Technology Compliance Program Manager - Card Industry - Data Security Specification; PCI DSS

Technology Compliance Program Manager (PCI)

Alaska Airlines

The Technology Compliance Program Manager (PCI) serves as the primary subject matter expert for the enterprise PCI DSS compliance program. This role is responsible for driving PCI strategy, governance, compliance assessments, audit readiness, and cross-functional remediation efforts to ensure the organization maintains compliance with PCI DSS requirements while reducing security and regulatory risk.

• Lead the enterprise PCI DSS compliance program and serve as the primary PCI SME.
• Manage annual PCI assessments, audits, ROC/SAQ activities, and remediation efforts.
• Develop and maintain PCI policies, standards, procedures, and control documentation.
• Partner with technology, cybersecurity, business, and audit teams to implement and sustain PCI controls.
• Identify, assess, and track PCI-related risks, findings, and corrective actions.
• Coordinate with internal and external auditors, QSAs, and key stakeholders.
• Define and report PCI compliance metrics, KPIs, and program status to leadership.
• Ensure audit-ready evidence and documentation are maintained.
• Monitor changes to PCI requirements and drive continuous program improvement.
• Own compliance initiatives and projects supporting payment card security and regulatory requirements.

Required

• 7 years of experience in IT Security and Compliance, or related area.
• Bachelor's degree in information security, information technology, computer science or related field, or an additional two years of relevant training/experience in lieu of this degree.
• Experience in project management, including all elements of scope, schedule, budgeting, risk evaluation, quality, integration, staffing, and communications.
• Knowledge of security regulations (e.g. Sarbanes-Oxley, Payment Card Industry Data Security Specification (PCI DSS), Health Insurance Portability and Accountability Act (HIPAA) and standards (e.g. ISO 27001, NIST SP800-series).
• Excellent verbal and written communication skills.
• High school diploma or equivalent.
• Minimum age of 18.
• Must be authorized to work in the U.S.

Preferred

• Industry certification in compliance (e.g. PCIP and/or an ISA).
• Industry certification in project management (e.g. PMP).
• Demonstrated knowledge and experience in information security, software development and/or network security for large organizations.
• Detailed technical knowledge in security engineering, system and network security, authentication and security protocols.

• Embody our values to own safety, do the right thing, be caring and kind, and deliver performance.
• Create a culture where all employees feel safe and supported.

$141,250-$211,900 / year

Alaska Airlines, Hawaiian Airlines and Horizon Air pay and benefits can vary by company, location, number of regularly scheduled hours worked, length of employment, and employment status.

• Free stand-by travel privileges on Alaska Airlines, Hawaiian Airlines & Horizon Air
• Comprehensive well-being programs including medical, dental and vision benefits
• Generous 401k match program
• Annual bonus plans
• Generous holiday and paid time off

For more information about Alaska/Hawaiian/Horizon Total Rewards please visit our career site and view benefits.

Equal Employment Opportunity Policy Statement

It is the policy of Alaska Airlines, Hawaiian Airlines and Horizon Air to comply with all applicable federal, state and local laws governing nondiscrimination in employment and to ensure equal opportunity in all terms, conditions, and benefits of employment or potential employment.

We also prohibit discrimination and harassment against any employee or applicant for employment because of race, color, religion, sex, national origin, age, disability, veteran status, genetic information and other legally protected categories.

To implement this policy, we will:

(1) Recruit, hire, train and promote qualified persons in all job titles, without regard to race, color, religion, sex, national origin, age, disability, veteran status, genetic information and any other legally protected categories; (2)…