Assoc Director-Cybersecurity Vulnerability Management
USA:TX:Dallas / One AT&T Plaza (208 S Akard - Whitacre Tower) - Adm:208 S Akard St
AT&T is leading the way to the future – for customers, businesses and the industry. We're developing new technologies to make it easier for our customers to stay connected to their world. Together, we’ve built a premier integrated communications and entertainment company and an amazing place to work and grow. Team up with industry innovators every time you walk into work, creating the world you always imagined. Ready to #transformdigital with us?
Join AT&T and reimagine the communications and technologies that connect the world. Our Chief Security Office ensures that our assets are safeguarded through truthful transparency, enforce accountability and master cybersecurity to stay ahead of threats. Bring your bold ideas and fearless risk-taking to redefine connectivity and transform how the world shares stories and experiences that matter. When you step into a career with AT&T, you won’t just imagine the future-you’ll create it.
The Associate Director Cybersecurity will manage a team responsible for cybersecurity areas across products, services, infrastructure, networks, and/or applications while providing protection for AT&T, our customers, and our vendors/partners.
Key Roles and Responsibilities:
Lead and Oversee Vulnerability Event Management Program: Develop, implement, and continuously improve a comprehensive vulnerability event management program. This includes identifying, assessing, prioritizing, and remediating vulnerabilities across the organization's infrastructure, applications, and systems.
Cross-Functional Collaboration: Work closely with security, IT, development, and operations teams to ensure effective identification, communication, and remediation of vulnerabilities. Foster strong relationships to align vulnerability management efforts with business objectives and risk management strategies.
Risk Assessment and Prioritization: Conduct regular risk assessments to evaluate the potential impact of identified vulnerabilities. Prioritize remediation efforts based on risk, business impact, and regulatory requirements to ensure the most critical vulnerabilities are addressed promptly.
Metrics and Reporting: Establish key performance indicators (KPIs) and metrics to measure the effectiveness of the vulnerability event management program. Provide regular reports and presentations to senior leadership, highlighting program status, progress, and areas for improvement.
Qualifications:
Preferred Master’s Degree in Information Systems, Engineering, Mathematics or Cyber Security related fields.
Requires 10 or more years of related cybersecurity experience.
Due to the nature of work, US citizenship is required for the role.
7+ years of experience in information security, with at least 3 years specifically focused on vulnerability management; including experience with vulnerability assessment tools and methodologies.
Proven track record of leading and managing a high-performing team of security professionals.
Strong leadership skills with the ability to mentor and develop team members.
In-depth knowledge of various operating systems (Windows, Linux, macOS), network protocols, and application security.
Proficiency in using vulnerability scanning tools (e.g., Nessus, Xpanse, etc.) and security information and event management (SIEM) systems.
Strong understanding of risk management principles and practices. Ability to assess and prioritize vulnerabilities based on risk and business impact.
No relocation assistance is provided. Requires on-site presence (3-5 days a week) at one of the listed locations.
Preferred Skills:
Professional certifications such as CISSP, CISM, CEH, or GIAC.
Experience with Cloud Security: Demonstrated experience in securing cloud environments (e.g., AWS, Azure, Google Cloud) and familiarity with cloud-native security tools and practices.
Strong knowledge of regulatory standards and frameworks such as ISO 27001, NIST, GDPR, and PCI-DSS.
Experience with compliance audits and reporting.
Incident Response Experience: Hands-on experience in incident response, including the ability to lead and coordinate responses to security incidents and vulnerability exploits.
Experience with Application Security: Experience covering application security, including SAST, SCA, DAST, RASP, IAST.
Our Assoc Director-Cybersecurity earns between $174,100.00-$261,100.00 USD. Not to mention all the other amazing rewards that working at AT&T offers. Individual starting salary within this range may depend on geography, experience, expertise, and education/training.
Joining our team comes with amazing perks and benefits:
Medical/Dental/Vision coverage
401(k) plan
Tuition reimbursement program
Paid Time Off and Holidays (based on date of hire, at least 28 days of vacation each year and 9 company-designated holidays)
Paid Parental Leave
Paid Caregiver Leave
Adoption Reimbursement
Disability Benefits (short term and long term)
Life and Accidental Death Insurance
Supplemental benefit programs: critical illness/accident hospital indemnity/group legal
Employee Assistance Programs (EAP)
Extensive employee wellness programs
Employee discounts up to 50% off on eligible AT&T mobility plans and accessories, AT&T internet (and fiber where available) and AT&T phone
Apply now!
Weekly Hours: 40
Time Type: Regular
Location: Dallas, Texas
Salary Range: $155,400.00 - $261,100.00
It is the policy of AT&T to provide equal employment opportunity (EEO) to all persons regardless of age, color, national origin, citizenship status, physical or mental disability, race, religion, creed, gender, sex, sexual orientation, gender identity and/or expression, genetic information, marital status, status with regard to public assistance, veteran status, or any other characteristic protected by federal, state or local law. In addition, AT&T will provide reasonable accommodations for qualified individuals with disabilities.
#J-18808-Ljbffr