Sr Specialist Cybersecurity - Control Testing (Technology Risk Management)

ATT; Hyderabad; On-site; INR 3,000,000 - 4,500,000; Full time

Job summary

AT&T is seeking a Senior Specialist Control Testing to join the Controls Assurance team under the CSO. The role focuses on testing IT general controls, cloud security controls, and critical application controls, ensuring design and operating effectiveness across telecom platforms and processes.

The ideal candidate has extensive experience in technology risk management and assurance, with a background in SOX, ITGC/ITAC, and transformation initiatives, and will mentor junior staff while

Qualifications

• 8+ years in technology risk management, assurance, or IT controls.
• 5+ years focused on control design, testing, or technology assurance.
• Experience with ITGCs, ITACs, cloud security controls, and application controls.
• Familiarity with SOX control testing and audit readiness.
• Strong regulatory and compliance understanding.

Responsibilities

• Support annual test planning, risk-based prioritization, and scope definition.
• Execute complex engagements from testing plan with script prep and evidence review.
• Test ITGCs, ITACs, automated and cloud security controls across platforms.
• Evaluate control design and operating effectiveness across technology platforms and processes.
• Collaborate with auditors and stakeholders to drive remediation and audit readiness.
• Mentor junior team members and support testing methodologies.

Skills

Technology Risk Management

Control Testing

SOX

ITGC/ITAC

Auditing / Internal Audit

Regulatory Compliance

Cloud Security Controls

Job description

Role

Senior Specialist Control Testing

About The Job

The CA (Controls Assurance) team is part of the Chief Security Office (CSO) and is responsible for testing information technology and information security controls owned and operated by AT&T Technology Services (ATS), including CSO.

This Senior Specialist will work closely with control owners, control operators, technology teams, business process owners, transformation stakeholders, and technology leadership to identify gaps in control design and operating effectiveness across AT&T's control environment.

The professional in this role will independently test IT General Controls, Cloud security controls, critical application security controls, business process controls, IT-dependent manual controls, automated controls, and other technology or security controls.

The ideal candidate will bring a strong combination of telecom industry experience, control design expertise, assurance and testing experience, and process / technology transformation exposure. Big 4 Manager or equivalent who has led or executed complex control testing, technology risk, SOX, ITGC / ITAC, business process controls, or technology transformation assurance engagements.

Experience Level

8 years of experience.

Location

Hyderabad / Bengaluru

Responsibilities Include

• Work with CTR leadership to understand control testing priorities and support annual test planning, risk-based prioritization, scope definition, and control testing execution.
• Independently execute complex engagements from the annual testing plan or discrete risk-based reviews, including test script preparation, walkthroughs, evidence review, issue identification, stakeholder alignment, documentation, and reporting to senior ATS stakeholders.
• Test IT General Controls, IT Application Controls, automated controls, IT-dependent manual controls, cloud security controls, critical application security controls, and business process controls.
• Evaluate control design and operating effectiveness across technology platforms, telecom systems, applications, infrastructure, data flows, and business processes.
• Partner with external auditors, internal stakeholders, technology teams, control owners, and business process owners to drive efficient testing, evidence collection, issue resolution, and audit readiness.
• Provide analysis of complex technology and security control issues and clearly articulate risk to AT&T assets, including devices, networks, applications, data, customers, and business objectives.
• Support reporting of test results, open issues, risk themes, control gaps, and remediation progress to leadership and relevant stakeholders.
• Bring a process transformation mindset by identifying opportunities to improve control design, reduce control complexity, increase automation, and strengthen preventive and detective controls.
• Support control design and assurance activities for technology and business transformation initiatives, including new platforms, cloud adoption, application modernization, telecom process changes, and digital transformation programs.
• Contribute to the development and enhancement of Control Testing Methodology, Technology Risk Management Framework components, testing procedures, and related tooling.
• Mentor and support junior team members by providing guidance on testing methodology, documentation standards, risk articulation, stakeholder management, and issue evaluation.
• Support emerging assurance scenarios involving AI usage, agentic workflows, continuous controls monitoring, automated evidence collection, and analytics-driven control testing.

Required Skills

• Minimum 8 years of experience in Technology Risk Management, Consulting, Assurance, Internal Audit, Cybersecurity Risk, SOX, or IT controls, with at least 5 years focused on control design, control testing, or technology assurance.
• Strong experience in testing or reviewing ITGCs, ITACs, business process controls, automated controls, IT-dependent manual controls, critical application controls, cloud security controls, and information security controls.
• Prior experience in SOX control testing, technology risk assessments, audit readiness, control design evaluation, and operating effectiveness testing.
• Strong understanding of regulatory and compliance requirements.
• Experience working with technology platforms, enterprise applications, cloud environments, infrastructure, data flows, interfaces, and bus .