IAM & Insider Threat Risk Principal

The position requires daily office presence at the listed locations. No relocation assistance is provided.

About the role

Join AT&T and reimagine the communications and technologies that connect the world. The Chief Security Office ensures asset protection through truth, transparency, accountability, and advanced cybersecurity measures. Your role will focus on Technology Risk Management within Identity and Access Management (IAM) and Insider Threat domains, collaborating with various teams to manage risks and implement controls.

Responsibilities

• Identify, assess, and document IAM and Insider Threat risks, evaluate control effectiveness, and proactively address emerging threats and vulnerabilities.
• Evaluate emerging security threats impacting IAM and Insider Threat programs, recommending mitigations and enhancements to existing security controls.
• Drive issues management and remediation efforts aligned with the Technology Risk Management program.
• Partner with and advise key stakeholders across technology, business, and risk partners to identify, assess, respond, and monitor key risks to ensure AT&T and customers' safety and resilience.
• Support Tech Risk teams responsible for risk monitoring, periodic controls testing, evidence collection, remediation, and audit readiness efforts.

Requirements

• PREFERRED: Bachelor's Degree in Information Systems, Engineering, Cyber Security, or a related field.
• 7+ years of work experience in technology, operational risk management, or a related discipline at a global company.
• Significant (5-7 years) experience in multiple industry risk, control, and governance disciplines (e.g., Audit, Information Security, Regulatory Compliance).
• Proven experience in IAM and Insider Threat programs, including identifying, assessing, prioritizing, and mitigating identity-related risks and control weaknesses in complex enterprise environments.
• Strong understanding of AI-specific threats impacting IAM and Insider Threat programs, with demonstrated experience assessing risks and implementing effective mitigation strategies within complex enterprise environments.
• Strong experience in Information security risk and cybersecurity control capabilities, including knowledge of information and technology risk management policies, methods, standards, tools, and processes (e.g., ISO, NIST) as well as knowledge of compliance, legal, internal/external audit, and regulatory requirements.
• Experience identifying, tracking, monitoring, and remediating critical non-compliance issues throughout the issue management lifecycle.
• Strong client relationship management experience, communication, and influencing skills. Strong interpersonal and oral/written communication skills, able to build relationships with people at all levels.

Qualifications

• Preferred: Bachelor's Degree in Information Systems, Engineering, Cyber Security, or a related field.
• 7+ years of work experience in technology, operational risk management, or a related discipline at a global company.
• Significant (5-7 years) experience in multiple industry risk, control, and governance disciplines (e.g., Audit, Information Security, Regulatory Compliance).
• Proven experience in IAM and Insider Threat programs, including identifying, assessing, prioritizing, and mitigating identity-related risks and control weaknesses in complex enterprise environments.
• Strong understanding of AI-specific threats impacting IAM and Insider Threat programs, with demonstrated experience assessing risks and implementing effective mitigation strategies within complex enterprise environments.
• Strong experience in Information security risk and cybersecurity control capabilities, including knowledge of information and technology risk management policies, methods, standards, tools, and processes (e.g., ISO, NIST) as well as knowledge of compliance, legal, internal/external audit, and regulatory requirements.
• Experience identifying, tracking, monitoring, and remediating critical non-compliance issues throughout the issue management lifecycle.
• Strong client relationship management experience, communication, and influencing skills. Strong interpersonal and oral/written communication skills, able to build relationships with people at all levels.

Skills

• Preferred Bachelor's Degree in Information Systems, Engineering, Cyber Security, or a related field.
• 7+ years of work experience in technology, operational risk management, or a related discipline at a global company.
• Significant (5-7 years) experience in multiple industry risk, control, and governance disciplines (e.g., Audit, Information Security, Regulatory Compliance).
• Proven experience in IAM and Insider Threat programs, including identifying, assessing, prioritizing, and mitigating identity-related risks and control weaknesses in complex enterprise environments.
• Strong understanding of AI-specific threats impacting IAM and Insider Threat programs, with demonstrated experience assessing risks and implementing effective mitigation strategies within complex enterprise environments.
• Strong experience in Information security risk and cybersecurity control capabilities, including knowledge of information and technology risk management policies, methods, standards, tools, and processes (e.g., ISO, NIST) as well as knowledge of compliance, legal, internal/external audit, and regulatory requirements.
• Experience identifying, tracking, monitoring, and remediating critical non-compliance issues throughout the issue management lifecycle.
• Strong client relationship management experience, communication, and influencing skills. Strong interpersonal and oral/written communication skills, able to build relationships with people at all levels.

Benefits

• Medical/Dental/Vision coverage
• 401(k) plan
• Tuition reimbursement program
• Paid Time Off and Holidays (based on date of hire, at least 23 days of vacation each year and 9 company-designated holidays)
• Paid Parental Leave
• Paid Caregiver Leave
• Additional sick leave beyond what state and local law require may be available but is unprotected
• Adoption Reimbursement
• Disability Benefits (short term and long term)
• Life and Accidental Death Insurance
• Supplemental benefit programs: critical illness/accident hospital indemnity/group legal
• Employee Assistance Programs (EAP)
• Extensive employee wellness programs
• Employee discounts up to 50% off on eligible AT&T mobility plans and accessories, AT&T internet (and fiber where available) and AT&T phone
• Weekly Hours: 40
• Time Type: Regular
• Location: Alpharetta, Georgia, Atlanta, Georgia, Bedminster, New Jersey, Dallas, Texas, Middletown, New Jersey, USA:NC:Charlotte / Ibm Dr - Adm:8505 Ibm Dr
• Salary Range: $155,400.00 - $261,100.00

Pay

Individual starting salary within this range may depend on geography, experience, expertise, and education/training.

Schedule

Regular