Job Description

Intro

Are you ready to explore a world of possibilities, both at work and during your time off? Join our American Airlines family, and you’ll travel the world, grow your expertise and become the best version of you. As you embark on a new journey, you’ll tackle challenges with flexibility and grace, learning new skills and advancing your career while having the time of your life. Feel free to enrich both your personal and work life and hop on board!

Why you'll love this job

• As one diverse, high-performing team dedicated to technical excellence, you will focus relentlessly on delivering unrivaled digital products that drive a more reliable and profitable airline.
• As a Technical Information Security Officer for American Airlines, this role offers the opportunity to lead cybersecurity engagement across assigned business and technology portfolios, providing security strategy, architecture guidance, risk management oversight, and consultative leadership to reduce cyber risk while enabling innovation, transformation, and business growth.

What you'll do

This list is intended to reflect the current job but there may be additional essential functions (and certainly non-essential job functions) that are not referenced. Management will modify the job or require other tasks be performed whenever it is deemed appropriate to do so, observing, of course, any legal obligations including any collective bargaining obligations.

• Lead Cybersecurity Engagement Across Business and Technology Portfolios: Serve as the primary cybersecurity advisor for assigned business and technology areas, building trusted relationships, understanding strategic priorities, and integrating security into enterprise initiatives and decision-making.
• Provide Security Strategy, Architecture, and Risk Guidance: Partner with stakeholders to deliver security oversight, architecture guidance, and risk-informed recommendations that enable secure innovation, transformation, and business growth.
• Conduct Security Reviews and Assess Technology Risk: Lead security reviews for applications, systems, cloud services, infrastructure, and technology initiatives to identify risks, recommend mitigations, and ensure alignment with cybersecurity requirements and standards.
• Drive Security by Design: Engage early in project lifecycles to embed cybersecurity requirements into business and technology initiatives, ensuring security considerations are incorporated from planning through implementation.
• Partner with Business and Technology Leadership: Collaborate with executives, business leaders, technology teams, architects, and cybersecurity partners to balance business objectives with security requirements while promoting shared accountability for risk management.
• Manage Portfolio Cyber Risk: Identify, assess, communicate, and track cybersecurity risks, vulnerabilities, control gaps, and remediation activities across assigned portfolios, ensuring risks are understood and managed appropriately.
• Provide Consultative Security Leadership: Translate complex cybersecurity concepts, threats, vulnerabilities, and regulatory requirements into practical business guidance that supports informed decision-making and operational resilience.
• Analyze and Report Cybersecurity Posture: Monitor and communicate cybersecurity metrics, risk trends, assessment results, and remediation progress to stakeholders and leadership, providing actionable insights that strengthen security outcomes.
• Influence Cybersecurity Awareness and Culture: Advocate for secure behaviors, cybersecurity best practices, and risk awareness within business and technology organizations, helping strengthen the organization's overall security culture.
• Drive Continuous Improvement: Identify opportunities to enhance security processes, governance, architecture standards, risk management practices, and stakeholder engagement models to improve the effectiveness and maturity of cybersecurity programs.

All you'll need for success

Minimum Qualifications – Education & Prior Job Experience

• Bachelor's degree in Cybersecurity, Information Systems, Computer Science, Business, Risk Management, Compliance, Audit, or a related discipline, or equivalent experience/training.
• Experience conducting security assessments, architecture reviews, threat modeling, risk evaluations, vulnerability analysis, or security control reviews for technology solutions and business initiatives.

Preferred Qualifications – Education & Prior Job Experience

• Additional education, coursework, or training in cybersecurity, information security, computer science, information systems, engineering, cloud computing, security architecture, or a related technical field preferred.
• 7+ years of experience in cybersecurity, security engineering, security architecture, technology risk management, application security, cloud security, infrastructure security, or related information security disciplines.
• Experience conducting security architecture reviews, technology risk assessments, threat modeling, security design reviews, vulnerability management, or cybersecurity consulting activities preferred.

Skills, Licenses, and Certifications

• Experience partnering with business, engineering, architecture, infrastructure, cloud, and application development teams to integrate security requirements into enterprise technology initiatives preferred.
• Experience with cloud platforms, security tools, vulnerability management solutions, SIEM technologies, identity and access management, endpoint security, network security, application security, or related cybersecurity technologies preferred.
• Experience applying industry cybersecurity frameworks and best practices, including NIST Cybersecurity Framework (CSF), NIST 800-53, CIS Controls, Zero Trust, Secure-by-Design principles, OWASP, ISO 27001, or similar standards preferred.
• Experience assessing and communicating cybersecurity risks associated with enterprise applications, cloud environments, infrastructure platforms, third-party solutions, and emerging technologies preferred.
• Experience translating complex technical risks, vulnerabilities, and security requirements into actionable recommendations for technology and business stakeholders preferred.
• Knowledge of secure software development, DevSecOps, cloud-native architectures, network security, Zero Trust principles, and security-by-design practices.
• Ability to conduct security architecture reviews, threat modeling exercises, technical risk assessments, and security control evaluations.
• Ability to assess cybersecurity implications of business and technology initiatives and provide practical, risk-informed security recommendations.
• Strong stakeholder management and influencing skills, with the ability to build trusted relationships across executive leadership, technology teams, architects, engineers, and business partners.
• Professional cybersecurity certifications preferred, such as CISSP, CISM, CCSP, GIAC, Security+, Azure Security Engineer, AWS Security Specialty, CRISC or comparable certifications.

What you'll get

Feel free to take advantage of all that American Airlines has to offer:

• Travel Perks: Ready to explore the world? You, your family and your friends can reach 365 destinations on more than 6,800 daily flights across our global network.
• Health Benefits: On day one, you’ll have access to your health, dental, prescription and vision benefits to help you stay well. And that’s just the start, we also offer virtual doctor visits, flexible spending accounts and more.
• Wellness Programs: We want you to be the best version of yourself – that’s why our wellness programs provide you with all the right tools, resources and support you need.
• 401(k) Program: Available upon hire and, depending on the workgroup, employer contributions to your 401(k) program are available after one year.
• Additional Benefits: Other great benefits include our Member Assistance Program, pet insurance and discounts on hotels, cars, cruises and more

Feel free to be yourself at American

From the team members we hire to the customers we serve, inclusion and diversity are the foundation of the dynamic workforce at American Airlines. Our 20+ Team Member Resource Groups are focused on connecting our team members to our customers, suppliers, communities and shareholders, helping team members reach their full potential and creating an inclusive work environment to meet and exceed the needs of our diverse world.

Are you ready to feel a tremendous sense of pride and satisfaction as you do your part to keep the largest airline in the world running smoothly as we care for people on life’s journey? Feel free to be yourself at American.