{"id":4239562,"url":"https://alion.io/job/alaskaair-principal-technology-compliance-program-manager-vulnerability-management","title":"Principal Technology Compliance Program Manager - Vulnerability Management","company":{"id":2689175,"name":"alaskaair","domain":"alaskaair.com","url":"https://alion.io/company/alaskaair-com","size_band":null,"is_staffing_agency":false,"employer_type":"direct","is_intermediary":false,"listed_via":null,"ats_vendor":"iCIMS","truth_index":null},"role":"Security","role_family":"Security","seniority":"lead","employment_type":null,"work_mode":"on_site","remote_scope":null,"remote_scope_basis":null,"remote_working_hours":null,"hiring_geo_confidence":"explicit","locations":["SeaTac, United States"],"countries":["US"],"hiring_countries":[],"hiring_countries_total":0,"salary":null,"salary_estimate":null,"experience_years_min":7,"visa_sponsorship":false,"relocation_package":false,"has_equity":false,"technologies":[{"name":"HIPAA","optional":false},{"name":"ISO 27001","optional":false},{"name":"PCI DSS","optional":false},{"name":"Qualys Cloud Platform","optional":false},{"name":"SIEM","optional":false}],"status":"live","first_seen_at":"2026-11-13T11:57:32Z","employer_posted_date":"2026-11-13","last_verified_at":"2026-11-13T12:19:27Z","board_verified":true,"closed_at":null,"days_open":0,"trust":{"level":"ok","repost_count":null,"flags":[],"days_open":0},"description":"Company\nAlaska AirlinesThe Team\nGuided by our purpose, core values, and leadership principles, we are creating an airline people love. Our corporate teams set the strategies and operational plans to ensure the success of our company. Whether we use our expertise in accounting, human resources, finance, planning, legal, marketing, or any of our operational divisions, our shared passion for travel and our guests is what motivates us to achieve excellence each day. If you share our passion for creating an airline people love, we want to hear from you.\nRole Summary\nThe Technology Compliance Program Manager Vulnerability Management is the sole subject matter expert in the technology compliance and vulnerability management domain. As an individual contributor, this role defines long-term strategy for the identification, assessment, prioritization, and remediation of security vulnerabilities across our technology environment and exercises considerable latitude and initiative to solve broad, complex problems.\nKey Duties\nAs the lead subject matter expert in technology compliance, ensure the vulnerability management program aligns with regulatory requirements (e.g., PCI-DSS, HIPAA, NIST, ISO 27001) and integrates with other security tools such as SIEM, CMDB, and ticketing systems.\nDefine long-term strategy for developing, implementing, and continuously improving the enterprise vulnerability management strategy and roadmap.\nInfluence across company and several levels up to execute on IT assessments focusing on compliance with information security policy, procedures and standards.\nManage and optimize vulnerability management tools (e.g., Tenable, Qualys, Rapid7, etc.) to continuously improve the internal audit and risk management review.\nConsult Alaska Air Group divisions, IT departments and project resources regarding the development, management approval, and implementation of objectives, goals, policies, standards, guidelines, and other requirement statements needed to support information security compliance throughout the company.\nServe as the primary point of contact between penetration testers and internal stakeholders, ensuring clear scope definition, rules of engagement, and minimal business disruption.\nDefine and track key performance indicators (KPIs) and metrics to measure program effectiveness.\nAnalyze and track findings, validate results, and work with relevant teams to prioritize and remediate identified vulnerabilities.\nManage execution of timely delivery of reports to leadership and stakeholders, maintain documentation, and integrate findings into the broader vulnerability management lifecycle.\nOversee regular vulnerability scanning and assessments across infrastructure, applications, and cloud environments.\nFacilitate, schedule, and coordinate internal and third-party penetration tests across applications, networks, and cloud environments.\nMaintain documentation and evidence for audits and compliance reviews.\nJob-Specific Experience, Education & Skills\nRequired\n7 years of experience in IT Security and Compliance, or related area.\nBachelor’s degree in Information Security, Information Technology, Computer Science or related field, or an additional two years of relevant training/experience in lieu of this degree.\nExperience in project management, including all elements of scope, schedule, budgeting, risk evaluation, quality, integration, staffing, and communications.