Technology Compliance Program Manager
Alaska Airlines is creating an airline people love. Our corporate teams set the strategies and operational plans to ensure the success of our company. Whether we use our expertise in accounting, human resources, finance, planning, legal, marketing, or any of our operational divisions, our shared passion for travel and our guests is what motivates us to achieve excellence each day. If you share our passion for creating an airline people love, we want to hear from you.
Role Summary
The Technology Compliance Program Manager is the primary subject matter expert in the technology compliance and vulnerability management domain. As an individual contributor, this role defines long-term strategy for the identification, assessment, prioritization, and remediation of security vulnerabilities across our technology environment and exercises considerable latitude and initiative to solve broad, complex problems.
Key Duties
- Ensure the vulnerability management program aligns with regulatory requirements and integrate with other security tools.
- Define long-term strategy for developing, implementing, and continuously improving the enterprise vulnerability management strategy and roadmap.
- Influence across company to execute on IT assessments focusing on compliance.
- Manage and optimize vulnerability management tools to continuously improve internal audit and risk management review.
- Consult divisions, IT departments, and project resources regarding the development, management approval, and implementation of objectives, goals, policies, standards, guidelines, and other requirement statements needed to support information security compliance.
- Serve as the primary point of contact between penetration testers and internal stakeholders, ensuring clear scope definition, rules of engagement, and minimal business disruption.
- Define and track key performance indicators and metrics to measure program effectiveness.
- Analyze and track findings, validate results, and work with relevant teams to prioritize and remediate identified vulnerabilities.
- Manage execution of timely delivery of reports to leadership and stakeholders, maintain documentation, and integrate findings into the broader vulnerability management lifecycle.
- Oversee regular vulnerability scanning and assessments across infrastructure, applications, and cloud environments.
- Facilitate, schedule, and coordinate internal and third-party penetration tests across applications, networks, and cloud environments.
- Maintain documentation and evidence for audits and compliance reviews.
Job-Specific Experience, Education & Skills
Required
- 7 years of experience in IT Security and Compliance, or related area.
- Bachelor's degree in Information Security, Information Technology, Computer Science or related field, or an additional two years of relevant training/experience in lieu of this degree.
- Experience in project management, including all elements of scope, schedule, budgeting, risk evaluation, quality, integration, staffing, and communications.
- Knowledge of security regulations (e.g. Sarbanes-Oxley, Payment Card Industry Data Security Specification (PCI DSS), Health Insurance Portability and Accountability Act (HIPAA)) and standards (e.g. ISO 27001, NIST SP800-series).
- Excellent clear and concise verbal and written communication skills.
- High school diploma or equivalent.
- Minimum age of 18.
- Must be authorized to work in the U.S.
Preferred
- Industry certification in security (e.g. CISA, CISSP, and/or GIAC).
- Industry certification in project management (e.g. PMP).
- 2 years experience leading people.
- Demonstrated knowledge and experience in information security, software development, and/or network security for large organizations.
- Detailed technical knowledge in security engineering, system and network security, authentication and security protocols.
Job-Specific Leadership Expectations
Embody our values to own safety, do the right thing, be caring and kind, and deliver performance.
Salary Range
$138,500 - $207,750 / year
Salary Details
Pay will be based on multiple factors, including and not limited to location, relevant experience/level and skillset while balancing internal equity relative to other Alaska/Horizon employees. Alaska/Horizon is committed to fair, unbiased compensation along with competitive benefits in all locations in which we operate. We don't typically hire at the top of the range.
Total Rewards
Alaska Airlines, Hawaiian Airlines and Horizon Air pay and benefits can vary by company, location, number of regularly scheduled hours worked, length of employment, and employment status.
- Free stand-by travel privileges on Alaska Airlines, Hawaiian Airlines & Horizon Air
- Comprehensive well-being programs including medical, dental and vision benefits
- Generous 401k match program
- Quarterly and annual bonus plans
- Generous holiday and paid time off
For more information about Alaska/Hawaiian/Horizon Total Rewards please visit our career site and view benefits.
FLSA Status
Exempt
Employment Type
Full-Time
Regular/Temporary
Regular
Requisition Type
Management
Location
Seattle - Hub
Equal Employment Opportunity
It is the policy of Alaska Airlines, Hawaiian Airlines and Horizon Air to comply with all applicable federal, state and local laws governing nondiscrimination in employment and to ensure equal opportunity in all terms, conditions, and benefits of employment or potential employment. We also prohibit discrimination and harassment against any employee or applicant for employment because of race, color, religion, sex, national origin, age, disability, veteran status, genetic information and other legally protected categories.
Government Contractor & Department of Transportation (DOT) Regulations
Alaska Airlines, Hawaiian Airlines & Horizon Air are regulated by the Department of Transportation (DOT regulations, 49 CFR part 40) and all applicants are advised that post-offer and/or pre-employment drug testing will be conducted to determine the presence of marijuana, cocaine, opioids, phencyclidine (PCP) and amphetamines or a metabolite of these drugs prior to any offer or employment or transfer into a safety-sensitive position. Failure to submit to testing or positive indications of drug use will render the applicant ineligible for employment with Alaska Airlines/Hawaiian Airlines/Horizon Air and any employment offer will be withdrawn.