Sr Specialist Cybersecurity - Control Testing - IT General Controls (ITGC), Cloud Security Controls, Application Security Controls, Information Security Controls, SOX Control Testing

Cricket Wireless LLC.; Hyderabad; On-site; INR 1,800,000 - 2,800,000; Full time

Job summary

AT&T Hyderabad is seeking a Sr Specialist Cybersecurity - Control Testing to join the Controls Assurance team, testing IT general controls, cloud security controls, and other technology or security controls across ATS. The role collaborates with control owners, technology teams, and external auditors to identify gaps and ensure audit readiness.

You will lead complex engagements, develop test scripts, review evidence, and report findings to senior stakeholders.

Qualifications

• 8+ years in Technology Risk Management, Consulting, Assurance, or IT controls.
• Strong experience testing ITGCs, ITACs, automated and cloud controls.
• SOX control testing, audit readiness, and risk assessment experience.
• Understanding of regulatory/compliance requirements.
• Experience with telecom platforms, data flows, and enterprise apps.
• Strong documentation and risk articulation skills.
• Ability to engage with control owners and leadership.
• Analytical mindset linking control gaps to business risks.

Responsibilities

• Plan and execute control testing per annual plan and risk priorities.
• Prepare test scripts, review evidence, identify issues, and report.
• Test ITGCs, ITACs, automated, manual, cloud, and business process controls.
• Evaluate design and operating effectiveness across platforms and processes.
• Coordinate with external auditors and stakeholders for audit readiness.
• Articulate risks clearly to leadership with remediation progress.
• Identify opportunities to improve control design and automation.
• Support technology/transformation initiatives with testing.
• Contribute to testing methodology and tooling development.
• Mentor junior team members in methodology and standards.
• Explore AI-enabled assurance and continuous controls monitoring.

Skills

Technology Risk Management

SOX / ITGC / ITAC

Control Testing

Regulatory Compliance

Cloud security controls

Documentation & Reporting

Stakeholder Management

Audit Readiness

Education

Bachelor’s degree in CS, Math, IS, Eng, Cybersecurity, Accounting, Finance

Tools

GRC tools

Testing automation platforms

Data analytics tools

Job description

Sr Specialist Cybersecurity - Control Testing - ITGC / SOX Control Testing

About the Job The CA (Controls Assurance) team is part of the Chief Security Office (CSO) and is responsible for testing information technology and information security controls owned and operated by AT&T Technology Services (ATS), including CSO. This Senior Specialist will work closely with control owners, control operators, technology teams, business process owners, transformation stakeholders, and technology leadership to identify gaps in control design and operating effectiveness across AT&T’s control environment. The professional in this role will independently test IT General Controls, Cloud security controls, critical application security controls, business process controls, IT-dependent manual controls, automated controls, and other technology or security controls. The ideal candidate will bring a strong combination of telecom industry experience, control design expertise, assurance and testing experience, and process / technology transformation exposure. Big 4 Manager or equivalent who has led or executed complex control testing, technology risk, SOX, ITGC / ITAC, business process controls, or technology transformation assurance engagements. Experience Level 8+ years of experience. Location Hyderabad / Bengaluru

Responsibilities Include

• Work with CTR leadership to understand control testing priorities and support annual test planning, risk-based prioritization, scope definition, and control testing execution.
• Independently execute complex engagements from the annual testing plan or discrete risk-based reviews, including test script preparation, walkthroughs, evidence review, issue identification, stakeholder alignment, documentation, and reporting to senior ATS stakeholders.
• Test IT General Controls, IT Application Controls, automated controls, IT-dependent manual controls, cloud security controls, critical application security controls, and business process controls.
• Evaluate control design and operating effectiveness across technology platforms, telecom systems, applications, infrastructure, data flows, and business processes.
• Partner with external auditors, internal stakeholders, technology teams, control owners, and business process owners to drive efficient testing, evidence collection, issue resolution, and audit readiness.
• Provide analysis of complex technology and security control issues and clearly articulate risk to AT&T assets, including devices, networks, applications, data, customers, and business objectives.
• Support reporting of test results, open issues, risk themes, control gaps, and remediation progress to leadership and relevant stakeholders.
• Bring a process transformation mindset by identifying opportunities to improve control design, reduce control complexity, increase automation, and strengthen preventive and detective controls.
• Support control design and assurance activities for technology and business transformation initiatives, including new platforms, cloud adoption, application modernization, telecom process changes, and digital transformation programs.
• Contribute to the development and enhancement of Control Testing Methodology, Technology Risk Management Framework components, testing procedures, and related tooling.
• Mentor and support junior team members by providing guidance on testing methodology, documentation standards, risk articulation, stakeholder management, and issue evaluation.
• Support emerging assurance scenarios involving AI usage, agentic workflows, continuous controls monitoring, automated evidence collection, and analytics-driven control testing.

