Senior Technology Compliance & Vulnerability Program Lead

Alaska Airlines, Inc.; SeaTac (WA); On-site; USD 141,000 - 212,000; Full time

Job summary

Alaska Airlines is seeking a Technology Compliance Program Manager for Vulnerability Management to own the strategy and execution across the technology environment. This role acts as the SME for compliance and vulnerability programs, coordinating with IT, security, and business units, and driving remediation efforts with a focus on minimizing risk.

The role requires 7+ years in IT security/compliance, strong regulatory knowledge, and proven project leadership.

Qualifications

• 7+ years of IT Security & Compliance experience.
• Bachelor’s degree or equivalent in information security/IT/CS or related.
• Experience in project management including scope, schedule, budget, risk, quality, and communications.
• Knowledge of security regulations and standards (PCI DSS, HIPAA, ISO 27001, NIST).
• Excellent verbal and written communication skills.
• Authorized to work in the U.S.

Responsibilities

• Lead technology compliance and vulnerability management program development and strategy.
• Align vulnerability management with regulatory requirements (PCI-DSS, HIPAA, NIST, ISO 27001).
• Define and execute long-term strategy for enterprise vulnerability management.
• Manage and optimize vulnerability management tools (Tenable, Qualys, Rapid7).
• Coordinate with Alaska Air Group divisions and IT departments on objectives and policies.
• Serve as primary liaison between penetration testers and internal stakeholders.
• Define and track KPIs and metrics for program effectiveness.
• Analyze findings and drive remediation with relevant teams.
• Deliver reports to leadership and integrate findings into lifecycle.
• Oversee regular vulnerability scanning across infrastructure, apps, and cloud.
• Coordinate internal and third-party penetration tests.
• Maintain documentation for audits and compliance.

Skills

IT Security

Compliance

Project management

Security regulations

Communication skills

Security certifications (CISA/CISSP/GI

PM certifications (PMP)

Education

Bachelor’s degree in Information Security / IT / CS or related

Equivalent combination of training/experience

Tools

SIEM

CMDB

Ticketing systems

Job description

Alaska Airlines is seeking a Technology Compliance Program Manager for Vulnerability Management to own the strategy and execution across the technology environment. This role acts as the SME for compliance and vulnerability programs, coordinating with IT, security, and business units, and driving remediation efforts with a focus on minimizing risk.

The role requires 7+ years in IT security/compliance, strong regulatory knowledge, and proven project leadership.