Principal Solution Architect, IT Cybersecurity Business Engagement

In this role, you will serve as a Principal Solution Architect and Technical Information Security Officer, leading cybersecurity engagement across assigned business and technology portfolios for American Airlines. Working onsite in Fort Worth, you will align security strategy, architecture guidance, and risk management oversight with technology initiatives to reduce cyber risk while supporting innovation and business growth.

You will act as the primary cybersecurity advisor for the areas you support, building trusted relationships and integrating security into enterprise decision-making. The work centers on security-by-design, consultative leadership, and measurable risk visibility for stakeholders and leadership.

• Serve as the primary cybersecurity advisor for assigned business and technology areas, building trusted relationships and integrating security into enterprise initiatives and decision-making.
• Partner with stakeholders to provide security oversight
  , architecture guidance
  , and risk-informed recommendations that enable secure innovation, transformation, and business growth.
• Lead security reviews for applications, systems, cloud services, infrastructure, and technology initiatives to identify risks, recommend mitigations, and ensure alignment with cybersecurity requirements and standards.
• Engage early in project life cycles to embed cybersecurity requirements into business and technology initiatives from planning through implementation.
• Collaborate with executives, business leaders, technology teams, architects, and cybersecurity partners to balance business objectives with security requirements and promote shared accountability for risk management.
• Identify, assess, communicate, and track cybersecurity risks, vulnerabilities, control gaps, and remediation activities across assigned portfolios.
• Translate complex cybersecurity topics such as threats, vulnerabilities, and regulatory requirements into practical business guidance for informed decision-making and operational resilience.
• Monitor and communicate cybersecurity metrics, risk trends, assessment results, and remediation progress to strengthen security outcomes with actionable insights.
• Advocate for secure behaviors, cybersecurity best practices, and risk awareness to support security culture across business and technology organizations.
• Identify opportunities to improve cybersecurity processes, governance, architecture standards, risk management practices, and stakeholder engagement models to increase program maturity.

• 7+ years of relevant experience.
• Bachelor's degree in Cybersecurity, Information Systems, Computer Science, Business, Risk Management, Compliance, Audit, or a related discipline, or equivalent experience/training.
• Experience conducting security assessments, architecture reviews, threat modeling, risk evaluations, vulnerability analysis, or security control reviews for technology solutions and business initiatives.
• Ability to conduct security architecture reviews, threat modeling exercises, technical risk assessments, and security control evaluations.
• Ability to assess cybersecurity implications of business and technology initiatives and provide practical, risk-informed security recommendations.
• Strong stakeholder management and influencing skills, with the ability to build trusted relationships across executive leadership, technology teams, architects, engineers, and business partners.

• Additional education, coursework, or training in cybersecurity, information security, computer science, information systems, engineering, cloud computing, security architecture, or a related technical field.
• Experience conducting security architecture reviews, technology…