Required Skills

• Minimum 8 years of experience in Technology Risk Management, Consulting, Assurance, Internal Audit, Cybersecurity Risk, SOX, or IT controls, with at least 5 years focused on control design, control testing, or technology assurance.
• Strong experience in testing or reviewing ITGCs, ITACs, business process controls, automated controls, IT-dependent manual controls, critical application controls, cloud security controls, and information security controls.
• Prior experience in SOX control testing, technology risk assessments, audit readiness, control design evaluation, and operating effectiveness testing.
• Strong understanding of regulatory and compliance requirements.
• Experience working with technology platforms, enterprise applications, cloud environments, infrastructure, data flows, interfaces, and business process control dependencies.
• Strong documentation, workpaper preparation, issue writing, and risk articulation skills.
• Ability to engage confidently with control owners, technology leaders, business process owners, external auditors, and internal risk stakeholders.
• Strong analytical mindset with the ability to connect technology control gaps to business, operational, financial reporting, security, and compliance risks.

Preferred / Desirable Skills

• Prior experience in the telecom industry or in large-scale technology-driven organizations.
• Big 4 Manager or equivalent consulting / assurance experience in technology risk, SOX, cyber risk, IT audit, process controls, or transformation assurance.
• Experience supporting technology transformation, process transformation, cloud migration, application modernization, ERP / billing / telecom platform transformation, or digital transformation programs.
• Project governance and reporting experience, including status reporting, steering committee updates, issue tracking, dependency management, and leadership communication, would be an added advantage.
• Exposure to AI-enabled assurance, agentic AI use cases, control automation, continuous controls monitoring, automated testing, or analytics-based risk monitoring.
• Understanding how AI, machine learning, workflow automation, and agentic solutions may impact control design, evidence generation, testing procedures, access governance, data integrity, and model / process oversight.
• Experience with GRC tools, workflow platforms, data analytics tools, testing automation platforms, or control monitoring solutions.

Bachelor’s degree in computer science, Mathematics, Information Systems, Engineering, Cybersecurity, Accounting, Finance, or related disciplines.

ISACA, ISC2, or other relevant certifications such as CISA, CRISC, CISSP, CISM, CPA, or equivalent.

Weekly Hours: 40 Time Type: Regular Location: IND:AP:Hyderabad / Argus Bldg 4f & 5f, Sattva, Knowledge City- Adm: Argus Building, Sattva, Knowledge City AT&T and its subsidiaries are committed to equal employment opportunity. All hiring, promotion, and other employment decisions remain merit-based and free from discrimination on the basis of race, color, religion, religious creed, national origin, ancestry, age, sex, sexual orientation, gender, gender identity, gender expression, physical disability, mental disability, pregnancy, medical condition, genetic information, marital status, citizenship status, military status, veteran status or any other characteristic protected by federal, state, or local laws. In addition, AT&T will provide reasonable accommodations to qualified individuals with disabilities. AT&T is a fair chance employer and does not initiate a background check until an offer is made. We are pioneers of making connections and have been ever since Alexander Graham Bell invented the telephone and founded our company. That was nearly 150 years ago, and we haven’t stopped innovating since. At our core, we help bring families, communities, and businesses together with the products and services they need to thrive every day. From the widespread and growing availability of 5G and Fiber to working on things we once only dreamed of—at AT&T, we create connections that change the world.