Principal Cybersecurity

Job Description:

This position requires office presence of a minimum of 5 days per week and is only located in the location(s) posted. No relocation is offered.

Join AT&T and reimagine the communications and technologies that connect the world. Our Chief Security Office ensures that our assets are safeguarded through transparency, accountability, and mastery of cybersecurity to stay ahead of threats. Bring your innovative ideas and strategic thinking to help shape the future of security policy governance at AT&T.

What You'll Do

Join our company as a Principal Cybersecurity and lead the evolution of AT&T’s Security Policy & Requirements, driving continuous improvement and innovation across our ServiceNow GRC platform. You will be at the forefront of policy development, AI-driven automation, and stakeholder engagement, ensuring our security posture remains robust, transparent, and aligned with business goals.

• Develop and maintain AT&T’s Security Policies and Standards for internal stakeholders across the AT&T enterprise (US and international), ensuring meticulous attention to detail and alignment with AT&T’s risk strategies, regulatory requirements, and industry standards (e.g., NIST, ISO, PCI DSS), while closely collaborating with peers on the team and with CSO and non-CSO control owners to ensure enforceable and demonstrable governance.
• Identify and resolve uniquely complex policy challenges by designing and implementing innovative solutions, leveraging transformational platforms such as ServiceNow and advanced AI tools like AskAT&T, maintaining high quality control and review standards through teamwork and cross-functional collaboration.
• Lead research, forward-looking planning, and strategic initiatives to optimize ServiceNow GRC, serving as a thought leader in policy taxonomy, data hierarchy, and program management, with a focus on compliance with industry best practices and standards, in partnership with team members, CSO, and non-CSO control owners.
• Oversee and manage operations for quarterly policy publication cycles, including Modification Request Lifecycle Quality Control, project planning, timeline management, and execution of publication workflows within ServiceNow—applying HTML to ServiceNow policy content to ensure precise formatting, clarity, and consistency.
• Utilize AI-assisted automation to enhance accuracy, streamline processes, and improve quality control throughout policy creation and publication workflows.
• Generate comprehensive, auditable artifacts—including change management documentation, data extracts, executive summaries, and metrics—to support governance, transparency, audit readiness, and industry-standard reporting requirements, often in cooperation with colleagues and control owners.
• Provide expert policy guidance and education to internal and external stakeholders, facilitating clear communication and presentations with leadership and executive teams, and ensuring alignment with both organizational and industry security objectives, while collaborating closely with peers and control owners.
• Lead or support multiple cross-functional publication projects, optimizing resource allocation, fostering a culture of innovation, and maintaining rigorous attention to detail and quality through strong team and cross-functional collaboration.
• Apply advanced program management principles and expert knowledge across ServiceNow, with a focus on continuous improvement, effective communication at all organizational levels, close peer and control owner collaboration, and compliance with industry standards.

What You'll Need To Bring

• 8+ years' experience in information security, risk management, or governance, with a strong focus on policy development, industry standards, and GRC platforms (i.e., ServiceNow), working collaboratively within a team and with control owners.
• Demonstrated expertise in policy governance, risk assessment, and AI-driven automation, producing high-quality deliverables that meet industry best practices and regulatory compliance, while engaging closely with team peers and both CSO and non-CSO control owners.
• Proven ability to lead program management initiatives and manage complex, cross-functional projects, consistently ensuring quality control, attention to detail, and alignment with industry requirements through teamwork and cross-functional engagement.
• Hands-on experience with security frameworks, regulatory compliance, industry standards (such as NIST, ISO, PCI DSS), and the development of auditable artifacts—including experience using HTML for formatting ServiceNow policy content.
• Experience providing guidance and education to diverse stakeholders, engaging with leadership, and maintai