Technology Risk Principal – Technology Delivery, Operations, and Resilience

Job Description:

This position requires office presence of a minimum of 5 days per week and is only located in the location(s) posted. No relocation is offered.

As AT&T Technology Risk Principal, you will be responsible for providing independent oversight, advisory and driving risk solutions in accordance with the Technology Risk Program. Increasing levels of regulatory requirements demand additional risk management rigor, and we must implement highly resilient, reliable, and effective solutions that meet and, in some cases, exceed performance standards found in other information rich industries.  You will provide leadership and support for Technology Risk initiatives across the business and advocate for best practices, while incorporating an independent oversight lens.  You will utilize risk-based management to integrate information and technology risk processes into the way AT&T operates.

Reporting to AT&T’s Directory of Technology Risk, you will be responsible for responsible for identifying, assessing, responding to, and monitoring risks pertaining to technology changes, stability, and continuity. You will ensure that regulatory / risk policies and standards and their impact on business operations are understood and addressed consistently across AT&T, and that technology risks of new and existing technology facilities, as well as third party facilities, are assessed, monitored, and remediated as necessary. You will help to provide coverage for regulatory issues with our global technology partners and assist with regulatory exams, requests, and meetings.

Job Summary

As Technology Risk Principal, you will be responsible for one of the following (3) areas within our Technology Risk organization:

• Serve as the primary point of contact for Core Technology Operations, Availability and Stability processes and provide risk advisory in accordance with the Technology Risk Program and in support of compliance initiatives within respective business units / functions

• Serve as the primary point of contact Technology Delivery Lifecycle (TDLC) and Technology Change Management processes and provide risk advisory in accordance with the Technology Risk Program and in support of compliance initiatives within respective business units / functions

• Serve as the primary point of contact Technology Resilience, Service Continuity and Disaster Recovery processes and provide risk advisory in accordance with the Technology Risk Program and in support of compliance initiatives within respective business units / functions

Key Roles and Responsibilities

• Provide advisory, as well as manage the development of Technology Risk policies, processes, frameworks and oversee the integration and implementation of proposed solutions

• Ensure IT Standards and Policies are fit for purpose and are appropriate from a regulatory, risk and compliance perspective

• Provide expertise to business units around emerging technology risk topics

• Work with applicable business, operational and IT organizations to help ensure that business and IT projects are appropriately monitored for IT risks

• Contribute to Tech Risk teams responsible for risk monitoring, periodic controls testing, evidence collection, remediation and audit readiness efforts

• Support teams conducting risk and control assessments of new and existing business capabilities

• Periodically assess Technology Program capabilities and associated maturity levels to identify Program enhancement opportunities

• Develop strong relationships and interact with Senior Leadership, Business Unit Heads, Global Functions, Internal Audit, External Regulators, Legal and Compliance, Privacy and IT teams to coordinate activities

• Develop and deliver executive-level IT risk presentations to describe risk exposures and actions required

• Support Director of Technology Risk with escalation high risk observations to Technology Risk Senior leadership

• Support teams conducting risk and control assessments of new and existing business capabilities

• Represent AT&T’s interests to appropriate industry and standards forums and advise the Vice President of Technology Risk concerning topics and trends pertaining to information technology risks

Qualifications

• 8-10+ years of work experience in technology, operational risk management, or a related discipline at a fortune 500 company

• Significant (7+ years) experience in multiple industry risk, control and governance disciplines (e.g. Audit, Information Security, and Regulatory Compliance)

• Deep experience in one or more areas:

  • Management of technology operations r