Technology Risk Issues Management Lead

Job Description:

This position requires office presence of a minimum of 5 days per week and is only located in the location(s) posted. No relocation is offered.

As AT&T Technology Risk Issues Management Lead, you will be responsible for managing how AT&T Technology Services responds to control deficiencies and excessive residual risk. Increasing levels of regulatory requirements demand additional risk management rigor, and we must implement highly resilient, reliable, and effective solutions that meet and, in some cases, exceed performance standards found in other information rich industries. You will support Technology Risk initiatives across the business and advocate for best practices, while incorporating an independent oversight lens. You will utilize risk-based management to integrate information and technology risk processes into the way AT&T operates.

Reporting to the Associate Director of Technology Risk as an Individual Contributor, you will be responsible for supporting the design, build, implementation, and operation of a leading issues management program. You will help ensure that AT&T has the right methodologies, processes, technology, and reporting capabilities to enable effective management of technology issues and provide senior leadership with visibility into residual risk exposure and issue remediation performance.

Responsibilities

• Support the design, build, implementation, and ongoing management of the technology issues management program, including the:

  • Methodologies (e.g., ratings, valid responses, validation)

  • Processes

  • Engagement model

  • System(s) of record

  • Reporting capabilities

• Develop and manage Technology Risk issues management key performance indicators

• Publish recurring reporting to inform executive leadership of residual risk exposure as well as issue remediation performance

• Support issues scenario analysis through modeling

• Support Tech Risk teams responsible for risk monitoring, periodic controls testing, evidence collection, remediation and audit readiness efforts

• Develop strong relationships and interact with Senior Leadership, Business Unit Heads, Global Functions, Internal Audit, External Regulators, Legal and Compliance, Privacy and IT teams to coordinate activities

• Develop and deliver executive-level IT risk presentations to describe residual risk exposures and remediation actions required

• Represent AT&T’s interests to appropriate industry and standards forums and advise the Associate Director of Technology Risk concerning relevant topics and trends

Qualifications

• 5+ years of work experience in issue remediation, issues program management, and issues reporting at a global company

• 5+ years of work experience in multiple industry risk, control and governance disciplines (e.g. Risk Management, Audit, Information Security, Regulatory Compliance)

• Experience designing, implementing, and sustaining issues management programs, including:

  • ServiceNow GRC solutions issues management design, configuration, and administration

  • Issue data architecture, model, and management

  • Issue methodologies (e.g., rating, responses, remediation planning, validation)

  • Issues governance

  • Issues management process and procedures, including engagement model

  • Issue training and awareness

  • Issue validation / control testing

  • Issue insight generation, including data analysis & visualization, KPIs and monitoring, and scenario modeling

  • Issue reporting

• Experience with the following technologies strongly preferred:

  • ServiceNow GRC capabilities (e.g., Integrated Risk Management)

  • Microsoft Power BI for risk data analysis, visualizations, and dashboarding

• Strongly-rated skills in:

  • Project management

  • Problem solving and program execution.

  • Client relationship management experience, communication, and influencing.

• Knowledge of information and technology risk management policies, methods, standards, frameworks, tools, and processes (e.g. COBIT, NIST, ITIL) as well as knowledge of compliance, legal, internal / external audit & regulatory requirements (e.g., SOX, PCI)

• Adept at creating structure from ambiguity to deliver repeatable and sustainable results.

• Effective at navigating large corporations and governance structures.

• Ability to prioritize and drive difficult decisions among business partners.

• Ability to