Sr Specialist Cybersecurity - Control Testing - IT General Controls (ITGC), Cloud Security Controls, Application Security Controls, Information Security Controls, SOX Control Testing

Overview

Senior Specialist, Cybersecurity Control Testing, within the Controls Assurance (CA) team of the Chief Security Office. The role independently tests IT general controls, cloud security controls, critical application security controls and business process controls owned by AT&T Technology Services.

What you'll do

• Work with CTR leadership on control testing priorities, annual test planning, risk-based prioritization, scope definition and control testing execution.
• Independently execute complex engagements, including test script preparation, walkthroughs, evidence review, issue identification, stakeholder alignment, documentation and reporting to senior ATS stakeholders.
• Test IT general controls, IT application controls, automated controls, IT-dependent manual controls, cloud security controls, critical application security controls and business process controls.
• Evaluate control design and operating effectiveness across technology platforms, telecom systems, applications, infrastructure, data flows and business processes.
• Partner with external auditors, internal stakeholders, technology teams, control owners and business process owners to drive efficient testing, evidence collection, issue resolution and audit readiness.
• Analyze complex technology and security control issues and articulate risk to AT&T assets, including devices, networks, applications, data, customers and business objectives.
• Support reporting of test results, open issues, risk themes, control gaps and remediation progress to leadership and relevant stakeholders.
• Identify opportunities to improve control design, reduce control complexity, increase automation and strengthen preventive and detective controls.
• Support control design and assurance activities for technology and business transformation initiatives, including new platforms, cloud adoption, application modernization, telecom process changes and digital transformation programs.
• Contribute to the development of the Control Testing Methodology, Technology Risk Management Framework components, testing procedures and related tooling.
• Mentor and support junior team members on testing methodology, documentation standards, risk articulation, stakeholder management and issue evaluation.
• Support emerging assurance scenarios involving AI usage, agentic workflows, continuous controls monitoring, automated evidence collection and analytics-driven control testing.

What you'll need

• 8+ years of experience in Technology Risk Management, Consulting, Assurance, Internal Audit, Cybersecurity Risk, SOX or IT controls, with at least 5 years focused on control design, control testing or technology assurance.
• Strong experience testing or reviewing ITGCs, ITACs, business process controls, automated controls, IT-dependent manual controls, critical application controls, cloud security controls and information security controls.
• Prior experience in SOX control testing, technology risk assessments, audit readiness, control design evaluation and operating effectiveness testing.
• Strong understanding of regulatory and compliance requirements.
• Experience working with technology platforms, enterprise applications, cloud environments, infrastructure, data flows, interfaces and business process control dependencies.
• Strong documentation, workpaper preparation, issue writing and risk articulation skills.
• Ability to engage confidently with control owners, technology leaders, business process owners, external auditors and internal risk stakeholders.
• Strong analytical mindset to connect technology control gaps to business, operational, financial reporting, security and compliance risks.

Nice to have

• Prior experience in the telecom industry or in large-scale technology-driven organizations.
• Big 4 Manager or equivalent consulting or assurance experience in technology risk, SOX, cyber risk, IT audit, process controls or transformation assurance.
• Experience supporting technology transformation, process transformation, cloud migration, application modernization, ERP, billing or telecom platform transformation, or digital transformation programs.
• Project governance and reporting experience, including status reporting, steering committee updates, issue tracking, dependency management and leadership communication.
• Exposure to AI-enabled assurance, agentic AI use cases, control automation, continuous controls monitoring, automated testing or analytics-based risk monitoring.
• Understanding of how AI, machine learning, workflow automation and agentic solutions may impact control design, evidence generation, testing procedures, access governance, data integrity and model or process oversight.
• Experience with GRC tools, workflow platforms, data analytics tools, testing automation platforms or control monitoring solutions.
• Bachelor's degree in computer science, Mathematics, Information Systems, Engineering, Cybersecurity, Accounting, Finance or related disciplines.
• ISACA, ISC2 or other relevant certifications such as CISA, CRISC, CISSP, CISM, CPA or equivalent.

Details

• Location: Hyderabad or Bengaluru, India (Argus Building 4F and 5F, Sattva, Knowledge City, Hyderabad).
• Weekly hours: 40.
• Time type: Regular.