> Markdown version of [/jobs/ext/4615335-sr-manager-it-cybersecurity-data-protection](https://www.wearedevelopers.com/jobs/ext/4615335-sr-manager-it-cybersecurity-data-protection). Every page supports `.md` or `Accept: text/markdown`. Links point to the HTML versions so they work for humans too. Agent guide: [/agents.md](https://www.wearedevelopers.com/agents.md). --- # Sr Manager, IT Cybersecurity Data Protection - **Company:** American Airlines Inc - **Location:** Fort Worth, TX, United States - **Experience:** Expert - **Contract:** Permanent contract - **Skills:** Artificial Intelligence, Cloud Computing, Cloud Database, Code Review, Cyber Security, Information Systems, Data Discovery, Data Security, Identity and Access Management, Automation of Marketing, Tokenization, Enterprise Data Management, Privacy Controls, Cloud Platform System, Data Classification, National Institute of Standards and Technology Cybersecurity Framework, Information Technology - **Published:** November 7, 2026 - **Apply:** https://www.indeed.com/viewjob?jk=573dceeab2c5d31a ## About the Role * Bachelor's degree in Computer Science, Information Systems, Engineering, Cybersecurity, or a related technical field * 8+ years of progressive experience in cybersecurity, data protection, privacy engineering, or information security. * 3+ years of experience leading technical teams in a large enterprise environment. * Prior experience driving large-scale security or privacy technology initiatives from strategy through execution. * Demonstrated ability to collaborate across cybersecurity, legal, data, product, and engineering teams to embed privacy and security into systems and workflows. * Exhibit advanced ability to communicate data protection and privacy concepts clearly to non-technical audiences, translating complex requirements into practical guidance., * Master's degree in computer science, Cybersecurity, Engineering, Information Assurance, or a related technical field. * 12+ years of experience in cybersecurity, privacy engineering, data protection, or information security. * 5+ years of leadership or management experience overseeing technical teams and driving enterprise level initiatives. * Experience leading data protection or privacy engineering programs and teams in highly regulated industries (e.g., aviation, financial services, healthcare). Skills, Licenses & Certifications * Knowledge of data protection industry practices and global privacy regulations (GDPR, CCPA/CPRA, PCI, etc.) and ability to translate them into technical controls aligned with industry frameworks such as NIST CSF/PRMF and ISO/IEC 27001/27701. * Strong understanding of data security and privacy engineering, secure data lifecycle practices, and access control models. * Familiarity with cybersecurity or privacy-related risk assessment methodologies and frameworks. * Professional certifications such as CISSP, CIPP/E, CIPP/US, CIPT, CDPSE, CCSP, or equivalent privacy/security credentials. * Demonstrated ability to deliver prioritized outcomes using agile and product management principles. * Experience in implementing and managing data protection and privacy technologies (e.g., DLP, data discovery/classification, encryption/tokenization, access governance, cloud data security, data and code scanning tools, DSAR/rights automation platforms, consent and preference management tools). * Experience using KPIs, operational telemetry, and maturity metrics to assess the effectiveness of data protection and privacy by design controls. * Demonstrated leadership, communication, and relationship building skills with the ability to influence stakeholders at all levels. * Excellent analytical and problem-solving abilities with keen attention to detail. * Solution oriented, can define various pragmatic alternatives leading to appropriate Cybersecurity outcomes. * Ability to work independently with a high degree of initiative. ## Description As one diverse, high-performing team committed to technical excellence, you'll help shape the modern cybersecurity capabilities that drive a more reliable, safe, and profitable airline. The Platform Security product group delivers comprehensive solutions, processes, and platforms that embed and monitor security across Cloud, Application, Endpoint / End User, Data, and AI domains. In this portfolio, you'll help strengthen the safeguards that protect our systems, data, and people through consistent, scalable practices and deliver solutions that secure one of the world's most complex global operations. The Sr. Manager - Data Protection and Privacy Technology will own and lead the strategy, roadmap, engineering, and continuous improvement of American Airlines' Data Protection and Privacy Technology program. In this role, you'll advance core capabilities including data security engineering and protection, privacy engineering and assurance, data classification, retention, and access governance while guiding talented global teams. You'll work closely with Cybersecurity, Privacy Office, Enterprise Data, Legal, and Procurement to build scalable, modern controls that protect American Airlines' most critical information assets. What you'll do As noted above, this list is intended to reflect the current job but there may be additional essential functions (and certainly non-essential job functions) that are not referenced. Management will modify the job or require other tasks be performed whenever it is deemed appropriate to do so, observing, of course, any legal obligations including any collective bargaining obligations. This list is intended to reflect the current job but there may be additional essential functions (and certainly non-essential job functions) that are not referenced. Management will modify the job or require other tasks be performed whenever it is deemed appropriate to do so, observing, of course, any legal obligations including any collective bargaining obligations. * Own and lead the enterprise Data Protection and Privacy Technology strategy and roadmap, ensuring modern controls (classification, encryption, access governance, DLP, masking, AI/ML safeguards) are built, deployed, and continuously improved. * Develop a deep understanding of enterprise data flows, championing secure data handling practices and shared accountability, while ensuring data protection and privacy decisions align with business priorities and technology strategies. * Balance data protection, privacy, and business objectives, while guiding decisions that reflect the organization's risk appetite and operational realities with little/no direction from business/portfolio leadership. * Provide oversight and direction for the Data Protection and Privacy Technology products' capabilities, programs, services and engagement model. Govern adherence to policies and standards. Own, enhance, and drive the global operating model. * Translate complex data protection and privacy requirements into clear, actionable guidance for senior leaders, technology teams, and business partners. * Shape how data protection and privacy controls are integrated into new technology development, ensuring risks are mitigated early and effectively. * Serve as the bridge between engineering, cybersecurity, privacy, and business teams to embed data protection and privacy by design into platforms, applications, and AI solutions. * Evaluate the effectiveness of data protection and privacy technologies using KPIs, telemetry, and operational metrics to guide maturity, automation, and risk reduction. * Conduct and oversee data protection and privacy by design risk assessments, product evaluations, compliance checks, and audits to meet regulatory requirements. * Oversee coordination with appropriate teams during data protection and privacy incidents, ensuring accurate reporting, communication, and follow through. * Drive data protection and privacy awareness programs that strengthen end user understanding of data protection responsibilities and emerging threats. * Act as the primary point of contact between business/portfolio executive leadership and product teams to engage executive leadership and communicate the progress of Data Protection and Privacy Technology programs and services. * Build and lead professional, creative, and collaborative global teams of data protection engineers, privacy engineers, and analysts, cultivating technical excellence, continuous learning, and innovation. * Oversee a team of up to 50 team members with multiple squads.