Director-Cybersecurity

Job Description:

Join AT&T and reimagine the communications and technologies that connect the world. Our Chief Security Office ensures that our assets are safeguarded through truthful transparency, enforce accountability and master cybersecurity to stay ahead of threats. Bring your bold ideas and fearless risk-taking to redefine connectivity and transform how the world shares stories and experiences that matter. When you step into a career with AT&T, you won’t just imagine the future-you’ll create it.

The Director Cybersecurity is responsible for directing cybersecurity programs designed to protect AT&T's global Enterprise infrastructure, networks, devices, applications, and data.  Solutions safeguard customers, vendors, and partners.  Position requires innovation, strategic planning, technical proof of concepts, testing, lab work, production deployment/enablement, and ongoing security policy tuning and efficacy validation.  Maintains close alignment with technical program management and process related tasks associated with the cyber security programs, both internally and externally focused. You will have Associate Director Cybersecurity and other cybersecurity direct reports.  Position requires frequent reporting and updating to upper levels of management. 

Key Roles and Responsibilities:  

• Leads a team responsible for managing a suite of existing complex and expansive Enterprise security controls at various states of deployment and maturity.

• Directs end to end lifecycle management of security controls from concept and implementation through EOL.

• Supports and is available for 24x7 call to work activities to diagnose and resolve security controls related impacts to performance and functionality of applications, networks, and devices.

• Builds and leads a high performing team to analyze and assess security control solutions, improve security efficacy of embedded controls, and identify strategic and tactical roadmaps.

• Analysis of complex security issues and development and engineering activities focused on mitigating risk.

• Evaluates various hardware and software solutions, recommending purchases to add or augment existing controls, based on emerging threat landscape and potential gaps.

• Develops policies and procedures to minimize network intrusion, malware events, vulnerability issues, and data leakage, for internal and external customers.

• Continuous security policy tuning, validation, and efficacy testing

• Routine reporting of project progress and actual risk reduction, to all management levels.

Qualifications:

• Leadership and Strategy: Develop and implement comprehensive cybersecurity strategies that align with organizational goals. Lead and mentor the Security Engineering and Operations team to ensure effective and efficient security measures are in place.

• Security Engineering: Oversee the design, implementation, and maintenance of security systems to protect the organization's information and assets. Ensure the integration of security best practices into the development and operational lifecycle.

• Operations Management: Manage and optimize security operations, including monitoring, detection, and response to security incidents. Ensure the continuous improvement of security processes and technologies.

• Risk Management: Identify and assess security risks, and develop mitigation plans to address potential threats. Ensure compliance with relevant regulations and standards.

• Collaboration: Work closely with other departments, including IT, to ensure a cohesive approach to cybersecurity. Provide expert guidance on security matters to senior management and stakeholders.

• Experience in a leadership role within a large organization.

• Knowledge of regulatory requirements and industry standards related to cybersecurity.

• Strong project management skills and the ability to manage multiple initiatives simultaneously.

Required Skills and Experience:

• 10 or more years of related experience:

• Security Solutions Expertise: Hands-on experience with the following controls:

• EDR / EPP Solutions: SentinelOne, FireEye, Crowdstrike

• DLP endpoint and network solutions: ForcePoint, Everfox, MSDLP

• Proxy

• WAF

• Email Protection & DMARC Enforcement

• IDPS

• SSE

• RBI

• Mobile device Security Solutions

• Automation & Simulation: Proficient understanding and use of automation and breach and attack simulation platforms.