Sr Manager, IT Cybersecurity Governance, Risk & Compliance

Job Description

Are you ready to explore a world of possibilities, both at work and during your time off? Join our American Airlines family, and you’ll travel the world, grow your expertise, and become the best version of you. As you embark on a new journey, you’ll tackle challenges with flexibility and grace, learning new skills and advancing your career while having the time of your life.

Feel free to enrich both your personal and work life and hop onboard!

• As one diverse, high-performing team dedicated to technical excellence, you will focus relentlessly on delivering unrivaled digital products that drive a more reliable and profitable airline.
• Cybersecurity Governance, Risk and Compliance (GRC) establishes the frameworks, oversight, and accountability that help the airline protect its operations, customers, data, and critical aviation systems. By aligning strategy, investment, risk management, and regulatory obligations, the function enables informed decision-making, operational resilience, and sustained compliance readiness.
• As a Cybersecurity Senior Manager, you will play a key leadership role in shaping how Cybersecurity operates, prioritizes work, and delivers capabilities across the enterprise. This role brings together governance, strategy execution, product and capability oversight, chief of staff operations, and cyber work management and finance to help strengthen risk reduction, improve transparency, and enable more effective decision-making across Cybersecurity.

This list is intended to reflect the current job but there may be additional essential functions (and certainly non-essential job functions) that are not referenced. Management will modify the job or require other tasks be performed whenever it is deemed appropriate to do so, observing, of course, any legal obligations including any collective bargaining obligations.

• Lead Cybersecurity Governance Capabilities
  :
  Set direction for cybersecurity governance capabilities, ensuring policies, standards, control expectations, and risk management practices are practical, scalable, clearly owned, and aligned to enterprise priorities.
• Oversee Cyber Products and Capabilities: Provide leadership over cybersecurity products, services, and enterprise capabilities by shaping roadmaps, prioritizing investments, tracking outcomes, and ensuring delivery supports risk reduction, regulatory readiness, and operational effectiveness.
• Drive Cyber Strategy, Planning, and Execution
  :
  Translate cybersecurity strategy into actionable priorities, roadmaps, operating rhythms, and measurable outcomes; partner with cyber leaders to ensure work is prioritized, resourced, governed, and delivered against commitments.
• Oversee the Chief of Staff Function
  :
  Provide leadership and direction for the Cybersecurity Chief of Staff role, ensuring the function supports effective leadership cadence, executive communications, decision support, cross-functional coordination, and follow-through on key actions and commitments.
• Lead Cyber Work Management and Financial Planning
  :
  Oversee Cybersecurity work intake, prioritization, resource planning, budget tracking, financial forecasting, and portfolio reporting to improve transparency, accountability, and investment decisions across the organization.
• Strengthen Risk, Compliance, and Executive Reporting
  :
  Partner across Cybersecurity, Technology, Legal, Finance, Audit, Privacy, and business teams to align risk and compliance activities, support regulatory obligations, and provide clear, outcome-focused reporting to senior leadership.
• Build and Develop High-Performing Teams
  :
  Lead, coach, and develop team members and managers; foster strong collaboration, ownership, sound judgment,…