Cyber Risk & Compliance Engineer Jobs

1 job found

Today

Engineer/Sr Engineer, IT Cybersecurity Governance, Risk & Compliance

American Airlines Fort Worth, TX

Fort Worth, TX

Today

Full time Cyber Risk & Compliance Cybersecurity Governance Information Security

Apply Now

Job Description

American Airlines is seeking an Engineer/Sr Engineer, IT Cybersecurity Governance, Risk & Compliance to strengthen cybersecurity risk management and translate complex technical cyber risk into prioritized, executive-ready business decisions. This role focuses on governance, risk, and compliance practices, control assessment rigor, and portfolio measurement that supports measurable improvement.

Responsibilities

Interpret cybersecurity frameworks, regulatory requirements, enterprise policies, risk methodologies, and control expectations to convert complex requirements into practical governance, risk, compliance, and portfolio management practices.
Develop, refine, and operationalize policies, standards, procedures, control mappings, assessment methods, evidence expectations, and governance routines to increase consistency, quality, and defensibility across cybersecurity activities.
Evaluate cybersecurity risks, control gaps, compliance obligations, remediation plans, exceptions, issues, and supporting evidence to determine impact, root cause, prioritization, and appropriate risk response.
Create recommendations and influence operating practices that define how GRC, portfolio, work management, and financial governance activities are structured, measured, and executed to improve cyber risk outcomes.
Coordinate and execute control assessments, audit responses, evidence reviews, regulatory requests, testing activities, and issue validation using technical judgment to confirm control design and operating effectiveness.
Build and manage work intake, prioritization methods, roadmaps, delivery plans, dependency tracking, decision logs, status reporting, portfolio health views, and execution routines enabling cybersecurity leaders to manage commitments and outcomes.
Assess budgets, forecasts, run-rate trends, resource plans, vendor and contractor spend, purchase activity, and delivery commitments to identify gaps, tradeoffs, risks, and opportunities that improve portfolio decision-making.
Define, validate, analyze, and communicate cybersecurity, compliance, portfolio, financial, and operational metrics that support leadership visibility and risk-informed decisions.
Advise cybersecurity, technology, business, finance, sourcing, legal, privacy, and audit stakeholders on GRC requirements, control expectations, portfolio processes, work management practices, and financial governance activities.
Identify and implement improvements to workflows, tools, templates, data quality, reporting, documentation, and operating practices to increase efficiency and improve GRC and portfolio management outcomes.

Required Qualifications

Bachelor’s degree in Cybersecurity, Information Systems, Computer Science, Business, Risk Management, Compliance, Audit, Finance, Data Analytics, Project/Portfolio Management, or a related technical or business discipline, or equivalent experience/training.
Experience applying cybersecurity governance, risk, compliance, control, technology risk, audit, cyber portfolio management, work management, or financial management practices to interpret requirements, analyze information, coordinate execution, and support risk-informed stakeholder decisions.
Experience working with cybersecurity, risk, compliance, control, portfolio, financial, resource, vendor, or delivery data to identify issues, assess impacts, track decisions, develop reporting, and contribute to process, control, or portfolio outcome improvement.

Technologies

NIST Cybersecurity Framework
NIST Risk Management Framework
NIST SP 800-30
ISO 27001
ISO 27005
PCI DSS
SOX
SOC 2
CMMC
CRISC
CISSP
CISM
CISA

Preferred Qualifications

Advanced education, coursework, or specialized training in cybersecurity, information security, risk management, compliance, audit, information systems, data analytics, finance, project/portfolio management, or a related technical or business discipline.
Experience in a specialized cybersecurity governance, risk, compliance, cyber portfolio management, work management, audit, or technology risk role with ownership for interpreting requirements, designing or improving processes, and providing recommendations to stakeholders.
Experience applying cybersecurity, risk, compliance, and control frameworks such as NIST, ISO 27001, PCI DSS, SOX, SOC 2, CMMC, or similar standards to control mapping, assessments, evidence expectations, remediation activities, and governance practices.
Experience evaluating control design, operating effectiveness, risk impact, compliance gaps, exceptions, issues, remediation plans, and supporting evidence using structured analysis and technical judgment.
Experience developing or maturing GRC operating practices, control libraries, assessment methods, workflow routines, intake and prioritization models, portfolio roadmaps, dashboards, decision materials, or governance forums.
Experience analyzing cybersecurity portfolio, financial, vendor, contractor, resource, delivery, or work management data to identify trends, risks, tradeoffs, and recommendations.

Skills, Licenses, and Certifications

Deep working knowledge of cybersecurity risk management, including risk identification, analysis, prioritization, treatment, monitoring, and communication.
Strong understanding of cybersecurity controls and the relationship between threats, vulnerabilities, controls, business impact, and risk.
Experience developing or improving cybersecurity risk methodologies, assessment approaches, risk and control libraries, issue and exception practices, or risk treatment processes.
Ability to analyze complex technical and business information, develop defensible risk conclusions, and translate cyber risk into clear priorities, recommendations, and actions.
Experience developing risk metrics, key risk indicators, measurement approaches, and reporting that provide meaningful insight into cybersecurity risk and support risk-informed decisions.
Working knowledge of cybersecurity and risk frameworks such as NIST Cybersecurity Framework, NIST Risk Management Framework, NIST SP 800-30, ISO 27001/27005, or comparable industry frameworks and methodologies.
Experience using cybersecurity and risk data to identify relationships, trends, concentrations, and insights that improve risk prioritization and decision-making.
Working knowledge of data modeling, data quality, integration, analytics, or visualization concepts used to support cybersecurity risk intelligence and reporting.
Experience using or improving GRC platforms and related workflows, integrations, automation, and reporting capabilities to strengthen risk management processes and data quality.
Demonstrated curiosity and ability to evaluate and apply AI, automation, and emerging technologies to advance cybersecurity risk management, including identifying practical opportunities to improve risk analysis, intelligence, workflows, and team effectiveness.
Demonstrated ability to independently translate objectives into structured approaches, manage complex work, exercise technical judgment, and drive high-quality outcomes with limited day-to-day oversight.
Strong communication and advisory skills, including the ability to explain cyber risk, technical considerations, control implications, and recommendations to technical, business, and executive stakeholders.
Demonstrated curiosity and ability to evaluate emerging cybersecurity, risk, data, and technology capabilities and translate relevant developments into practical improvements.
Relevant cybersecurity or risk management certifications preferred, such as CRISC, CISSP, CISM, CISA, or comparable certifications.

Benefits

Travel perks (365 destinations on more than 6,800 daily flights across the global network)
Health benefits including health, dental, prescription and vision; virtual doctor visits; flexible spending accounts
Wellness programs
401(k) program available upon hire, with employer contributions depending on the workgroup after one year
Additional benefits including Member Assistance Program, pet insurance, and discounts on hotels, cars, cruises and more

Location

Fort Worth, TX (onsite)

Education

Bachelor’s degree (or equivalent experience/training)

View full job page →

Get Cyber Risk & Compliance Engineer Jobs alerts

New Cyber Risk & Compliance Engineer Jobs, daily.