Lead Technology Security - ISSO; Government

This is a full-time onsite role based in the location(s) posted and is performed from the designated work location five days per week. No relocation is offered.

The AT&T Integrity, Compliance & Risk Management Team enables the company to bring secure, resilient, and authorization-ready services to the Public Sector market. Government cybersecurity authorizations are essential to offering and sustaining AT&T solutions for Department of Education program.

This role provides the specialized technical leadership needed to translate FISMA, NIST Risk Management Framework, agency policy, and contractual obligations into scalable security practices that protect AT&T, strengthen customer confidence, and reduce business and operational risk. Serving as a trusted interface among product, engineering, operations, executive leadership, and government stakeholders, the ISSO will guide services through the full cybersecurity compliance lifecycle—from early architecture and control design through assessment, Authorization to Operate (ATO), continuous monitoring, and ongoing authorization—helping accelerate market access while sustaining defensible security and compliance outcomes.

The Lead-Technology Security title will serve as a senior cybersecurity leader driving secure, resilient, and compliant solutions for AT&T systems, services, and programs.

The ISSO role combines strategic influence with hands‑on technical expertise to translate evolving federal cybersecurity mandates into scalable security architectures, disciplined operational practices, and successful authorization outcomes. The ISSO will partner across engineering, operations, product, and government stakeholder teams to strengthen cyber‑risk decisions, accelerate secure service delivery, and sustain compliance throughout the system lifecycle.

• Advise appropriate senior leadership or Authorizing Official of changes affecting the organization's cybersecurity posture.
• Collect and maintain data needed to meet system cybersecurity reporting.
• Ensure that security improvement actions are evaluated, validated, and implemented as required.
• Ensure that cybersecurity inspections, tests, and reviews are coordinated for the network environment.
• Ensure that cybersecurity requirements are integrated into the continuity planning for that system and/or organization(s)
• Identify information technology (IT) security program implications of new technologies or technology upgrades.
• Interpret patterns of noncompliance to determine their impact on levels of risk and/or overall effectiveness of the enterprise's cybersecurity program.
• Oversee the information security training and awareness program.
• Participate in an information security risk assessment during the Security Assessment and Authorization process.
• Prepare, distribute, and maintain plans, instructions, guidance, and standard operating procedures concerning the security of network system(s) operations.
• Recognize a possible security violation and take appropriate action to report the incident, as required.
• Recommend resource allocations required to securely operate and maintain an organization's cybersecurity requirements.
• Supervise or manage protective or corrective measures when a cybersecurity incident or vulnerability is discovered.
• Track audit findings and recommendations to ensure that mitigation actions are taken.
• Oversee policy standards and implementation strategies to ensure procedures and guidelines comply with cybersecurity policies.
• Identify security requirements specific to an information technology (IT) system in all phases of the system life cycle.
• Ensure that plans of actions and milestones or remediation plans are in place for vulnerabilities identified during risk…