IAM & Insider Threat Risk Principal

• Identify, assess, and document IAM and Insider Threat risks, evaluate control effectiveness, and proactively address emerging threats and vulnerabilities.
• Continuously evaluate emerging security threats impacting Identity and Access Management (IAM) and Insider Threat programs, proactively recommending mitigations and enhancements to existing security controls.
• Drive efforts around Issues Management and Remediation in line with the Technology Risk Management program.
• Partner with and advise key stakeholders across technology, business, and risk partners to identify, assess, respond, and monitor key risks to keep AT&T and our customers safe and resilient.
• Support Tech Risk teams responsible for risk monitoring, periodic controls testing, evidence collection, remediation, and audit readiness efforts.

• Preferred Bachelor's Degree in Information Systems, Engineering, Cyber Security, or a related field.
• 7+ years of work experience in technology, operational risk management, or a related discipline at a global company.
• Significant (5-7 years) experience in multiple industry risk, control, and governance disciplines (e.g., Audit, Information Security, Regulatory Compliance).
• Proven experience in IAM and Insider Threat programs, including identifying, assessing, prioritizing, and mitigating identity-related risks and control weaknesses in complex enterprise environments.
• Strong understanding of AI-specific threats impacting Identity and Access Management (IAM) and Insider Threat programs, with demonstrated experience assessing risks and implementing effective mitigation strategies within complex enterprise environments.
• Strong experience in Information security risk and cybersecurity control capabilities with extensive knowledge of information and technology risk management policies, methods, standards, tools, and processes (e.g., ISO, NIST) as well as knowledge of compliance, legal, internal/external audit, and regulatory requirements.
• Experience identifying, tracking, monitoring, and remediating critical non-compliance issues throughout the issue management lifecycle.
• Strong client relationship management experience, communication, and influencing skills.
• Strong interpersonal and oral/written communication skills, able to build relationships with people at all levels.

Demonstrates expertise in Identity and Access Management (IAM) and Insider Threat risk assessment, with a strong focus on implementing effective mitigation strategies and compliance with regulatory requirements. Proven ability to manage client relationships and communicate effectively across various organizational levels.

• Identity And Access Management (IAM)
• Insider Threat Programs
• Information Security Risk Management
• Regulatory Compliance
• Risk Assessment

• Risk Management
• Control Effectiveness Evaluation
• Threat Assessment
• Mitigation Strategies
• Audit Readiness
• Compliance Standards (ISO, NIST)
• Operational Risk Management
• Governance Disciplines
• Issue Management Lifecycle
• Cybersecurity Control Capabilities

• Client Relationship Management
• Communication Skills
• Influencing Skills
• Interpersonal Skills
• Oral/Written Communication

• Bachelor's Degree in Information Systems
• Bachelor's Degree in Engineering
• Bachelor's Degree in Cyber Security

• Technology Risk Management
• Emerging Security Threats
• Control Weaknesses
• Non-Compliance Issues
• Stakeholder Engagement