ANSR is hiring for one of its clients.
About American Airlines:
To Care for People on Life's Journey®. Together with our American Eagle regional partners, we offer thousands of flights daily to more than 350 destinations in more than 60 countries.
American Airlines is transforming the way it delivers technology to its customers and team members worldwide.
American’s Tech Hub in Hyderabad, India, is our latest technology office location and home to team members who drive technical innovation and engineer unrivalled digital products to best serve American’s customers and team members. With U.S. tech hubs in Dallas-Fort Worth, Texas and Phoenix, Arizona, our new team in Hyderabad, India enables better support of our 24/7 operation and positions American to deliver industry-leading technology solutions that create a world-class customer experience.
INTRO:
Are you ready to explore a world of possibilities, both at work and during your time off Join our American Airlines family, and you’ll travel the world, grow your expertise, and become the best version of you. As you embark on a new journey, you’ll tackle challenges with flexibility and grace, learning new skills and advancing your career while having the time of your life. Feel free to enrich both your personal and work life and hop onboard!
WHY YOU’LL LOVE THIS JOB:
As one diverse, high performing team committed to technical excellence, you’ll help shape the modern cybersecurity capabilities that drive a more reliable, safe, and profitable airline. The Cybersecurity Technology Services product group delivers comprehensive solutions, processes, and platforms that embed and monitor security across Cloud, Application, Endpoint / End User, Data, and AI domains. In this portfolio, you’ll help strengthen the safeguards that protect our systems, data, and people through consistent, scalable practices and deliver solutions that secure one of the world’s most complex global operations.
The Manager - Data Protection will support and deliver the strategy, roadmap, engineering, and continuous improvement of American Airlines’ Data Protection and Privacy Technology program. In this role, you’ll advance core capabilities including data security engineering and protection, privacy engineering and assurance, data classification, retention, and access governance while leading a team of skilled engineers and analysts. You’ll partner with Cybersecurity, Privacy Office, Enterprise Data, Legal, and Procurement to implement scalable, modern controls that protect American Airlines’ critical information assets and support secure business innovation.
This list is intended to reflect the current job but there may be additional essential functions (and certainly non-essential job functions) that are not referenced. Management will modify the job or require other tasks be performed whenever it is deemed appropriate to do so, observing, of course, any legal obligations including any collective bargaining obligations.
- Support and deliver the Data Protection and Privacy Technology strategy and roadmap, helping deploy and mature controls such as data classification, encryption, access governance, DLP, masking, and AI/ML safeguards.
- Build a strong understanding of how data is created, stored, and used across assigned domains, championing secure data handling practices and shared accountability, while ensuring data protection and privacy decisions support business and technology needs.
- Balance data protection, privacy, and business needs when recommending or implementing controls, aligned to the organization’s risk appetite.
- Translate complex data protection and privacy requirements into clear and actionable guidance for engineering teams, product managers, and business partners.
- Contribute to integrating data protection and privacy controls early in technology development cycles by identifying risks, recommending mitigations, and supporting implementation.
- Partner with engineering, cybersecurity, privacy, and business teams to embed data protection and privacy by design into applications, platforms, and AI solutions.
- Monitor the performance of data protection and privacy technologies using KPIs, metrics, and telemetry to identify opportunities for automation, maturity uplift, and risk reduction.
- Coordinate with Cybersecurity, Privacy Office, and other partners during data protection and privacy incidents, ensuring timely documentation, communication, and follow through.
- Conduct data protection and privacy-by-design assessments, product evaluations, compliance checks, and audits to support regulatory requirements.
- Deliver data protection and privacy awareness efforts that strengthen employee understanding of responsibilities, secure behaviors, and emerging risks.
- Act as the primary point of contact between business/portfolio executive leadership and product teams to engage executive leadership and communicate the progress of Data Protection and Privacy Technology programs and services.
- Lead and develop a team of professional, creative, and collaborative data protection and privacy engineers/analysts, fostering technical growth, collaboration, and continuous improvement.
