Sr Manager, IT Cybersecurity Data Protection

Location: [[location]]

Cities: [[sfstd_jobLocation_obj]]

Requisition ID: [[id]]

Intro

Are you ready to explore a world of possibilities, both at work and during your time off? Join our American Airlines family, and you’ll travel the world, grow your expertise and become the best version of you. As you embark on a new journey, you’ll tackle challenges with flexibility and grace, learning new skills and advancing your career while having the time of your life. Feel free to enrich both your personal and work life and hop on board!

Why you'll love this job

As one diverse, high‑performing team committed to technical excellence, you’ll help shape the modern cybersecurity capabilities that drive a more reliable, safe, and profitable airline. The Platform Security product group delivers comprehensive solutions, processes, and platforms that embed and monitor security across Cloud, Application, Endpoint / End User, Data, and AI domains. In this portfolio, you’ll help strengthen the safeguards that protect our systems, data, and people through consistent, scalable practices and deliver solutions that secure one of the world’s most complex global operations.

The Sr. Manager - Data Protection and Privacy Technology will own and lead the strategy, roadmap, engineering, and continuous improvement of American Airlines’ Data Protection and Privacy Technology program. In this role, you’ll advance core capabilities including data security engineering and protection, privacy engineering and assurance, data classification, retention, and access governance while guiding talented global teams. You’ll work closely with Cybersecurity, Privacy Office, Enterprise Data, Legal, and Procurement to build scalable, modern controls that protect American Airlines’ most critical information assets.

What you'll do

As noted above, this list is intended to reflect the current job but there may be additional essential functions (and certainly non-essential job functions) that are not referenced. Management will modify the job or require other tasks be performed whenever it is deemed appropriate to do so, observing, of course, any legal obligations including any collective bargaining obligations.

This list is intended to reflect the current job but there may be additional essential functions (and certainly non-essential job functions) that are not referenced. Management will modify the job or require other tasks be performed whenever it is deemed appropriate to do so, observing, of course, any legal obligations including any collective bargaining obligations.

• Own and lead the enterprise Data Protection and Privacy Technology strategy and roadmap, ensuring modern controls (classification, encryption, access governance, DLP, masking, AI/ML safeguards) are built, deployed, and continuously improved.
• Develop a deep understanding of enterprise data flows, championing secure data handling practices and shared accountability, while ensuring data protection and privacy decisions align with business priorities and technology strategies.
• Balance data protection, privacy, and business objectives, while guiding decisions that reflect the organization’s risk appetite and operational realities with little/no direction from business/portfolio leadership.
• Provide oversight and direction for the Data Protection and Privacy Technology products’ capabilities, programs, services and engagement model. Govern adherence to policies and standards. Own, enhance, and drive the global operating model.
• Translate complex data protection and privacy requirements into clear, actionable guidance for senior leaders, technology teams, and business partners.
• Shape how data protection and privacy controls are integrated into new technology development, ensuring risks are mitigated early and effectively.
• Serve as the bridge between engineering, cybersecurity, privacy, and business teams to embed data protection and privacy by design into platforms, applications, and AI solutions.
• Evaluate the effectiveness of data protection and privacy technologies using KPIs, telemetry, and operational metrics to guide maturity, automation, and risk reduction.
• Conduct and oversee data protection and privacy by design risk assessments, product evaluations, compliance checks, and audits to meet regulatory requirements.
• Oversee coordination with appropriate teams during data protection and privacy incidents, ensuring accurate reporting, communication, and follow through.
• Drive data protection and privacy awareness programs that strengthen end user understanding of data protection responsibilities and emerging threats.
• Act as the primary point of contact between business/portfolio executive leadership and product teams to engage executive leadership and communicate the progress of Data Protection and Privacy Technology programs and services.
• Build and lead professional, creative, and collaborative global teams of data protection engineers, privacy engineers, and analysts, cultivating technical excellence, continuous learning, and innovation.
• Oversee a team of up to 50 team members with multiple squads.

