Director Cybersecurity, Data Privacy, & Compliance
Core
Leads enterprise cybersecurity, data privacy, and governance programs while ensuring regulatory compliance across all operational and commercial functions of an airline.
Role type
Director, Cybersecurity, Data Privacy & Compliance
Builds
Enterprise information security strategy, data privacy framework, and responsible AI/ML governance.
Domain
Aviation / Cybersecurity & Data Privacy
Deliverable
production ML models | product features | dashboards & analysis | research | client delivery | infrastructure | physical/clinical work
Required skills
Information security strategy, data privacy program management, data governance framework design, regulatory compliance (CCPA/CPRA/GDPR), risk assessment, incident response, third-party risk management, AI/ML governance, stakeholder management
Preferred skills
CISSP/CISM/CISA, CIPP/US/CIPP/E, aviation regulatory knowledge (DOT/TSA/FAA), regulated industry experience
Technologies
Data catalogs, metadata management, DLP solutions, privacy management platforms, DSAR automation tools
Responsibilities
Set strategy for new technologies and information security products; establish strategy to mitigate information security risks; lead ongoing threat and vulnerability assessments; develop and implement the enterprise data privacy program; guide Data Subject Access Request (DSAR) processes; lead Privacy Impact Assessments (PIAs) and Data Protection Impact Assessments (DPIAs); direct the organization's data breach notification and incident response process; establish and lead the enterprise data governance framework; define and implement data security and governance standards; develop policies for responsible AI/ML use; ensure compliance with aviation-specific regulatory requirements; monitor impact of evolving regulations; create and improve KPIs for compliance; maintain oversight of third parties.
Seniority
Director, strategic leadership & hands-on execution
