Tech Risk, Third Party Risk Management

AT&T

AT&T technology risk principal evolving third-party risk management for telecom operations. Advising stakeholders on governance, controls, regulatory compliance, and technology supplier risks.

Posted 8/4/2026full-timeCharlotte, Dallas • North Carolina, Texas • 🇺🇸 United StatesSeniorLead💰 $155,400 - $261,100 per yearWebsite

Core Competencies

Role fit

Core Competencies

Use this summary to align your resume positioning with the role.

Demonstrates expertise in Third Party Risk Management (TPRM) by driving program evolution, enhancing foundational capabilities, and ensuring compliance with regulatory standards. Possesses strong analytical and communication skills to effectively partner with stakeholders and lead risk management initiatives.

Highest-signal resume keywords

Third Party Risk ManagementRisk AssessmentRegulatory ComplianceInformation SecurityStakeholder Engagement

ATS Keywords

Tailor your resume

Applicant Tracking System Keywords

Tip: use these terms in your resume and cover letter to boost ATS matches.

Hard Skills

Risk Management LifecycleRisk MonitoringScenario AnalysisIssue RemediationTechnology Risk AdvisoryProgram Design and ImplementationGovernance FrameworksData ManagementEmerging Risk IdentificationAudit Remediation

Soft Skills

Executive CommunicationProblem SolvingChange LeadershipCollaborationPresentation Skills

Tools & Technologies

ISO StandardsCOSO FrameworkCOBIT FrameworkNIST StandardsAI TechniquesML Techniques

Certifications & Qualifications

CTPRPTPCRATPRMPCRISCCISSP

Industry Keywords

Supply Chain RiskGovernanceCompliance StandardsAuditTechnology Products

Tech Stack

Tools & technologies

Cyber Security

About the role

Key responsibilities & impact

Drive the evolution of AT&T's Technology Third Party Risk Management program, including processes to identify, assess, mitigate, monitor, and report technology third-party risks
Advise on the design and enhancement of foundational TPRM capabilities, including policies and standards, third-party inventory, risk tiering, due diligence, onboarding, monitoring, and termination activities
Evaluate program maturity and lead improvement initiatives across governance, processes, controls, technology enablement, and data management capabilities
Partner with stakeholders across Supply Chain, Enterprise Risk Management, Compliance, Technology, and Legal to advance strategic program objectives and strengthen risk management practices
Develop executive-level risk assessments, point-of-view documents, and escalation materials related to critical third parties, emerging risks, and program gaps
Serve as a trusted advisor to business units on emerging third-party risk topics, regulatory developments, and industry best practices
Orchestrate stakeholders to identify, assess, mitigate, and monitor third-party risks
Focus on inherent and residual risk of technology third parties supporting mission-critical systems, sensitive data, hardware, and software products
Ensure regulatory and risk policies and standards are understood and addressed consistently across AT&T

Requirements

What you’ll need

7+ years experience in multiple industry risk, control, and governance disciplines, such as Audit, Information Security, and Regulatory Compliance
5+ years of work experience in third-party risk management and/or supply chain processes at a global company
Strong understanding of technology products, services, and lifecycles
Strong presentation and executive oral/written communication skills
Demonstrated experience leading culture and capabilities change across diverse stakeholder groups
Experience designing, implementing, and sustaining programs managing risk throughout the risk management lifecycle
Experience with strategic technology risk advisory, emerging risk identification, maturity and risk assessment, scenario analysis, issue remediation, risk monitoring, and policy and committee governance
Demonstrated success remediating self-identified, internal/external audit, and regulatory/compliance issues
Ability to shape and solve complex problem statements
Extensive knowledge of information and technology risk management policies, methods, standards, tools, and processes, including ISO, COSO, COBIT, and NIST
Knowledge of compliance, legal, internal/external audit, and regulatory requirements
BS and advanced degree preferred
Professional TPRM-related certifications such as CTPRP, TPCRA, TPRMP, CRISC, or CISSP preferred
Familiarity with applying AI or ML techniques in cybersecurity contexts preferred/desirable

Benefits

Comp & perks

Medical/Dental/Vision coverage
401(k) plan
Tuition reimbursement program
Paid Time Off and Holidays (at least 23 days of vacation each year and 9 company-designated holidays)
Paid Parental Leave
Paid Caregiver Leave
Additional sick leave beyond what state and local law require may be available but is unprotected
Adoption Reimbursement
Disability Benefits (short term and long term)
Life and Accidental Death Insurance
Supplemental benefit programs: critical illness/accident hospital indemnity/group legal
Employee Assistance Programs (EAP)
Extensive employee wellness programs
Employee discounts up to 50% off on eligible AT&T mobility plans and accessories, AT&T internet (and fiber where available) and AT&T phone