Job Summary
Reporting to the Director, Cybersecurity, the Lead, Cybersecurity Program is responsible for delivering and operationalizing key cybersecurity capabilities across Porter’s technology workplace.

This role focuses on the implementation, integration, and adoption of core cybersecurity tools and controls , including identity and access management, asset and configuration management (CMDB), and other foundational security platforms.

While aligned to Porter’s broader cybersecurity program and control framework, this role is primarily accountable for execution — ensuring that security solutions are deployed effectively, embedded into day-to-day operations, and delivering measurable outcomes.

Working closely with Infrastructure, Enterprise Applications, Data, and external partners, this role bridges cybersecurity strategy and hands‑on delivery. This is a hands‑on, delivery‑focused role centered on building and implementing cybersecurity capabilities. It is not a monitoring, audit, or SOC‑focused role.

Duties & Responsibilities
Cybersecurity Tool Implementation & Delivery:

Lead end‑to‑end implementation of cybersecurity tools (e.g., IAM, CMDB, cloud, endpoint and data security)

Manage vendor evaluation, solution design, deployment, and rollout

Coordinate delivery across multiple teams and concurrent initiatives

Ensure integration with existing systems, platforms, and workflows

Operationalization & Adoption:

Embed cybersecurity tools into operational processes across IT and business teams

Define ownership models, workflows, and support structures

Drive adoption and ensure sustained usage across the organization

Establish and track metrics (coverage, usage, effectiveness, risk reduction)

Security Controls Implementation:

Translate cybersecurity policies and standards into practical, implementable controls

Partner with delivery teams to embed controls into systems and projects

Ensure consistent application of controls across platforms and environments





Cyber Program Alignment:

Support delivery of cybersecurity roadmap initiatives with a focus on execution

Contribute to risk assessments and third‑party reviews where tied to implementation efforts

Ensure solutions align with Porter’s cybersecurity framework and control objectives

Cross‑Team Collaboration:

Partner with Infrastructure, Enterprise Applications, Data, and PMO teams

Coordinate dependencies across internal teams and external vendors

Act as the bridge between cybersecurity strategy and execution

Active participation in Porter’s Safety Management System (SMS) including, reporting hazards and incidents encountered in daily operation; understand comply and promote the Company Safety Policy

Program Execution & Reporting:

Track progress of cybersecurity initiatives and key deliverables

Provide clear, outcome‑based reporting on implementation and impact

Identify risks, gaps, and delivery challenges early and drive resolution

Behavioural Competencies

Concern for Safety: Identifying hazardous or potentially hazardous situations and taking appropriate action to maintain a safe environment for self and others.

Teamwork: Working collaboratively with others to achieve organizational goals.

Passenger/Customer Service: Providing service excellence to internal and/or external customers (passengers).

Initiative: Dealing with situations and issues proactively and persistently, seizing opportunities that arise.

Results Focus: Focusing efforts on achieving high quality results consistent with the organization’s standards.

Fostering Communication:



Listening and communicating openly, honestly, and respectfully with different audiences, promoting dialogue and building consensus.

Qualifications
Qualifications:

5-8 years of experience in cybersecurity, IT delivery, or related roles

Proven experience implementing cybersecurity tools (IAM/Okta experience strongly preferred)

Experience working across infrastructure and application environments

Strong delivery mindset with the ability to execute end‑to‑end initiatives

Ability to work cross‑functionally and influence without direct authority

Nice to have:

Experience with CMDB (eg: ServiceNow)

Familiarity with cloud environments and SaaS security

Experience in regulated or operationally complex environments

Key Skills:

Cybersecurity Program Management

Risk Management

Security Policy and Standards Development

Stakeholder Communication

Collaboration and Teamwork

Project Management

Knowledge of relevant security technologies and tools

Success Measures:

Successful delivery and rollout of key cybersecurity tools

Adoption and integration of tools into operational processes

Measurable improvements in control coverage and effectiveness

Clear ownership and sustainment of implemented capabilities

Location
Toronto Downtown Office (250 Yonge Street) #LI-Hybrid

Company Description
Since 2006, Porter Airlines has been elevating the experience of economy air travel for every passenger, providing genuine hospitality with style, care and charm. Porter’s fleet of Embraer E195-E2 and De Havilland Dash 8‑400 aircraft serves North America, including a coast‑to‑coast domestic Canadian network, the U.S., Mexico, the Caribbean and Central America. Headquartered in Toronto, Porter is an Official 4 Star Airline® in the World Airline Star Rating®. Visit www.flyporter.com or follow @porterairlines on Instagram, Facebook and X.

#J-18808-Ljbffr

📌 Lead, Cybersecurity Program (Ontario)
🏢 Porter Airlines
📍 Ontario