Senior Director Cybersecurity Compliance & Technical Risk

Cricket Wireless LLC.; Charlotte (NC); On-site; USD 171,000 - 256,000; Full time

Benefits offered by this job

Medical/Dental/Vision coverage

401(k) plan

Tuition reimbursement

Paid Time Off

Job summary

AT&T is seeking an Associate Director to lead Cybersecurity Compliance & Technical Risk from the CSO, based onsite in the Charlotte area. The role drives enterprise compliance programs, audits, and governance, coordinating with control owners, auditors, and regulators.

The candidate will shape long‑term risk management strategies, advance AI governance, and optimize evidence management across platforms such as ServiceNow GRC, with a focus on regulatory alignment and executive reporting.

Qualifications

• Master’s degree in Cybersecurity, Information Systems, Engineering or related fields.
• 5–8 years of experience in cybersecurity, technical risk management, IT compliance, audit management, or related disciplines.
• Experience leading teams and managing complex cross‑functional compliance or risk programs.
• Strong understanding of IT control frameworks, regulatory compliance requirements, audit methodologies, and risk management principles.
• Experience managing external auditor relationships, consulting engagements, contracts, budgets, and project timelines.
• Demonstrated ability to influence stakeholders and drive organizational change in complex environments.
• Excellent communication, leadership, and executive presentation skills.
• Experience applying AI and automation technologies within cybersecurity, compliance, audit, or risk management functions.
• Experience with SOX, PCI, HIPAA, ISO, SOC, or similar compliance frameworks.
• Experience with Governance, Risk, and Compliance (GRC) platforms, including ServiceNow GRC.
• Professional certifications such as CISSP, CISA, CRISC, CGEIT, or related credentials.
• Strong program management and organizational transformation experience.

Responsibilities

• Lead enterprise compliance programs supporting SOX, PCI, HIPAA, ISO, SOC, and other regulatory requirements.
• Serve as the primary liaison between control owners, business stakeholders, external auditors, and regulatory organizations.
• Oversee audit planning, evidence collection, control testing, remediation management, and audit execution activities.
• Provide executive-level reporting on audit progress, compliance risks, remediation activities, and program performance.
• Direct issue management and escalation processes to ensure timely resolution of compliance and control concerns.
• Lead governance initiatives that enhance control owner accountability and strengthen enterprise risk management practices.
• Establish and maintain compliance tools, automation capabilities, and evidence management platforms to improve operational effectiveness.
• Champion the migration and adoption of ServiceNow GRC and other common technology platforms that advance standardization and risk reduction.
• Develop and execute a long-term roadmap aligned with enterprise Technical Risk Management objectives.
• Drive the strategic adoption of AI and automation across the compliance program to enhance evidence management, audit readiness, workflow efficiency, and overall compliance effectiveness.
• Provide leadership on AI governance, controls, and compliance requirements while promoting innovative solutions that improve user experience, strengthen risk management, and reduce operational cycle times.

Skills

Cybersecurity leadership

Regulatory compliance

Audit management

GRC expertise

AI governance

Education

Master's degree in Cybersecurity or related field

Tools

ServiceNow GRC

Job description

AT&T is seeking an Associate Director to lead Cybersecurity Compliance & Technical Risk from the CSO, based onsite in the Charlotte area. The role drives enterprise compliance programs, audits, and governance, coordinating with control owners, auditors, and regulators.

The candidate will shape long‑term risk management strategies, advance AI governance, and optimize evidence management across platforms such as ServiceNow GRC, with a focus on regulatory alignment and executive reporting.