Lead, Cybersecurity Program

Job summary

The role is responsible for the end-to-end implementation and operationalization of core cybersecurity tools and controls across the technology environment. It focuses on bridging cybersecurity strategy and hands-on delivery by integrating security solutions into day-to-day IT operations.

Job details

Job Summary Reporting to the Director, Cybersecurity, the Lead, Cybersecurity Program is responsible for delivering and operationalizing key cybersecurity capabilities across Porter’s technology environment. This role focuses on the implementation, integration, and adoption of core cybersecurity tools and controls, including identity and access management, asset and configuration management (CMDB), and other foundational security platforms. While aligned to Porter’s broader cybersecurity program and control framework, this role is primarily accountable for execution — ensuring that security solutions are deployed effectively, embedded into day-to-day operations, and delivering measurable outcomes. Working closely with Infrastructure, Enterprise Applications, Data, and external partners, this role bridges cybersecurity strategy and hands-on delivery. This is a hands-on, delivery-focused role centered on building and implementing cybersecurity capabilities. It is not a monitoring, audit, or SOC-focused role. Duties & Responsibilities Cybersecurity Tool Implementation & Delivery Lead end-to-end implementation of cybersecurity tools (e.g., IAM, CMDB, cloud, endpoint and data security) Manage vendor evaluation, solution design, deployment, and rollout Coordinate delivery across multiple teams and concurrent initiatives Ensure integration with existing systems, platforms, and workflows Operationalization & Adoption Embed cybersecurity tools into operational processes across IT and business teams Define ownership models, workflows, and support structures Drive adoption and ensure sustained usage across the organization Establish and track metrics (coverage, usage, effectiveness, risk reduction) Security Controls Implementation Translate cybersecurity policies and standards into practical, implementable controls Partner with delivery teams to embed controls into systems and projects Ensure consistent application of controls across platforms and environments Cyber Program Alignment Support delivery of cybersecurity roadmap initiatives with a focus on execution Contribute to risk assessments and third-party reviews where tied to implementation efforts Ensure solutions align with Porter’s cybersecurity framework and control objectives Cross-Team Collaboration Partner with Infrastructure, Enterprise Applications, Data, and PMO teams Coordinate dependencies across internal teams and external vendors Act as the bridge between cybersecurity strategy and execution Active participation in Porter’s Safety Management System (SMS) including, reporting hazards and incidents encountered in daily operation; understand comply and promote the Company Safety Policy Program Execution & Reporting Track progress of cybersecurity initiatives and key deliverables Provide clear, outcome-based reporting on implementation and impact Identify risks, gaps, and delivery challenges early and drive resolution Behavioural Competencies Concern for Safety: Identifying hazardous or potentially hazardous situations and taking appropriate action to maintain a safe environment for self and others. Teamwork: Working collaboratively with others to achieve organizational goals. Passenger/Customer Service: Providing service excellence to internal and/or external customers (passengers). Initiative: Dealing with situations and issues proactively and persistently, seizing opportunities that arise. Results Focus: Focusing efforts on achieving high quality results consistent with the organization’s standards. Fostering Communication: Listening and communicating openly, honestly, and respectfully with different audiences, promoting dialogue and building consensus. Qualifications Qualifications: 5–8 years of experience in cybersecurity, IT delivery, or related roles Proven experience implementing cybersecurity tools (IAM/Okta experience strongly preferred) Experience working across infrastructure and application environments Strong delivery mindset with the ability to execute end-to-end initiatives Ability to work cross-functionally and influence without direct authority Nice To Have Experience with CMDB (eg: ServiceNow) Familiarity with cloud environments and SaaS security Experience in regulated or operationally complex environments Key Skills Cybersecurity Program Management Risk Management Security Policy and Standards Development Stakeholder Communication Collaboration and Teamwork Project Management Knowledge of relevant security technologies and tools Success Measures Successful delivery and rollout of key cybersecurity tools Adoption and integration of tools into operational processes Measurable improvements in control coverage and effectiveness Clear ownership and sustainment of implemented capabilities Location Toronto Downtown Office (250 Yonge Street) Company Description Since 2006, Porter Airlines has been elevating the experience of economy air travel for every passenger, providing genuine hospitality with style, care and charm. Porter’s fleet of Embraer E195-E2 and De Havilland Dash 8-400 aircraft serves North America, including a coast-to-coast domestic Canadian network, the U.S., Mexico, the Caribbean and Central America. Headquartered in Toronto, Porter is an Official 4 Star Airline® in the World Airline Star Rating®. Visit www.flyporter.com or follow @porterairlines on Instagram, Facebook and X.

What you’ll do

The role is responsible for the end-to-end implementation and operationalization of core cybersecurity tools and controls across the technology environment. It focuses on bridging cybersecurity strategy and hands-on delivery by integrating security solutions into day-to-day IT operations.

Requirements

Requires 5–8 years of experience in cybersecurity or IT delivery with a proven track record of implementing security tools, specifically IAM/Okta. Candidates must possess a strong delivery mindset and the ability to influence cross-functional teams without direct authority.

Listed skills

• Risk Management · Preferred
• Project management · Preferred

Other relevant skills

Identified from the job description. Confirm important requirements above.

• Cybersecurity Program Management
• Risk Management
• Security Policy and Standards Development
• Stakeholder Communication
• Collaboration and Teamwork
• Project Management
• Identity and Access Management
• Asset and Configuration Management
• Vendor Evaluation
• Solution Design
• Cloud Security
• Endpoint Security
• Data Security
• Cross-functional Leadership
• Operationalization

Job areas

• Security & Safety
• Technology
• Management & Leadership
• Transportation
• Software