Lead Cybersecurity

AT&T•Alpharetta, GA

1d•Onsite

About The Position

This role focuses on cybersecurity, specifically within Identity and Access Management (IAM) and Privileged Access Management (PAM). The Lead Cybersecurity will be responsible for documenting control narratives, conducting pre-audits, implementing and monitoring automated processes, reviewing evidence for audits (SOX & PCI), and collaborating with various teams including IAM Delivery & OPS, CSO Compliance, SOX PMO, and external auditors like E&Y. The position requires a deep understanding of SOX Compliance, IAM tools (SailPoint, CyberArk), SOX IT General Controls, and cloud platforms (AWS, Azure, GCP). The role involves identifying gaps, assessing risks, designing mitigating solutions, and coordinating remediation efforts.

Requirements

Requires a Bachelor’s degree, or foreign equivalent degree in Information Systems, Computer Engineering, or Cyber Security.
5 Years of progressive, post-baccalaureate experience in the job offered or 5 Years of progressive, post-baccalaureate experience in a related occupation.
Understanding SOX IT General Controls including Manage Access, Manage Change and Manage Operations.
Documenting control narratives, performing control testing, identifying control deficiencies, educating app teams on risk mitigation, and coordinating remediation efforts.
Analyzing data, identifying trends and preparing reports.
Familiar with cloud platforms (AWS, Azure, GCP) and their IAM solutions.
Deep understanding of IAM tools, IT Security Audits, and Cloud Engineering.
Experience with PAM solutions & designing controls.
Experience with SailPoint and CyberArk, documenting processes flows and designing SOX controls framework.
Experience to conduct pre-audit of IAM and PAM tools to identify implementation gaps, work with stakeholders to document the risk, design training program and implement industry best practices.

Nice To Haves

Proficient in analyzing data, identifying trends and preparing reports.
Familiar with cloud platforms (AWS, Azure, GCP) and their IAM solutions.
Deep understanding of IT Security Audits, and Cloud Engineering.
Review PAM solutions & designing controls around them.

Responsibilities

Document control narratives and process flow diagrams.
Conduct pre-audit on the implementation of SailPoint and CyberArk integrated applications.
Implement Detective control over automated processes (provisioning, termination, aggregation, etc.) in SailPoint to identify potential gaps.
Develop continuous monitoring solution for tool native automated controls.
Review evidence, artifacts to support external SOX & PCI audit.
Collaborate with cross-functional IAM Delivery & OPS team, CSO Compliance, SOX PMO and interface with E&Y.
Document control narratives, perform control testing, identify control deficiencies, educate app teams on risk mitigation, and coordinate remediation efforts.
Identify gaps, assess risks, and design mitigating solution.
Review PAM solutions & designing controls around them.
Conduct pre-audit of IAM and PAM tools to identify implementation gaps, work with stakeholders to document the risk, design training program and implement industry best practices.

Benefits

Medical/Dental/Vision coverage
401(k) plan
Tuition reimbursement program
Paid Time Off and Holidays (based on date of hire, at least 23 days of vacation each year and 9 company-designated holidays)
Paid Parental Leave
Paid Caregiver Leave
Additional sick leave beyond what state and local law require may be available but is unprotected
Adoption Reimbursement
Disability Benefits (short term and long term)
Life and Accidental Death Insurance
Supplemental benefit programs: critical illness/accident hospital indemnity/group legal
Employee Assistance Programs (EAP)
Extensive employee wellness programs
Employee discounts up to 50% off on eligible AT&T mobility plans and accessories, AT&T internet (and fiber where available) and AT&T phone