SOX Tech Risk Lead

AT&T

SOX Tech Risk and IAM Lead ensuring compliance and managing technology risks at AT&T. Leading initiatives across IAM policies and technology risk frameworks in a dynamic security environment.

Posted 7/15/2026full-timeAtlanta • 🇺🇸 United StatesSenior💰 $141,300 - $211,900 per yearWebsite

Core Competencies

Role fit

Core Competencies

Use this summary to align your resume positioning with the role.

Demonstrates expertise in Identity and Access Management (IAM) principles, SOX compliance, and technology risk management, with a strong focus on developing and enforcing policies and procedures aligned with industry standards. Proficient in assessing and implementing IAM controls and cybersecurity measures across complex technology environments.

Highest-signal resume keywords

SOX ComplianceIdentity And Access Management (IAM)Risk AssessmentCybersecurity ControlsProfessional Certifications (CISA, CRISC, CISSP)

ATS Keywords

Tailor your resume

Applicant Tracking System Keywords

Tip: use these terms in your resume and cover letter to boost ATS matches.

Hard Skills

SOX IT General Controls (ITGCs)Technology Risk ManagementIAM Control ImplementationCloud Platforms (AWS, Azure, GCP)Process DocumentationControl DesignVulnerability ManagementIncident ResponseData ProtectionAutomation Initiatives

Soft Skills

CollaborationAdvisory SkillsCommunicationAnalytical ThinkingProblem Solving

Tools & Technologies

SailPointCyberArkActive DirectoryAzure ADGovernance, Risk, And Compliance (GRC) ToolsNIST 800-53ISO 27001CIS ControlsArtificial Intelligence (AI)Machine Learning (ML)

Certifications & Qualifications

CISACRISCCISSPCPACIAAWS Certified Cloud Practitioner

Industry Keywords

Internal AuditPublic AccountingFinancial Reporting RiskPCAOB RequirementsControl NarrativesControl TestingCyber ThreatsRegulatory RequirementsControl FrameworksRisk Scoring

Tech Stack

Tools & technologies

AWSAzureCloudCyber SecurityGoogle Cloud Platform

About the role

Key responsibilities & impact

Lead the identification, assessment, and mitigation of technology risks across the organization.
Develop and maintain risk frameworks, policies, and procedures aligned with industry best practices.
Develop and enforce Identity and Access Management (IAM) policies and procedures to ensure compliance with SOX requirements.
Oversee the control environment for multiple IAM platforms (such as SailPoint, CyberArk, Active Directory, Azure AD), ensuring seamless integration with governance, risk, and compliance (GRC) tools and supporting the organization’s overall security and compliance objectives.
Drive coordination and program management for initiatives impacting SOX scope, including new scope, technology process and control changes and optimization.
Serve as an end-to-end process and IT control expert advising control and process owners on SOX requirements, risk assessment, control design, and optimization strategies.
Participate in walkthroughs for high-risk areas and changes to help ensure readiness and control design effectiveness.
Evaluate process and control changes, evaluate risk, business process transformations, advise on new initiatives for SOX impact, and provide clear, actionable recommendations.
Oversee the documentation of control narratives and perform control testing.
Collaborate with technical and business stakeholders to support the deficiency evaluation process including root cause analysis, impact assessment, management action plan development, remediation monitoring and validation.
Oversee the development and execution of cybersecurity controls, including access management, vulnerability management, incident response, and data protection.
Partner with process owners and control owners to drive awareness and understanding of SOX requirements and protocols, control design requirements, and enterprise control strategy.
Develop and review new and updated testing procedures to ensure control evidence and scope are sufficient and aligned with risk.
Stay current on cyber threats, regulatory requirements, and control frameworks (e.g., NIST, ISO 27001).

Requirements

What you’ll need

5+ years of experience in Internal Audit, SOX Compliance, Risk Advisory, and/or Public Accounting.
Bachelor's or Master's degree in Computer Science, Computer Engineering, Information Systems, or related field (preferred).
Professional certifications preferred: CISA, CRISC, CISSP, CPA, CIA, AWS Certified Cloud Practitioner (or higher).
Strong knowledge of SOX IT General Controls (ITGCs), technology risk, financial reporting risk, PCAOB requirements, and internal controls.
Experience leading SOX readiness, automation, and transformation initiatives.
Deep understanding of Identity and Access Management (IAM) principles, standards, and frameworks including NIST 800-53, ISO 27001, and CIS Controls.
Hands-on experience assessing and implementing IAM controls across complex technology environments.
Strong knowledge of cloud platforms (AWS, Azure, GCP) and their IAM capabilities.
Extensive experience with SailPoint, CyberArk, and Delinea, including Privileged Access Management (PAM), process documentation, and SOX control design.
Experience with IT Security Audits, Cloud Engineering, and IAM governance.
Familiarity with applying Artificial Intelligence (AI) or Machine Learning (ML) techniques in cybersecurity contexts (e.g., anomaly detection, threat hunting, behavioral analytics, or risk scoring).

Benefits

Comp & perks

Medical/Dental/Vision coverage
401(k) plan
Tuition reimbursement program
Paid Time Off and Holidays (based on date of hire, at least 23 days of vacation each year and 9 company-designated holidays)
Paid Parental Leave
Paid Caregiver Leave
Additional sick leave beyond what state and local law require may be available but is unprotected
Adoption Reimbursement
Disability Benefits (short term and long term)
Life and Accidental Death Insurance
Supplemental benefit programs: critical illness/accident hospital indemnity/group legal
Employee Assistance Programs (EAP)
Extensive employee wellness programs
Employee discounts up to 50% off on eligible AT&T mobility plans and accessories, AT&T internet (and fiber where available) and AT&T phone