Cyber GRC Leader: Risk, Compliance & Controls

American Airlines Inc.; Fort Worth (TX); On-site; USD 120,000 - 170,000; Full time

Benefits offered by this job

Travel Perks

Health Benefits

Wellness Programs

401(k) Program

Additional Benefits

Job summary

American Airlines is seeking a Cybersecurity GRC Manager to lead a specialized team focused on governance, risk, and compliance across technology, applications, and third parties. You will advance risk metrics, integrate data, and evolve GRC platforms, workflows, automation, and reporting.

You’ll partner with Cybersecurity, Legal, Audit, Privacy, and business teams to ensure clear ownership, accountability, and timely risk reduction while maturing the cybersecurity program.

Qualifications

• Bachelor’s degree in cybersecurity, information systems, or related discipline or equivalent experience.
• Experience delivering and leading cybersecurity, IT risk, compliance, audit, governance, or related activities.

Responsibilities

• Lead governance, risk, and compliance activities within assigned areas, aligning to enterprise risk and regulatory requirements.
• Coach and develop team members supporting cybersecurity GRC functions to ensure accountability and consistent execution.
• Oversee tools, processes, and reporting for policy management, risk assessment, third-party risk, remediation governance, and leadership visibility.
• Support development and maintenance of cybersecurity policies, standards, and control expectations across areas.
• Identify gaps in risk and control activities, assess impact, and track remediation progress.
• Lead or support regulatory compliance activities, audits, and readiness for applicable requirements.
• Collaborate with Cybersecurity, Technology, Legal, Audit, Privacy, and business teams to align risk decisions and drive accountability.
• Prepare clear risk and compliance reporting for leadership and stakeholders.
• Identify opportunities to improve GRC processes, documentation, metrics, and operating practices.

Skills

Cyber risk management

GRC platforms

Leadership

Stakeholder management

Data analytics

Regulatory frameworks

Communication

Education

Bachelor’s degree in Cybersecurity or related

Advanced degree preferred

Tools

Archer

ServiceNow GRC/IRM

OneTrust

Job description

American Airlines is seeking a Cybersecurity GRC Manager to lead a specialized team focused on governance, risk, and compliance across technology, applications, and third parties. You will advance risk metrics, integrate data, and evolve GRC platforms, workflows, automation, and reporting.

You’ll partner with Cybersecurity, Legal, Audit, Privacy, and business teams to ensure clear ownership, accountability, and timely risk reduction while maturing the cybersecurity program.