IAM & Insider Threat Risk Principal
About The Position
This position requires Daily Office Presence at the listed location(s). No relocation assistance is provided. Join AT&T and reimagine the communications and technologies that connect the world. Our Chief Security Office ensures that our assets are safeguarded through truthful transparency, enforce accountability and master cybersecurity to stay ahead of threats. Bring your bold ideas and fearless risk-taking to redefine connectivity and transform how the world shares stories and experiences that matter. When you step into a career with AT&T, you won’t just imagine the future-you’ll create it. Reporting to the Associate Director of Cyber Risk Management, you will be responsible for overseeing the end-to-end Technology Risk Management Lifecycle within the Identity and Access Management and Insider Threat domains, this pivotal role collaborates closely with the respective teams, with a particular emphasis on IAM and Insider Threat. The individual in this position is tasked with identifying and assessing risks in these areas, working with stakeholders to develop and implement effective controls, and ensuring the thorough execution of the issues management lifecycle. You will oversee projects related to risk remediation and control implementation and engage with stakeholders to ensure alignment and effective communication regarding risk management efforts. Additionally, this role provides strategic risk management guidance aimed at strengthening the organization’s overall security posture.
Requirements
- Preferred Bachelor's Degree in Information Systems, Engineering, Cyber Security, or a related field.
- 7+ years of work experience in technology, operational risk management, or a related discipline at a global company.
- Significant (5-7 years) experience in multiple industry risk, control, and governance disciplines (e.g., Audit, Information Security, Regulatory Compliance).
- Proven experience in IAM and Insider Threat programs, including identifying, assessing, prioritizing, and mitigating identity-related risks and control weaknesses in complex enterprise environments.
- Strong understanding of AI-specific threats impacting Identity and Access Management (IAM) and Insider Threat programs, with demonstrated experience assessing risks and implementing effective mitigation strategies within complex enterprise environments.
- Strong experience in Information security risk and cybersecurity control capabilities with extensive knowledge of information and technology risk management policies, methods, standards, tools, and processes (e.g., ISO, NIST) as well as knowledge of compliance, legal, internal/external audit, and regulatory requirements.
- Experience identifying, tracking, monitoring, and remediating critical non-compliance issues throughout the issue management lifecycle.
- Strong client relationship management experience, communication, and influencing skills.
- Strong interpersonal and oral/written communication skills, able to build relationships with people at all levels.
- AT&T will not hire any applicants for this position who require employer sponsorship now or in the future.
Responsibilities
- Identify, assess, and document IAM and Insider Threat risks, evaluate control effectiveness, and proactively address emerging threats and vulnerabilities.
- Continuously evaluate emerging security threats impacting Identity and Access Management (IAM) and Insider Threat programs, proactively recommending mitigations and enhancements to existing security controls.
- Drive efforts around Issues Management and Remediation in line with the Technology Risk Management program.
- Partner with and advise key stakeholders across technology, business, and risk partners to identify, assess, respond, and monitor key risks to keep AT&T and our customers safe and resilient.
- Support Tech Risk teams responsible for risk monitoring, periodic controls testing, evidence collection, remediation, and audit readiness efforts.
Benefits
- Medical/Dental/Vision coverage
- 401(k) plan
- Tuition reimbursement program
- Paid Time Off and Holidays (based on date of hire, at least 23 days of vacation each year and 9 company-designated holidays)
- Paid Parental Leave
- Paid Caregiver Leave
- Additional sick leave beyond what state and local law require may be available but is unprotected
- Adoption Reimbursement
- Disability Benefits (short term and long term)
- Life and Accidental Death Insurance
- Supplemental benefit programs: critical illness/accident hospital indemnity/group legal
- Employee Assistance Programs (EAP)
- Extensive employee wellness programs
- Employee discounts up to 50% off on eligible AT&T mobility plans and accessories, AT&T internet (and fiber where available) and AT&T phone
Stand Out From the Crowd
Upload your resume and get instant feedback on how well it matches this job.
What This Job Offers
Job Type
Full-time
Career Level
Principal
