Technology Compliance Program Manager - Payment Card Industry - Data Security Specification (PCI DSS)

Company Alaska Airlines The Team Guided by our purpose, core values, and leadership principles, we are creating an airline people love. Our corporate teams set the strategies and operational plans to ensure the success of our company. Whether we use our expertise in accounting, human resources, finance, planning, legal, marketing, or any of our operational divisions, our shared passion for travel and our guests is what motivates us to achieve excellence each day. If you share our passion for creating an airline people love, we want to hear from you.

Summary The Technology Compliance Program Manager (PCI) serves as the primary subject matter expert for the enterprise PCI DSS compliance program. This role is responsible for driving PCI strategy, governance, compliance assessments, audit readiness, and cross-functional remediation efforts to ensure the organization maintains compliance with PCI DSS requirements while reducing security and regulatory risk.

Lead the enterprise PCI DSS compliance program and serve as the primary PCI SME. Manage annual PCI assessments, audits, ROC/SAQ activities, and remediation efforts. Develop and maintain PCI policies, standards, procedures, and control documentation. Partner with technology, cybersecurity, business, and audit teams to implement and sustain PCI controls. Identify, assess, and track PCI-related risks, findings, and corrective actions. Coordinate with internal and external auditors, QSAs, and key stakeholders. Define and report PCI compliance metrics, KPIs, and program status to leadership. Ensure audit-ready evidence and documentation are maintained. Monitor changes to PCI requirements and drive continuous program improvement. Own compliance initiatives and projects supporting payment card security and regulatory requirements. Job-Specific Experience, Education & Skills Required 7 years of experience in IT Security and Compliance, or related area. Bachelor’s degree in information security, information technology, computer science or related field, or an additional two years of relevant training/experience in lieu of this degree. Experience in project management, including all elements of scope, schedule, budgeting, risk evaluation, quality, integration, staffing, and communications. Knowledge of security regulations (e.g. Sarbanes-Oxley, Payment Card Industry Data Security Specification (PCI DSS), Health Insurance Portability and Accountability Act (HIPAA) and standards (e.g. ISO 27001, NIST SP800-series). Excellent verbal and written communication skills. High school diploma or equivalent. Minimum age of 18. Must be authorized to work in the U.S.   Preferred Industry certification in compliance (e.g. PCIP and/or an ISA). Industry certification in project management (e.g. PMP). Demonstrated knowledge and experience in information security, software development and/or network security for large organizations. Detailed technical knowledge in security engineering, system and network security, authentication and security protocols. Job-Specific Leadership Expectations Embody our values to own safety, do the right thing, be caring and kind, and deliver performance. Create a culture where all employees feel safe and supported. Salary Range $141,250-$211,900 / year Salary Details Pay will be based on multiple factors, including and not limited to location, relevant experience/level and skillset while balancing internal equity relative to other Alaska/Hawaiian/Horizon employees. Alaska/Hawaiian/Horizon is committed to fair, unbiased compensation along with competitive benefits in all locations in which we operate.   Note: We don’t typically hire at the top of the range. Total Rewards Alaska Airlines, Hawaiian Airlines and Horizon Air pay and benefits can vary by company, location, number of regularly scheduled hours worked, length of employment, and employment status.   Free stand-by travel privileges on Alaska Airlines, Hawaiian Airlines & Horizon Air Comprehensive