\nKnowledge of security regulations (e.g., Sarbanes-Oxley, Payment Card Industry Data Security Specification [PCI DSS], Health Insurance Portability and Accountability Act [HIPAA]) and standards (e.g. ISO 27001, NIST SP800-series).\nExcellent verbal and written communication skills.\nHigh school diploma or equivalent.\nMinimum age of 18.\nMust be authorized to work in the U.S. \nPreferred\nIndustry certification in security (e.g. CISA, CISSP, and/or GIAC).\nIndustry certification in project management (e.g. PMP).\n2 years of experience leading people.\nDemonstrated knowledge and experience in information security, software development and/or network security for large organizations.\nDetailed technical knowledge in security engineering, system and network security, authentication and security protocols.\nJob-Specific Leadership Expectations\nEmbody our values to own safety, do the right thing, be caring and kind, and deliver performance. \nCreate a culture where all employees feel safe and supported.\nStarting Rate\nSalary Range\n$141,250 - $211,900 / yearSalary Details\nPay will be based on multiple factors, including and not limited to location, relevant experience/level and skillset while balancing internal equity relative to other Alaska/Hawaiian/Horizon employees. Alaska/Hawaiian/Horizon is committed to fair, unbiased compensation along with competitive benefits in all locations in which we operate.\nNote: We don’t typically hire at the top of the range.\nTotal Rewards\nAlaska Airlines, Hawaiian Airlines and Horizon Air pay and benefits can vary by company, location, number of regularly scheduled hours worked, length of employment, and employment status.\nFree stand-by travel privileges on Alaska Airlines, Hawaiian Airlines & Horizon Air\nComprehensive well-being programs including medical, dental and vision benefits\nGenerous 401k match program\nAnnual bonus plans\nGenerous holiday and paid time off \nFor more information about Alaska/Hawaiian/Horizon Total Rewards please visit our career site and view benefits.\nRegulatory Information\nEqual Employment Opportunity Policy Statement It is the policy of Alaska Airlines, Hawaiian Airlines and Horizon Air to comply with all applicable federal, state and local laws governing nondiscrimination in employment and to ensure equal opportunity in all terms, conditions, and benefits of employment or potential employment.\nWe also prohibit discrimination and harassment against any employee or applicant for employment because of race, color, religion, sex, national origin, age, disability, veteran status, genetic information and other legally protected categories.\nWe have established an EEO Compliance Program under Section 503 of the Rehabilitation Act of 1973 (“Section 503”) and the Vietnam Era Veteran’s Readjustment Assistance Act of 1974 (“VEVRAA”). All applicants and employees are treated without regard to their race, color, religion, sex, national origin, disability or protected veteran status. In addition, we have established an audit and reporting system to allow for effective measurement of its equal employment opportunity activities.\nTo implement this policy, we will:\n(1) Recruit, hire, train and promote qualified persons in all job titles, without regard to race, color, religion, sex, national origin, age, disability, veteran status, genetic information and any other legally protected categories;\n(2) Ensure that employment decisions are based only on valid job requirements; and\n(3) Ensure that all personnel actions and employment activities such as compensation, benefits, promotions, layoffs, return from layoff, Alaska Airlines, Hawaiian Airlines and Horizon Air sponsored programs, and tuition assistance will be administered without regard to race, color, religion, sex, national origin, age, disability, veteran status, genetic information and other legally protected categories.\nEmployees and applicants for employment will not be subjected to harassment, intimidation, threats, coercion or discrimination because they have engaged or may engage in (1) filing a complaint, (2) opposing any act or practice made unlawful by, or exercising any other right protected by, any Federal, State or local law requiring equal opportunity, including Section 503 and the equal opportunity provisions of VEVRAA, or (3) assisting or participating in any investigation, compliance evaluation, hearing, or any other activity related to the administration of any Federal, State or local law requiring equal opportunity, including Section 503 and the equal opportunity provisions of VEVRAA.