All you'll need for success

Minimum Qualifications- Education & Prior Job Experience

• Bachelor’s degree in Computer Science, Information Systems, Engineering, Cybersecurity, or a related technical field
• 8+ years of progressive experience in cybersecurity, data protection, privacy engineering, or information security.
• 3+ years of experience leading technical teams in a large enterprise environment.
• Prior experience driving large‑scale security or privacy technology initiatives from strategy through execution.
• Demonstrated ability to collaborate across cybersecurity, legal, data, product, and engineering teams to embed privacy and security into systems and workflows.
• Exhibit advanced ability to communicate data protection and privacy concepts clearly to non‑technical audiences, translating complex requirements into practical guidance.

Preferred Qualifications- Education & Prior Job Experience

• Master’s degree in computer science, Cybersecurity, Engineering, Information Assurance, or a related technical field.
• 12+ years of experience in cybersecurity, privacy engineering, data protection, or information security.
• 5+ years of leadership or management experience overseeing technical teams and driving enterprise level initiatives.
• Experience leading data protection or privacy engineering programs and teams in highly regulated industries (e.g., aviation, financial services, healthcare).

Skills, Licenses & Certifications

• Knowledge of data protection industry practices and global privacy regulations (GDPR, CCPA/CPRA, PCI, etc.) and ability to translate them into technical controls aligned with industry frameworks such as NIST CSF/PRMF and ISO/IEC 27001/27701.
• Strong understanding of data security and privacy engineering, secure data lifecycle practices, and access control models.
• Familiarity with cybersecurity or privacy-related risk assessment methodologies and frameworks.
• Professional certifications such as CISSP, CIPP/E, CIPP/US, CIPT, CDPSE, CCSP, or equivalent privacy/security credentials.
• Demonstrated ability to deliver prioritized outcomes using agile and product management principles.
• Experience in implementing and managing data protection and privacy technologies (e.g., DLP, data discovery/classification, encryption/tokenization, access governance, cloud data security, data and code scanning tools, DSAR/rights automation platforms, consent and preference management tools).
• Experience using KPIs, operational telemetry, and maturity metrics to assess the effectiveness of data protection and privacy by design controls.
• Demonstrated leadership, communication, and relationship building skills with the ability to influence stakeholders at all levels.
• Excellent analytical and problem-solving abilities with keen attention to detail.
• Solution oriented, can define various pragmatic alternatives leading to appropriate Cybersecurity outcomes.
• Ability to work independently with a high degree of initiative.

What you'll get

Feel free to take advantage of all that American Airlines has to offer:

• Travel Perks: Ready to explore the world? You, your family and your friends can reach 365 destinations on more than 6,800 daily flights across our global network.
• Health Benefits: On day one, you’ll have access to your health, dental, prescription and vision benefits to help you stay well. And that’s just the start, we also offer virtual doctor visits, flexible spending accounts and more.
• Wellness Programs: We want you to be the best version of yourself – that’s why our wellness programs provide you with all the right tools, resources and support you need.
• 401(k) Program: Available upon hire and, depending on the workgroup, employer contributions to your 401(k) program are available after one year.
• Additional Benefits: Other great benefits include our Employee Assistance Program, pet insurance and discounts on hotels, cars, cruises and more

Feel free to be yourself at American

From the team members we hire to the customers we serve, inclusion and diversity are the foundation of the dynamic workforce at American Airlines. Our 20+ Team Member Business Resource Groups are focused on connecting our team members to our customers, suppliers, communities and shareholders, helping team members reach their full potential and creating an inclusive work environment to meet and exceed the needs of our diverse world.

Are you ready to feel a tremendous sense of pride and satisfaction as you do your part to keep the largest airline in the world running smoothly as we care for people on life’s journey? Feel free to be yourself at American.

Cities: [[sfstd_jobLocation_obj]]

Requisition ID: [[id]]