus: Focusing efforts on achieving high quality results consistent with the organization’s standards. Fostering Communication: Listening and communicating openly, honestly, and respectfully with different audiences, promoting dialogue and building consensus. Qualifications Qualifications: 5–8 years of experience in cybersecurity, IT delivery, or related roles Proven experience implementing cybersecurity tools (IAM/Okta experience strongly preferred) Experience working across infrastructure and application environments Strong delivery mindset with the ability to execute end-to-end initiatives Ability to work cross-functionally and influence without direct authority Nice to have: Experience with CMDB (eg: ServiceNow) Familiarity with cloud environments and SaaS security Experience in regulated or operationally complex environments Key Skills: Cybersecurity Program Management Risk Management Security Policy and Standards Development Stakeholder Communication Collaboration and Teamwork Project Management Knowledge of relevant security technologies and tools Success Measures: Successful delivery and rollout of key cybersecurity tools Adoption and integration of tools into operational processes Measurable improvements in control coverage and effectiveness Clear ownership and sustainment of implemented capabilities