Principal Technology Compliance Program Manager - Payment Card Industry - Data Security Specification (PCI DSS)

Guided by our purpose, core values, and leadership principles, we are creating an airline people love. Our corporate teams set the strategies and operational plans to ensure the success of our company. Whether we use our expertise in accounting, human resources, finance, planning, legal, marketing, or any of our operational divisions, our shared passion for travel and our guests is what motivates us to achieve excellence each day. If you share our passion for creating an airline people love, we want to hear from you.

The Technology Compliance Program Manager (PCI) serves as the primary subject matter expert for the enterprise PCI DSS compliance program. This role is responsible for driving PCI strategy, governance, compliance assessments, audit readiness, and cross-functional remediation efforts to ensure the organization maintains compliance with PCI DSS requirements while reducing security and regulatory risk.

• →Lead the enterprise PCI DSS compliance program and serve as the primary PCI SME.
• →Manage annual PCI assessments, audits, ROC/SAQ activities, and remediation efforts.
• →Develop and maintain PCI policies, standards, procedures, and control documentation.
• →Partner with technology, cybersecurity, business, and audit teams to implement and sustain PCI controls.
• →Identify, assess, and track PCI-related risks, findings, and corrective actions.
• →Coordinate with internal and external auditors, QSAs, and key stakeholders.
• →Define and report PCI compliance metrics, KPIs, and program status to leadership.
• →Ensure audit-ready evidence and documentation are maintained.
• →Monitor changes to PCI requirements and drive continuous program improvement.
• →Own compliance initiatives and projects supporting payment card security and regulatory requirements.

Required

• 7 years of experience in IT Security and Compliance, or related area.
• Bachelor’s degree in information security, information technology, computer science or related field, or an additional two years of relevant training/experience in lieu of this degree.
• Experience in project management, including all elements of scope, schedule, budgeting, risk evaluation, quality, integration, staffing, and communications.
• Knowledge of security regulations (e.g. Sarbanes-Oxley, Payment Card Industry Data Security Specification (PCI DSS), Health Insurance Portability and Accountability Act (HIPAA) and standards (e.g. ISO 27001, NIST SP800-series).
• Excellent verbal and written communication skills.
• High school diploma or equivalent.
• Minimum age of 18.
• Must be authorized to work in the U.S.
•  

Preferred

• Industry certification in compliance (e.g. PCIP and/or an ISA).
• Industry certification in project management (e.g. PMP).
• Demonstrated knowledge and experience in information security, software development and/or network security for large organizations.
• Detailed technical knowledge in security engineering, system and network security, authentication and security protocols.

• Embody our values to own safety, do the right thing, be caring and kind, and deliver performance.
• Create a culture where all employees feel safe and supported.

Pay will be based on multiple factors, including and not limited to location, relevant experience/level and skillset while balancing internal equity relative to other Alaska/Hawaiian/Horizon employees. Alaska/Hawaiian/Horizon is committed to fair, unbiased compensation along with competitive benefits in all locations in which we operate.