Senior Infrastructure & Data Security Risk Leader

AT&T; Charlotte (NC); On-site; USD 155,000 - 261,000; Full time

Benefits offered by this job

Medical/Dental/Vision coverage

401(k) plan

Tuition reimbursement

Paid Time Off and Holidays

Parental Leave

Disability Benefits

Job summary

AT&T is seeking an experienced Cyber Risk Manager to oversee end-to-end risk management for infrastructure and data security across on-premises and cloud environments. You will identify and document risks, assess control effectiveness, and drive remediation initiatives in collaboration with stakeholders.

This role emphasizes EDR, encryption, key management, and compliance with frameworks like NIST and ISO 27001.

Qualifications

• Bachelor's degree in information systems, Engineering, Cybersecurity, Computer Science, or a related field.
• 7+ years of experience in cybersecurity, technology risk management, infrastructure security, cloud security, operational risk management, or a related discipline within a large enterprise environment.
• Significant (5-7 years) experience across multiple risk, control, and governance functions, including Information Security, Technology Risk, Audit, Regulatory Compliance, or Cybersecurity Operations.
• Proven experience identifying, assessing, prioritizing, and mitigating Infrastructure and Data Security risks, including risks associated with endpoint security, EDR technologies, encryption, cryptographic key management, cloud services, operating systems, servers, networks, and data protection capabilities.
• Strong understanding of cybersecurity threats affecting enterprise infrastructure and data security, including malware, ransomware, unauthorized access, data loss, cloud security risks, endpoint compromise, and encryption-related risks, with demonstrated experience implementing effective risk mitigation strategies.
• Strong experience with cybersecurity risk management and security control frameworks, with extensive knowledge of infrastructure security, cloud security, endpoint protection, EDR, encryption technologies, key management systems, vulnerability management, logging and monitoring, and industry standards and frameworks (e.g., NIST, ISO 27001, CIS Controls).
• Knowledge of compliance, legal, regulatory, internal audit, and external audit requirements related to infrastructure security, data protection, encryption, and cybersecurity risk management.
• Strong client relationship management, communication, and influencing skills, with the ability to build trusted partnerships and effectively communicate technical and risk concepts to stakeholders at all organizational levels.
• Familiarity with applying Artificial Intelligence (AI)or Machine Learning (ML)techniques in cybersecurity contexts (e.g., anomaly detection, threat hunting, behavioral analytics, or risk scoring).

Responsibilities

• Identify, assess, and document Infrastructure and Data Security risks across on-premises and cloud environments, evaluate control effectiveness, and proactively address emerging threats, vulnerabilities, and security control gaps related to endpoint security, encryption, and data protection.
• Continuously evaluate emerging cybersecurity threats impacting infrastructure, endpoints, cloud platforms, and data security technologies, including Endpoint Detection and Response (EDR), encryption, and key management capabilities, recommending mitigations and enhancements to strengthen the security posture.
• Drive Issues Management and Remediation activities related to infrastructure, endpoint security, encryption, and data protection control deficiencies in alignment with the Technology Risk Management program and established risk governance processes.
• Partner with technology, security, business, and risk stakeholders to identify, assess, respond to, and monitor infrastructure and data security risks, helping ensure the confidentiality, integrity, availability, and resilience of AT&T systems and customer data.
• Lead and support Technology Risk efforts to assess control effectiveness, monitor risk, validate remediation activities, collect audit evidence, and provide ongoing oversight of infrastructure, endpoint security, encryption, and cloud security controls to strengthen organizational resilience and security posture.

Skills

Infrastructure security

Data security

Cloud security

Endpoint protection

EDR

Encryption

Key management

Risk management

NIST/ISO 27001/CIS Controls

Audit & governance

Communication skills

AI/ML in cybersecurity

Education

Bachelor's degree in information systems

Job description

AT&T is seeking an experienced Cyber Risk Manager to oversee end-to-end risk management for infrastructure and data security across on-premises and cloud environments. You will identify and document risks, assess control effectiveness, and drive remediation initiatives in collaboration with stakeholders.

This role emphasizes EDR, encryption, key management, and compliance with frameworks like NIST and ISO 27001.