Tech Risk Third Party Risk Management

This position requires office presence of a minimum of 5 days per week and is only located in the location(s) posted. No relocation is offered.

AT&T will not hire any applicants for this position who require employer sponsorship now or in the future.

Job Summary

As AT&T Technology Risk Principal Technology Third Party Risk Management (TPRM) you will be responsible for driving risk management efforts to ensure strong discipline and control for AT&Ts engagements with technology third parties and providing advisory for the companys enterprise-wide TPRM program. Increasing levels of risk and regulatory requirements demand additional risk management rigor and we must implement highly resilient secure and effective solutions that meet and in some cases exceed performance standards found in other information rich industries. You will provide leadership and support for Technology Risk initiatives across the business and strengthen third party risk management through development and maturing of governance and controls. You will utilize risk-based management to integrate information and technology risk processes into the way AT&T and its extended third party ecosystem operates.

Key Roles and Responsibilities

Reporting to AT&Ts AVP of Technology Risk Cyber & Third-Party Risk Management you will be responsible for orchestrating a diverse set of stakeholders to identify assess mitigate and monitor third party risks and drive improved governance and control across the program. You will keenly focus on inherent and residual risk of technology third parties that support mission critical systems access and control sensitive data and provide hardware and software products that support AT&T operations. You will evaluate the maturity of third party risk management practices and drive program enhancements to design key elements like third party inventory risk tiering due diligence and monitoring. You will ensure that regulatory / risk policies and standards and their impact on business operations are understood and addressed consistently across AT&T and that third party risks of new and existing technologies are assessed monitored and remediated as short you will help make the AT&T Guarantee a reality by mitigating risks across our extended ecosystem.

Responsibilities:

• Drive the evolution of AT&Ts Technology Third Party Risk Management program including processes to identify assess mitigate monitor and report technology third-party risks

• Advise on the design and enhancement of foundational TPRM capabilities including policies and standards third-party inventory risk tiering due diligence onboarding monitoring and termination activities

• Evaluate program maturity and lead improvement initiatives across governance processes controls technology enablement and data management capabilities

• Partner with stakeholders across Supply Chain Enterprise Risk Management Compliance Technology and Legal to advance strategic program objectives and strengthen risk management practices

• Develop executive-level risk assessments point-of-view documents and escalation materials related to critical third parties emerging risks and program gaps

• Serve as a trusted advisor to business units on emerging third-party risk topics regulatory developments and industry best practices

Qualifications:

• 7 years experience in multiple industry risk control and governance disciplines (e.g. Audit Information Security and Regulatory Compliance)

• 5 years of work experience in third party risk management and/or supply chain processes at a global company with strong understanding of technology products services and lifecycles

• Strong presentation and executive oral/written communication skills with demonstrated experience leading culture and capabilities change across a diverse set of stakeholder groups

• Experience designing implementing and sustaining programs that effectively manage risk throughout the risk management lifecycle including:

  • Strategic technology risk advisory

  • Risk identification including emerging risks

  • Maturity and risk assessment scenario analysis

  • Risk response mainly issue remediation

  • Risk monitoring

  • Policy and committee governance

• Demonstrated success in remediating self-identified internal / external audit and regulatory / compliance issues with proven ability to shape and solve complex problem statements

• Extensive knowledge of information and technology risk management policies methods standards tools and processes (e.g. ISO COSO COBIT NIST) as well as knowledge of compliance legal internal / external audit & regulatory requirements

Desired Qualifications

• BS and advanced degree preferred

• Professional TPRM related certifications such as CTPRP TPCRA TPRMP CRISC CISSP preferred

• Familiarity with applying Artificial Intelligence (AI)or Machine Learning (ML)techniques in cybersecurity contexts (e.g. anomaly detection threat hunting behavioral analytics or risk scoring).

Joining our team comes with amazing perks and benefits:

• Medical/Dental/Vision coverage
• 401(k) plan
• Tuition reimbursement program
• Paid Time Off and Holidays (based on date of hire at least 23 days of vacation each year and 9 company-designated holidays)
• Paid Parental Leave
• Paid Caregiver Leave
• Additional sick leave beyond what state and local law require may be available but is unprotected
• Adoption Reimbursement
• Disability Benefits (short term and long term)
• Life and Accidental Death Insurance
• Supplemental benefit programs: critical illness/accident hospital indemnity/group legal
• Employee Assistance Programs (EAP)
• Extensive employee wellness programs
• Employee discounts up to 50% off on eligible AT&T mobility plans and accessories AT&T internet (and fiber where available) and AT&T phone

Weekly Hours:

Time Type:

Location:

Salary Range:

It is the policy of AT&T to provide equal employment opportunity (EEO) to all persons regardless of age color national origin citizenship status physical or mental disability race religion creed gender sex sexual orientation gender identity and/or expression genetic information marital status status with regard to public assistance veteran status or any other characteristic protected by federal state or local addition AT&T will provide reasonable accommodations for qualified individuals with disabilities.AT&T is a fair chance employer and does not initiate a background check until an offer is made.