Senior Manager - Digital Governance

Role Description

Connecting People. Uniting the World. There’s never been a more exciting time to join United Airlines! As a global company that operates in hundreds of locations around the world — with millions of customers and tens of thousands of employees — we have a unique responsibility to uplift and provide opportunities in the places where we work, live and fly.

We’re on a path to becoming the best airline in aviation history. Join our Cybersecurity and Digital Risk (CDR) team to help lead the industry in cyber safety, security and resilience. United's CDR team plays a critical role in protecting our operations by enabling secure and resilient systems, managing threats and vulnerabilities, and ensuring swift response and recovery. Our mission is to seamlessly embed cybersecurity and digital risk management into every aspect of our business.

The Senior Manager - Digital Governance leads the design and execution of regulatory and compliance enablement capabilities that help United meet evolving cybersecurity, data integrity, fraud prevention, and financial control obligations. This role builds sustainable, automated compliance practices that provide real-time visibility, strengthen control effectiveness, and embed compliance into daily operations across Finance, HR, Loyalty, and Operations.

• Own a defined portfolio of regulatory and compliance enablement initiatives across cybersecurity, data integrity, fraud prevention, and financial controls.
• Translate enterprise priorities and regulatory requirements into actionable roadmaps, governance standards, and implementation plans for assigned programs.
• Identify opportunities to improve compliance maturity, strengthen control effectiveness, and reduce operational and regulatory risk within the scope of responsibility.
• Lead execution of assigned compliance and governance initiatives in partnership with Finance, HR, Loyalty, Operations, and Digital Technology stakeholders.
• Provide subject matter expertise, practical guidance, and decision support to ensure regulatory and contractual requirements are addressed within transformation programs and business processes.
• Influence cross-functional teams to resolve issues, align priorities, and deliver sustainable compliance outcomes without direct authority over all participating groups.
• Drive the design and implementation of monitoring, metrics, reporting, and evidence practices that improve visibility into compliance and control performance.
• Use data and insights to identify gaps, prioritize remediation, and support audit, regulatory, and leadership reporting for assigned areas.
• Advance process standardization and automation to reduce manual effort and improve consistency, traceability, and assurance.
• Directly manage and develop a small team, setting priorities, providing coaching, and ensuring high-quality execution of assigned deliverables.
• Balance day-to-day delivery oversight with strategic problem solving to advance program objectives and respond to evolving business and regulatory needs.
• Promote accountability, collaboration, and continuous improvement within the team and across stakeholder groups.

Qualifications

• Bachelor's degree required, with preference for Cybersecurity, Information Technology, or related disciplines.
• 5+ years of experience in cybersecurity, digital risk, governance, compliance, internal controls, or related disciplines.
• Experienced leading teams or complex cross-functional compliance and transformation initiatives.
• Experience designing or operating compliance programs, internal controls, regulatory frameworks, or audit support processes in complex enterprise environments.
• Knowledge of regulatory compliance, internal controls, and continuous assurance practices across cybersecurity, data integrity, fraud prevention, and financial control domains.
• Skill in designing scalable governance frameworks, control standards, and compliance operating models for complex enterprise environments.
• Ability to translate regulatory and contractual requirements into practical business processes, automated monitoring, and measurable performance indicators.
• Strong communication and influencing skills with the ability to work across senior leadership, transformation teams, and control stakeholders.
• Ability to manage multiple priorities in a dynamic environment and drive execution across cross-functional programs.
• Knowledge of regulatory/compliance frameworks such as NIST CSF, NIST 800-53, PCI-DSS, RMF, SOX, DFARS, CMMC.
• Must be legally authorized to work in the United States for any employer without sponsorship.
• Successful completion of interview required to meet job qualification.
• Reliable, punctual attendance is an essential function of the position.

Requirements

• Master's degree in Cybersecurity, Engineering, Information Technology, or related field experience (Preferred).
• CISA, CRISC, CISSP, CISM, CIA, CPA, or equivalent controls/compliance certification (Preferred).
• Proven ability to influence without direct authority (Preferred).
• Experience supporting SOX, fraud, payments, privacy, identity, or other highly regulated business processes (Preferred).
• Knowledge of GRC platforms, automated controls monitoring, and evidence management capabilities (Preferred).
• Experience working with global regulatory, contractual, or partner-driven compliance requirements (Preferred).

Benefits

• Medical, dental, vision, life, accident & disability insurance.
• Parental leave.
• Employee assistance program.
• Commuter benefits.
• Paid holidays and paid time off.
• 401(k) plan.
• Flight privileges.