Sr Manager, IT Cybersecurity Governance, Risk & Compliance

American Airlines is hiring a senior leader to run IT cybersecurity governance, risk, and compliance across the enterprise in Fort Worth, TX (onsite). Responsibilities Set direction for cybersecurity governance capabilities , ensuring policies, standards, control expectations, and risk management practices are practical, scalable, clearly owned, and aligned to enterprise priorities. Lead cybersecurity products, services, and enterprise capabilities by shaping roadmaps , prioritizing investments, tracking outcomes, and ensuring delivery supports risk reduction , regulatory readiness , and operational effectiveness . Convert cybersecurity strategy into actionable priorities , roadmaps, operating rhythms, and measurable outcomes ; partner with cyber leaders to ensure work is prioritized, resourced, governed, and delivered against commitments. Provide leadership and direction for the Cybersecurity Chief of Staff function, supporting leadership cadence, executive communications, decision support, cross-functional coordination, and follow-through on key actions. Oversee cybersecurity work intake and execution planning, including prioritization , resource planning , budget tracking , financial forecasting , and portfolio reporting to improve transparency and accountability. Partner with Cybersecurity, Technology, Legal, Finance, Audit, Privacy, and business teams to align risk and compliance activities, support regulatory obligations, and provide outcome-focused reporting to senior leadership. Lead, coach, and develop team members and managers; drive strong collaboration, ownership, sound judgment, accountability, and consistent delivery across complex initiatives. Requirements Bachelor’s degree in Cybersecurity, Information Systems, Computer Science, Business, Risk Management, Compliance, Audit, or a related discipline, or equivalent experience/training. Experience delivering and leading cybersecurity, IT, risk management, compliance, audit, governance, or related activities. Strong leadership background overseeing cybersecurity governance, risk management, compliance, portfolio management, or similar enterprise capabilities. Ability to set strategic direction, define capability roadmaps, prioritize work, and align cyber products and services to enterprise risk , regulatory, and business objectives. Experience leading cyber work management, operating rhythms, resource planning, budget oversight, financial tracking, and portfolio reporting across complex organizations. Working knowledge of cybersecurity, risk, compliance, and control frameworks including NIST ,

ISO 27001

, PCI DSS , SOX , SOC 2 , CMMC , GDPR , or similar standards. Proven capability to translate complex cybersecurity risks, priorities, and investments into executive-level communications, decision materials, metrics, and reporting. Demonstrated ability to lead cross-functional teams and influence senior stakeholders across cybersecurity, technology, finance, legal, audit, privacy, compliance, and business. Strong judgment, ownership, and executive presence, including driving alignment, resolving ambiguity, escalating decisions appropriately, and ensuring follow-through. Experience building and developing high-performing teams, including setting expectations, strengthening accountability, and improving delivery across multiple workstreams. 7+ years experience in cybersecurity, information technology, risk management, compliance, audit, governance, or a closely related field. 5+ years leadership experience. 8+ years in the related domain and 6+ years leadership experience preferred. Technologies NIST ISO 27001

PCI DSS

SOX

SOC 2

CMMC GDPR CISM

CISSP

CRISC

CISA

CDPSE

PMP Benefits 20+ Employee Business Resource Groups focused on connecting team members to customers, suppliers, communities, and shareholders, supporting personal growth and creating an inclusive work environment. 20+ Team Member Resource Groups focused on connecting team members to customers, suppliers, communities and shareholders, supporting personal growth and creating an inclusive work environment. Additional experience or credentials (preferred) Experience leading cybersecurity governance, risk management, compliance, control management, or related enterprise programs, including setting priorities, defining outcomes, and improving program maturity. Experience overseeing security audits, assessments, control assurance activities, remediation governance, and executive reporting to support clear ownership and timely risk reduction. Relevant certifications preferred, such as CISM , CISSP , CRISC , CISA , CDPSE , ISO 27001 , PMP , or comparable certifications. #J-18808-Ljbffr Cybersecurity Jobs