Achieving our goals starts with supporting yours. Grow your career, access top-tier health and wellness benefits, build lasting connections with your team and our customers, and travel the world using our extensive route network.<br><br>Come join us to create what’s next. Let’s define tomorrow, together.<br><br><strong>Description<br><br></strong>Connecting People. Uniting the World. There’s never been a more exciting time to join United Airlines! As a global company that operates in hundreds of locations around the world — with millions of customers and tens of thousands of employees — we have a unique responsibility to uplift and provide opportunities in the places where we work, live and fly. We’re on a path to becoming the biggest and airline in aviation history.<br><br>Join our Cybersecurity and Digital Risk (CDR) team to help lead the industry in cyber safety, security and resilience. United's CDR team plays a critical role in protecting our operations by enabling secure and resilient systems, managing threats and vulnerabilities and ensuring swift response and recovery. Our mission is to seamlessly embed cybersecurity and digital risk management into every aspect of our business. We help drive progress and growth through trusted digital solutions, safeguarding assets and empowering our team, all while promoting a cyber-safe and secure environment that supports resilient airline operations.<br><br><strong>Job Overview And Responsibilities<br><br></strong>The <strong>Director, Digital Risk & Resiliency</strong> leads the airline’s enterprise cyber risk management and cyber resiliency program. This role is accountable for identifying, assessing, and managing information security risks; building and maintaining robust cyber resiliency plans; and executing exercises and drills that sustain continuous awareness and the ability to maintain minimally viable operations during and after cyber events. The Director partners across Digital Technology, Operations, and Corporate Functions to translate strategy into measurable outcomes.<br><br><ul><li>Leadership & Strategy</li><li> Execute and evolve a unified cyber risk and resiliency strategy aligned to business objectives and risk appetite</li><li> Lead a team of managers/analysts; set goals, coach talent, and build repeatable processes</li><li> Convert strategy into roadmaps with clear milestones, owners, and success metrics</li><li>Risk Identification & Management</li><li> Run ongoing enterprise risk assessments for critical systems (flight operations, passenger platforms, cloud, OT, etc.)</li><li> Apply qualitative and quantitative methods to prioritize risks and inform treatment plans</li><li> Maintain the enterprise cyber risk register; track remediation and risk acceptances; produce actionable dashboards, KRIs, and KPIs for executives</li><li>Resiliency Planning & Execution</li><li> Drive business impact analyses, continuity strategies, and cybersecurity event recovery coordination to meet resiliency targets</li><li> Develop and maintain incident playbooks for relevant scenarios (e.g., ground-system disruption, customer data exposure)</li><li> Plan and run tabletop exercises, simulations, and full-scale drills; capture after-action items and verify improvements</li><li> Ensure “minimally viable operations” can be sustained across key processes during cyber events</li><li>Cyber Event Management (distinct from Incident Response)</li><li> Define and own the cross-functional, airline-wide Cyber Security Event Management process and operating model, separate from incident response, covering event taxonomy, activation triggers, roles/responsibilities, and handoffs</li><li> Establish and lead event coordination, ensuring timely triage, stakeholder alignment (Ops, Digital Technology, Airports/Stations, Customer, Legal, Comms), executive updates, and action tracking through event closure</li><li> Develop standardized runbooks and communication templates for events that may not meet “incident” thresholds but require coordinated monitoring, mitigation, or precautionary measures (e.g., sector-wide threats, vendor advisories, elevated fraud patterns)</li><li> Instrument and report event metrics and run regular readiness reviews to drive continuous improvement</li><li>Compliance & Controls Partnership</li><li> Partner with other digital compliance leaders on SOX ITGC, PCI DSS, DFARS/CMMC, TSA directives, SOC 2, NIST CSF, and ISO 27001/27002</li><li> Support control design and testing; coordinate gap assessments and remediation; maintain clear policies and procedures</li><li>Collaboration & Communication</li><li> Build strong working relationships with Legal, Compliance, HR, DT, Operations, Airports/Stations, and third parties</li><li> Communicate complex risk and resiliency topics in clear, business-focused language to leaders and stakeholders</li><li> Integrate threat intelligence and red/blue-team learnings into risk treatment and resiliency plans</li><li>Continuous Improvement & Innovation</li><li> Monitor the threat landscape and regulatory changes; recommend tooling and automation to increase effectiveness and efficiency</li><li> Mature use of GRC/IRM platforms to streamline risk workflows, reporting, and audit readiness<br><br></li></ul><strong>This position is remote and would require approximately 25-30% travel.<br><br></strong><strong>Qualifications<br><br></strong><strong>Required:<br><br></strong><ul><li> Bachelor's degree in Cybersecurity, Computer Science, Risk Management, or related field</li><li> 10+ years of experience in Cybersecurity risk, GRC, or business continuity/disaster recovery</li><li> 3+ years of experience leading teams</li><li> Experience operating enterprise cyber risk programs, including risk quantification, risk registers, and executive reporting</li><li> Practical experience with business continuity and disaster recovery planning, exercises, and remediation tracking</li><li> Must be legally authorized to work in the United States for any employer without sponsorship</li><li> Successful completion of interview required to meet job qualification<br><br></li></ul><strong>Preferred<br><br></strong><ul><li> Master's degree</li><li> Certifications such as CISSP, CISM, CRISC, CBCP/ABCP (DRI/BCI), or FAIR</li><li> Experience in aviation, defense, or other critical-infrastructure environments</li><li> Familiarity with IATA/ICAO/FAA cybersecurity guidance</li><li> Eligibility for U.S. government security clearance<br><br></li></ul>The base pay range for this role is $171,475.00 to $223,246.00.<br><br>The base salary range/hourly rate listed is dependent on job-related, factors such as experience, education, and skills. This position is also eligible for bonus and/or long-term incentive compensation awards.<br><br>You may be eligible for the following competitive benefits: medical, dental, vision, life, accident & disability, parental leave, employee assistance program, commuter, paid holidays, paid time off, 401(k) and flight privileges.<br><br>United Airlines is an equal opportunity employer. United Airlines recruits, employs, trains, compensates and promotes regardless of race, religion, color, national origin, gender identity, sexual orientation, physical ability, age, veteran status and other protected status as required by applicable law. Equal Opportunity Employer - Minorities/Women/Veterans/Disabled/LGBT.<br><br>We will ensure that individuals with disabilities are provided reasonable accommodation to participate in the job application or interview process, to perform crucial job functions. Please contact JobAccommodations@united.com to request accommodation.
