Analyst/Sr Analyst, IT Cybersecurity Business Engagement

Intro

Are you ready to explore a world of possibilities, both at work and during your time off? Join our American Airlines family, and you’ll travel the world, grow your expertise and become the best version of you. As you embark on a new journey, you’ll tackle challenges with flexibility and grace, learning new skills and advancing your career while having the time of your life. Feel free to enrich both your personal and work life and hop on board!

Why you'll love this job

• As one diverse, high-performing team dedicated to technical excellence, you will focus relentlessly on delivering unrivaled digital products that drive a more reliable and profitable airline.

• Cyber Business Engagement partners closely with business and technology teams to understand strategic priorities, conduct security reviews for technology initiatives, and embed security early in the planning and delivery process to enable secure business outcomes. Through cyber awareness programs, targeted training, and phishing simulations, we strengthen security culture, increase risk awareness, and empower employees to make informed security decisions while advancing business objectives.

• Experience supporting cybersecurity communications, awareness campaigns, training delivery, stakeholder engagement, and reporting activities in a business or technology environment.

What you'll do

As noted above, this list is intended to reflect the current job but there may be additional essential functions (and certainly non-essential job functions) that are not referenced. Management will modify the job or require other tasks be performed whenever it is deemed appropriate to do so, observing, of course, any legal obligations including any collective bargaining obligations.

• Support Cyber Business Engagement Activities: Partner with business and technology teams to strengthen cybersecurity awareness, promote secure practices, and support the integration of security into business initiatives and decision-making.

• Deliver Security Awareness, Training, and Education Programs: Assist with the development, coordination, communication, and continuous improvement of cybersecurity awareness campaigns, training content, and educational resources for employees.

• Execute Phishing Simulation and Human Risk Programs: Support the planning, execution, analysis, and reporting of phishing simulations and other human risk initiatives to drive behavior change and reduce cybersecurity risk.

• Analyze and Report Engagement Metrics: Gather, validate, and analyze awareness, training, phishing simulation, and engagement metrics to identify trends, measure program effectiveness, and provide insights to stakeholders and leadership.

• Partner with Business Stakeholders: Collaborate with business leaders, technology teams, and cybersecurity partners to understand business priorities, provide risk-informed guidance, and promote shared accountability for cybersecurity.

• Support Security Reviews and Consultations: Participate in security reviews for technology initiatives and business projects, helping identify risks, communicate security considerations, and embed cybersecurity early in the lifecycle.

• Drive Communication and Outreach Efforts: Develop and deliver communications that increase cybersecurity awareness, reinforce key behaviors, and keep employees informed of emerging threats and security best practices.

• Improve Engagement Processes and Program Effectiveness: Help identify opportunities to enhance awareness campaigns, training programs, phishing simulations, reporting, communications, and stakeholder engagement activities to strengthen the organization's security culture.

All you'll need for success

Minimum Qualifications – Education & Prior Job Experience

• Bachelor's degree in Cybersecurity, Information Systems, Computer Science, Business, Risk Management, Compliance, Audit, or a related discipline, or equivalent experience/training.

• 3+ years Experience supporting cybersecurity awareness, training, phishing simulation, business engagement, communications, or related cybersecurity programs.

Preferred Qualifications – Education & Prior Job Experience

• Additional education, coursework, or training in cybersecurity, information security, information systems, risk management, compliance, audit, or a related field preferred.

• 4+ years of experience in cybersecurity awareness, training, phishing simulation, business engagement, communications, or related cybersecurity programs.

• Experience with cybersecurity awareness platforms, phishing simulation tools, learning management systems, communication campaigns, reporting and analytics, or related technologies preferred.

• Experience applying industry cybersecurity best practices and awareness frameworks, including human risk management, security culture development, phishing resilience, and cyber education programs preferred.

Skills, Licenses, and Certifications

• Knowledge of cybersecurity awareness, training, phishing simulation, and human risk management principles, practices, and program lifecycle activities.

• Familiarity with cybersecurity best practices, security culture development, behavior change methodologies, phishing resilience, and cyber awareness frameworks.

• Ability to support the planning, coordination, execution, and continuous improvement of cybersecurity awareness campaigns, training programs, and phishing simulation exercises.

• Strong analytical skills with the ability to review awareness metrics, phishing simulation results, engagement data, and risk trends, translating findings into actionable insights, reporting, and stakeholder communications.

• Ability to support security reviews and business consultations by identifying cybersecurity considerations, communicating risks, and helping integrate security requirements into business and technology initiatives.

• Self-starter with a strong ownership mindset, including the ability to independently manage awareness initiatives, stakeholder communications, project deliverables, and follow-up activities.

• Strong organizational and prioritization skills, with the ability to manage multiple awareness campaigns, training initiatives, stakeholder requests, communications, and reporting deadlines with attention to detail.

• Excellent written and verbal communication skills, with the ability to develop clear, engaging, and audience-appropriate cybersecurity communications, presentations, training materials, and awareness content.

• Ability to work collaboratively across cybersecurity, technology, business, communications, human resources, legal, and compliance teams to advance cybersecurity culture and risk reduction objectives.

• Demonstrated curiosity and learning agility, including the ability to quickly build knowledge of emerging cyber threats, human risk trends, business priorities, and evolving cybersecurity practices.

• Ability to use awareness platforms, phishing simulation tools, learning management systems (LMS), reporting tools, dashboards, collaboration platforms, spreadsheets, and data analysis tools effectively.

• Relevant cybersecurity, awareness, communications, training, risk, or project management certifications preferred, such as Security+, SSAP (Security Awareness Practitioner), CISSP, CISM, PMP, Certified Security Culture Professional (CSCP), or comparable certifications.

What you'll get

Feel free to take advantage of all that American Airlines has to offer:

• Travel Perks: Ready to explore the world? You, your family and your friends can reach 365 destinations on more than 6,800 daily flights across our global network.

• Health Benefits: On day one, you’ll have access to your health, dental, prescription and vision benefits to help you stay well. And that’s just the start, we also offer virtual doctor visits, flexible spending accounts and more.

• Wellness Programs: We want you to be the best version of yourself – that’s why our wellness programs provide you with all the right tools, resources and support you need.

• 401(k) Program: Available upon hire and, depending on the workgroup, employer contributions to your 401(k) program are available after one year.

• Additional Benefits: Other great benefits include our Member Assistance Program, pet insurance and discounts on hotels, cars, cruises and more

Feel free to be yourself at American

From the team members we hire to the customers we serve, inclusion and diversity are the foundation of the dynamic workforce at American Airlines. Our 20+ Team Member Resource Groups are focused on connecting our team members to our customers, suppliers, communities and shareholders, helping team members reach their full potential and creating an inclusive work environment to meet and exceed the needs of our diverse world.

Are you ready to feel a tremendous sense of pride and satisfaction as you do your part to keep the largest airline in the world running smoothly as we care for people on life’s journey? Feel free to be yourself at American.

EQUAL EMPLOYMENT OPPORTUNITY/ AFFIRMATIVE ACTION POLICY

American Airlines maintains a continuing policy of nondiscrimination in employment. It is our policy to provide equal opportunity and access for all persons, without regard to race, color, religion, sex, sexual orientation, gender identity, national origin, age, disability, or status as a disabled veteran or other protected veteran, in all phases of the employment process and in compliance with applicable federal, state, and local laws and regulations. This policy of nondiscrimination shall include, but not be limited to, the following employment decisions and practices: hiring; upgrading; promotions; demotions or transfers; layoffs; recalls; terminations; rates of pay or other forms of compensation; selection for training, including apprenticeship; and recruitment or recruitment advertising.