Principal Cybersecurity – Metrics, Data Engineering & Risk Insights

AT&T•Charlotte, NC

2d•Onsite

About The Position

This position requires office presence of a minimum of 5 days per week and is only located in the location(s) posted. No relocation is offered. Join AT&T and reimagine the communications and technologies that connect the world. Our Chief Security Office ensures that our assets are safeguarded through truthful transparency, enforce accountability and master cybersecurity to stay ahead of threats. Bring your bold ideas and fearless risk-taking to redefine connectivity and transform how the world shares stories and experiences that matter. When you step into a career with AT&T, you won’t just imagine the future-you’ll create it. Position will be responsible for defining, operationalizing, and continuously improving enterprise cybersecurity metrics and Key Control Indicators (KCIs) that measure security control coverage and effectiveness across the organization. This role designs, develops and operates a scalable, centralized cybersecurity metrics capability, including data pipelines, dashboards, and analytics, and translates complex security telemetry into clear, decision‑ready insights that enable leaders and control owners to strengthen security posture and improve operational efficiency. This is a senior individual‑contributor role requiring deep technical expertise, strong security domain knowledge, and the ability to influence outcomes across cybersecurity, risk, and executive stakeholders.

Requirements

Degree in Computer Science, Information Technology or related field
7+ years' experience in technology, financial services or other regulated industries
5 years' experience in development of IT risk frameworks and enterprise IT issue management
Strong expertise in SQL, ETL tools, and BI visualization (Tableau, Power BI)
Security metrics and measurement expertise to design actionable security metrics with a focus on control effectiveness and risk reduction, deep understanding of KCI's
Security knowledge and understanding of security operations, controls and risk
Data engineering and modeling experience in designing data models for complex data sets with a strong competency in normalizing and aggregating data to shape the model
Programming proficiency in scripting languages such as Python or PowerShell
Business communications and experience translating KCI's into risk posture narratives with decision-ready summaries

Responsibilities

Own enterprise cybersecurity metrics & KCIs - Define, implement, and evolve Key Control Indicators (KCIs) focused on control coverage, efficacy, and risk reduction - Ensure metrics are actionable, standardized, and aligned to enterprise risk priorities
Lead requirements & stakeholder engagement - Partner with control owners, cybersecurity operations, and risk teams to gather requirements and translate business questions into measurable indicators - Establish clear metric definitions, assumptions, and narratives to support consistent interpretation
Design and operate the metrics platform - Design and maintain interactive security dashboards and scorecards using Power BI and/or Tableau. Build, test, and maintain ETL/data pipelines to ingest security data from disparate sources into a centralized repository, while ensuring data quality, reliability, scalability, and performance across the metrics ecosystem
Data engineering & analytics excellence - Develop and optimize complex SQL queries to design and maintain data models for complex datasets, including normalization and aggregation strategies. Manage database performance to support operational and executive reporting needs
Translate data into risk insights - Convert security metrics into risk posture narratives and decision‑ready summaries to enable stakeholders to quickly identify gaps, prioritize remediation, and track improvements over time

Benefits

Medical/Dental/Vision coverage
401(k) plan
Tuition reimbursement program
Paid Time Off and Holidays (based on date of hire, at least 23 days of vacation each year and 9 company-designated holidays)
Paid Parental Leave
Paid Caregiver Leave
Additional sick leave beyond what state and local law require may be available but is unprotected
Adoption Reimbursement
Disability Benefits (short term and long term)
Life and Accidental Death Insurance
Supplemental benefit programs: critical illness/accident hospital indemnity/group legal
Employee Assistance Programs (EAP)
Extensive employee wellness programs
Employee discounts up to 50% off on eligible AT&T mobility plans and accessories, AT&T internet (and fiber where available) and AT&T phone.