\nGovernment Contractor & Department of Transportation (DOT) Regulations Alaska Airlines, Hawaiian Airlines & Horizon Air are regulated by the Department of Transportation (DOT - regulations, 49 CFR part 40) and all applicants are advised that post-offer and/or pre-employment drug testing will be conducted to determine the presence of marijuana, cocaine, opioids, phencyclidine (PCP) and amphetamines or a metabolite of these drugs prior to any offer or employment or transfer into a safety-sensitive position. Failure to submit to testing or positive indications of drug use will render the applicant ineligible for employment with Alaska Airlines/Hawaiian Airlines/Horizon Air and any employment offer will be withdrawn.\nApply by 7:00 PM Pacific Time on\n11/13/2026FLSA Status\nExemptEmployment Type\nFull-TimeRegular/Temporary\nRegularRequisition Type\nManagementLocation\nSeattle - HubA:\nY - T2L:\n#LI-B","description_format":"text","description_chars":8897,"description_truncated":false,"requirements":{"experience_years_min":7,"management_years_min":2,"team_size_min":null,"manages_managers":false,"education":{"level":"high_school","optional":true},"security_clearance":false,"languages":[]},"benefits":["401k plan","Equity","Health insurance"],"hiring_locations":[{"name":"United States","iso":"US","kind":"country"}],"hiring_excludes":[],"relocation_offered":false,"industries":["Endpoint Security","Information Security","Vulnerability Management","Air Transport"],"lifecycle":[{"event":"open","at":"2026-11-13T11:57:32Z"}],"visa":[],"liveness":{"score":86,"band":"hot","label":"Hiring now","p_open":1,"p_active":0.86,"p_room":1,"age_days":0,"expected_fill_days":29,"reasons":["conf:3","win:early"],"computed_at":"2026-11-13T15:34:41Z"},"pay":null,"html_url":"https://alion.io/job/alaskaair-principal-technology-compliance-program-manager-vulnerability-management","json_url":"https://alion.io/job/alaskaair-principal-technology-compliance-program-manager-vulnerability-management.json","meta":{"generated_at":"2026-11-13T15:34:41Z","cache_seconds":300,"methodology":"https://alion.io/methodology","terms":"https://alion.io/terms","contact":"https://alion.io/contact","api":"https://alion.io/developers","about":"Alion is a live layer of people, companies and AI agents: who they are, whether they are real and active right now, what they do and how to work with them, readable by people and by agents and paid per call.","catalog":"https://alion.io/catalog.json","usage":{"tier":"crawler_verified","counted_by":"address","units_charged":1,"used_today":31310,"day_limit":null,"remaining_today":null,"minute_limit":300,"resets_at":"2026-11-14T00:00:00Z"}},"offers":[{"id":"company.slices","title":"One company in depth, by slice","status":"live","price":{"credits":0.1,"usd":0.01,"plus_per_slice":{"credits":0.05,"usd":0.005}},"unit":"per company, plus each slice with data","note":"the employer in depth","call":{"mcp_tool":"get_company","arguments":{"id":2689175},"rest":"https://alion.io/mcp/rest/get_company?id=2689175"},"human":"https://alion.io/catalog?offer=company.slices&for=job%2Falaskaair-principal-technology-compliance-program-manager-vulnerability-management"},{"id":"market.stats","title":"A market slice: pay, demand and time to fill","status":"free","price":{"credits":0,"usd":0},"unit":"per slice","note":"pay, demand and time to fill for this role and place","call":{"mcp_tool":"market_stats"},"human":"https://alion.io/catalog?offer=market.stats&for=job%2Falaskaair-principal-technology-compliance-program-manager-vulnerability-management"},{"id":"job.search","title":"Open jobs by role, technology, place, pay and visa","status":"live","price":{"credits":0.1,"usd":0.01},"unit":"per posting in a list","note":"similar open postings","call":{"mcp_tool":"search_jobs"},"human":"https://alion.io/catalog?offer=job.search&for=job%2Falaskaair-principal-technology-compliance-program-manager-vulnerability-management"},{"id":"company.verify","title":"Is this company real and active right now","status":"pilot","price":null,"unit":"per company","request":{"url":"https://alion.io/catalog/request","method":"POST","body":"{\"offer\": \"company.verify\", \"for\": \"job/alaskaair-principal-technology-compliance-program-manager-vulnerability-management\", \"note\": \"what you need it for\"}"},"human":"https://alion.io/catalog?offer=company.verify&for=job%2Falaskaair-principal-technology-compliance-program-manager-vulnerability-management"}],"agent":{"mcp":"https://alion.io/mcp/jobs","mcp_open":"https://alion.io/mcp/open","next":[{"tool":"get_job","arguments":{"id":4239562}},{"tool":"search_jobs","arguments":{"company":"alaskaair.com","detail":"compact"}},{"tool":"match_people","arguments":{"job_id":4239562},"note":"people open to offers who fit this vacancy"}],"note":"The same data through MCP tools: https://alion.io/mcp/open needs no sign-in (compact searches, postings, people); https://alion.io/mcp with an Alion account has everything. Docs: https://alion.io/developers"}}