- Oversee a team of up to 20 team members
ALL YOU’LL NEED FOR SUCCESS:
Minimum Qualifications- Education & Prior Job Experience:
- Bachelor’s degree in Computer Science, Information Systems, Engineering, Cybersecurity, or related technical field.
- 5+ years of progressive experience in cybersecurity, data protection, privacy engineering, or information security.
- 2+ years of experience leading or mentoring technical teams.
- Experience implementing or supporting data protection and privacy technologies.
- Demonstrated ability to work across cybersecurity, privacy, data, and engineering teams to implement privacy and security controls.
- Ability to communicate data protection and privacy concepts clearly to both technical and non-technical audiences.
Preferred Qualifications- Education & Prior Job Experience:
- Master’s degree in computer science, Cybersecurity, Engineering, Information Assurance, or a related technical field.
- 10+ years of experience in cybersecurity, privacy engineering, data protection, or information security.
- Experience leading data protection or privacy engineering initiatives in large, complex enterprises or regulated industries (e.g., aviation, financial services, healthcare).
- Experience contributing to or managing data protection or privacy platforms.
Skills, Licenses & Certifications:
- Knowledge of data protection industry practices and global privacy regulations (GDPR, CCPA/CPRA, PCI, etc.) and ability to translate them into technical controls aligned with industry frameworks such as NIST CSF/PRMF and ISO/IEC 27001/27701.
- Strong understanding of data security and privacy engineering, secure data lifecycle practices, and access control models.
- Familiarity with cybersecurity- or privacy-related risk assessment methodologies and frameworks.
- Professional certifications such as CIPP/E, CIPP/US, CIPT, CDPSE, CISSP, CCSP, or equivalent privacy/security credentials are desirable.
- Demonstrated ability to deliver prioritized outcomes using agile and product management principles.
- Experience implementing or managing solutions such as Securiti.ai, Microsoft Purview, OneTrust, BigID, or similar DSPM, data classification, DLP, access governance, and privacy automation platforms.
- Ability to use KPIs, operational telemetry, and maturity metrics to assess the effectiveness of privacy and data protection controls.
- Strong leadership, communication, and relationship building skills with the ability to influence stakeholders at all levels.
- Excellent analytical and problem-solving abilities with keen attention to detail.
- Solution oriented, can define various pragmatic alternatives leading to appropriate Cybersecurity outcomes.
- Ability to work independently with a high degree of initiative.
LANGUAGE / COMMUNICATION SKILLS:
- Ability to effectively communicate both verbally and written with all levels within the organization
- Proficient in writing/creation of formal documentation such as reports, slide decks, policies, SOPs, and architecture diagrams.
- Physical ability necessary to safely and successfully perform the essential functions of the position, with or without any legally required reasonable accommodations that do not pose an undue hardship. Note: If the Company has reason to question an employee’s physical ability to safely and/or successfully perform the position’s essential job functions, the HR team generally will engage in an interactive process to determine whether a reasonable accommodation is appropriate. HR (working with the operation) ordinarily first speaks with the team member directly and they mutually identify the physical demands of the job that are or may be impacted by the employee’s obvious or known condition. Then, if necessary, HR would request medical documentation from the team member’s treating physician or others to confirm the employee’s ability to perform those essential job functions safely and successfully.
FEEL FREE TO BE YOURSELF AT AMERICAN AIRLINES:
- From the team members we hire to the customers we serve, inclusion and diversity are the foundation of the dynamic workforce at American Airlines. Our 20+ Employee Business Resource Groups are focused on connecting our team members to our customers, suppliers, communities, and shareholders, helping team members reach their full potential and creating an inclusive work environment to meet and exceed the needs of our diverse world.
- Are you ready to feel a tremendous sense of pride and satisfaction as you do your part to keep the largest airline in the world running smoothly as we care for people on life’s journey Feel free to be yourself at American.
COMPETENCIES:
- Caring
- Collaboration
- Development
- Future
- Results