Associate Director Compliance Technical Risk

AT&T is seeking an experienced leader to serve as Associate Director, Cybersecurity Compliance & Technical Risk within the Chief Security Office (CSO). This role leads the Technical Risk Compliance team responsible for managing enterprise compliance activities and demonstrating the effectiveness of IT controls across AT&T. The team supports critical regulatory and industry requirements including Sarbanes-Oxley (SOX), Payment Card Industry (PCI), Health Insurance Portability and Accountability Act (HIPAA), International Organization for Standardization (ISO), and System and Organization Controls (SOC) audits.

As an Associate Director, you will play a key role in protecting AT&T's risk posture by ensuring continuous compliance with regulatory obligations, driving audit readiness, and advancing strategic initiatives that improve governance, efficiency, and control effectiveness across the enterprise. Lead, coach, and develop a high-performing compliance team responsible for managing the full lifecycle of nearly 40 audits annually while partnering closely with stakeholders across Finance, Technology, Security, Supply Chain, Product Services, and external audit organizations.  Foster a culture of accountability, continuous improvement, and operational excellence through talent recruitment, retention, performance management, career development, and effective communication of organizational priorities and strategic goals.

• Lead enterprise compliance programs supporting SOX, PCI, HIPAA, ISO, SOC, and other regulatory requirements.
• Serve as the primary liaison between control owners, business stakeholders, external auditors, and regulatory organizations.
• Oversee audit planning, evidence collection, control testing, remediation management, and audit execution activities.
• Provide executive-level reporting on audit progress, compliance risks, remediation activities, and program performance.
• Direct issue management and escalation processes to ensure timely resolution of compliance and control concerns.

• Lead governance initiatives that enhance control owner accountability and strengthen enterprise risk management practices.
• Establish and maintain compliance tools, automation capabilities, and evidence management platforms to improve operational effectiveness.
• Champion the migration and adoption of ServiceNow GRC and other common technology platforms that advance standardization and risk reduction.
• Develop and execute a long-term roadmap aligned with enterprise Technical Risk Management objectives.
• Drive the strategic adoption of AI and automation across the compliance program to enhance evidence management, audit readiness, workflow efficiency, and overall compliance effectiveness.
• Provide leadership on AI governance, controls, and compliance requirements while promoting innovative solutions that improve user experience, strengthen risk management, and reduce operational cycle times.

• Preferred Master’s degree Cybersecurity, Information Systems, Engineering or related fields.
• Requires 5-8 years of experience in cybersecurity, technical risk management, IT compliance, audit management, or related disciplines.
• Experience leading teams and managing complex cross-functional compliance or risk programs.
• Strong understanding of IT control frameworks, regulatory compliance requirements, audit methodologies, and risk management principles.
• Experience managing external auditor relationships, consulting engagements, contracts, budgets, and project timelines.
• Demonstrated ability to influence stakeholders and drive organizational change in complex environments.
• Excellent communication, leadership, and executive presentation skills.
• Experience applying AI and automation technologies within cybersecurity, compliance, audit, or risk management functions.

• Experience with SOX, PCI, HIPAA, ISO, SOC, or similar compliance frameworks
• Experience with Governance, Risk, and Compliance (GRC) platforms, including ServiceNow GRC.
• Professional certifications such as CISSP, CISA, CRISC, CGEIT, or related credentials.
• Strong program management and organizational transformation experience.

• Strategic leadership and organizational transformation expertise.
• Deep knowledge of cybersecurity compliance and technical risk management.
• Ability to balance regulatory requirements, operational efficiency, and business objectives.
• Passion for building teams, developing talent, and driving continuous improvement.
• A forward-thinking approach to leveraging AI, automation, and emerging technologies to strengthen compliance and risk management outcomes.

Joining our team comes with amazing perks and benefits:

• Medical/Dental/Vision coverage
• 401(k) plan
• Tuition reimbursement program
• Paid Time Off and Holidays (based on date of hire, at least 23 days of vacation each year and 9 company-designated holidays)
• Paid Parental Leave
• Paid Caregiver Leave
• Additional sick leave beyond what state and local law require may be available but is unprotected
• Adoption Reimbursement
• Disability Benefits (short term and long term)
• Life and Accidental Death Insurance
• Supplemental benefit programs: critical illness/accident hospital indemnity/group legal
• Employee Assistance Programs (EAP)
• Extensive employee wellness programs
• Employee discounts up to 50% off on eligible AT&T mobility plans and accessories, AT&T internet (and fiber where available) and AT&T phone

AT&T and its subsidiaries are committed to equal employment opportunity. All hiring, promotion, and other employment decisions remain merit-based and free from discrimination on the basis of race, color, religion, religious creed, national origin, ancestry, age, sex, sexual orientation, gender, gender identity, gender expression, physical disability, mental disability, pregnancy, medical condition, genetic information, marital status, citizenship status, military status, veteran status, or any other characteristic protected by federal, state, or local laws. In addition, AT&T will provide reasonable accommodations to qualified individuals with disabilities. AT&T is a fair chance employer and does not initiate a background check until an offer is made. Click here to learn more or request an application accommodation here.