Tech Risk & Third-Party Governance Leader

Jobtailor; North Carolina; On-site; USD 150,000 - 190,000; Full time

Job summary

AT&T seeks a senior professional to lead its Technology Third Party Risk Management program, shaping processes to identify, assess, mitigate, monitor, and report technology risks posed by external partners.

You will collaborate with Supply Chain, Enterprise Risk Management, Compliance, Technology, and Legal to advance risk capabilities, develop executive assessments, and communicate regulatory developments and industry best practices.

Qualifications

• Experience in risk management across governance, controls, and regulatory domains.
• Strong ability to influence culture and drive change across diverse stakeholder groups.
• Proven track record leading cross-functional risk initiatives and programs.
• Experience designing and sustaining risk programs covering: risk identification, assessment, monitoring, and remediation.
• Ability to communicate complex risk topics to executives with clarity and impact.
• Experience with third-party risk management and supply chain risk concepts.

Responsibilities

• Drive evolution of AT&T's Third Party Risk Management program (identify, assess, mitigate, monitor, report).
• Advise on design and enhancement of TPRM capabilities: policies, inventory, due diligence, onboarding, monitoring, termination.
• Evaluate program maturity and lead improvements across governance, processes, controls, data management.
• Partner with Supply Chain, Enterprise Risk Management, Compliance, Technology, Legal to advance program objectives.
• Develop executive risk assessments and escalation materials for critical vendors and emerging risks.
• Advise business units on regulatory developments and industry best practices.

Skills

Executive communication

Stakeholder engagement

Presentation skills

Change management

Risk management

Tools

ISO Standards

COSO Framework

COBIT Framework

NIST Standards

Job description

AT&T seeks a senior professional to lead its Technology Third Party Risk Management program, shaping processes to identify, assess, mitigate, monitor, and report technology risks posed by external partners.

You will collaborate with Supply Chain, Enterprise Risk Management, Compliance, Technology, and Legal to advance risk capabilities, develop executive assessments, and communicate regulatory developments and industry best practices.