Senior Infra & Data Security Risk Lead

AT&T; Charlotte (NC); On-site; USD 120,000 - 160,000; Full time

Job summary

AT&T is seeking a seasoned Technology Risk Manager to oversee end-to-end risk management across infrastructure, data security, and cloud environments. You will report to the Associate Director of Cyber Risk Management and collaborate with technology, security, and business teams to strengthen the organization’s security posture.

The role emphasizes identifying risks, assessing controls, and driving remediation efforts to safeguard customer data and maintain resilience in a large enterprise.

Qualifications

• 7+ years of cybersecurity/technology risk management experience.
• 5–7 years across risk, control, and governance functions.
• Experience identifying, assessing, prioritizing, and mitigating infrastructure and data security risks.
• Knowledge of NIST, ISO 27001, CIS Controls.
• Strong communication and stakeholder management skills.

Responsibilities

• Identify, assess, and document infrastructure and data security risks across on‑premises and cloud environments.
• Evaluate control effectiveness and address threats, vulnerabilities, and gaps related to endpoint security, encryption, and data protection.
• Drive Issues Management and Remediation activities for infrastructure, endpoint security, encryption, and data protection controls.
• Partner with technology, security, business, and risk stakeholders to monitor infrastructure and data security risks.
• Lead and support risk programs to strengthen resilience and security posture.

Skills

Cybersecurity

Technology risk mgmt

Infrastructure security

Cloud security

EDR

Encryption

Key management

Governance

Audit & compliance

Stakeholder mgmt

Education

Bachelor’s degree in information systems

Bachelor’s degree in engineering

Bachelor’s degree in cybersecurity

Bachelor’s degree in computer science

Tools

NIST

ISO 27001

CIS Controls

Key management systems

Job description

AT&T is seeking a seasoned Technology Risk Manager to oversee end-to-end risk management across infrastructure, data security, and cloud environments. You will report to the Associate Director of Cyber Risk Management and collaborate with technology, security, and business teams to strengthen the organization’s security posture.

The role emphasizes identifying risks, assessing controls, and driving remediation efforts to safeguard customer data and maintain resilience in a large enterprise.