Technology Compliance & Vulnerability Management Lead

Alaska Airlines; SeaTac (WA); On-site; USD 141,000 - 212,000; Full time

Benefits offered by this job

Stand-by travel

Well-being programs

401k match

Annual bonus

Paid time off

Job summary

Alaska Airlines seeks a Technology Compliance Program Manager, Vulnerability Management, to own the strategy for identifying, assessing, prioritizing, and remediating security vulnerabilities across our technology environment and to drive standards across the organization.

As an individual contributor, you will lead cross-functional efforts with auditors and IT teams while improving regulatory alignment, tool utilization, and executive reporting.

Qualifications

• 7 years of IT security and compliance experience.
• Bachelor's degree in Information Security or related field.
• Experience in project management, including scope, schedule, budgeting, risk, quality, and communications.
• Knowledge of security regulations (SOX, PCI DSS, HIPAA) and standards (ISO 27001, NIST).
• Excellent verbal and written communication skills.
• High school diploma or equivalent.
• Must be authorized to work in the U.S.

Responsibilities

• Lead the vulnerability management program aligned with regulatory requirements.
• Define long-term strategy for developing and improving the enterprise vulnerability management program.
• Influence across company to ensure IT assessments align with information security policies and standards.
• Manage and optimize vulnerability tools (Tenable, Qualys, Rapid7) to improve audits and risk reviews.
• Serve as primary liaison between penetration testers and internal stakeholders.
• Define and track KPIs and metrics to measure program effectiveness.
• Analyze findings and prioritize remediation with relevant teams.
• Oversee timely delivery of reports to leadership and maintain documentation.
• Coordinate regular vulnerability scanning across infrastructure, apps, and cloud.
• Facilitate internal and third-party penetration tests.
• Maintain audit evidence for reviews.

Skills

IT security

Compliance

Project management

Regulatory knowledge

Communication skills

US work authorization

Education

Bachelor’s degree in Information Security or related field

Tools

Tenable

Qualys

Rapid7

Job description

Alaska Airlines seeks a Technology Compliance Program Manager, Vulnerability Management, to own the strategy for identifying, assessing, prioritizing, and remediating security vulnerabilities across our technology environment and to drive standards across the organization.

As an individual contributor, you will lead cross-functional efforts with auditors and IT teams while improving regulatory alignment, tool utilization, and executive reporting.