Application Security Vulnerability Risk Lead

AT&T is seeking an Application Security Vulnerability Risk Lead based onsite in the Charlotte, NC area to guide technology risk management across Vulnerability Management and Application Security. In this individual contributor role with no direct reports, you will oversee the end-to-end risk management lifecycle, with a focus on both application security and infrastructure vulnerability management, partnering across teams to ensure issues are addressed and remediation is executed effectively.

This position supports the Technology Risk Management program through strategic guidance, control and risk evaluation, and close collaboration with stakeholders across technology, business, and risk partners. You will also contribute to Tech Risk activities such as risk monitoring, periodic controls testing, evidence collection, and audit readiness.

What you’ll do

• Identify, assess, and document controls and risks across Vulnerability Management and Application Security activities, keeping a proactive stance toward emerging threats and vulnerabilities.
• Continuously evaluate emerging AI security threats and recommend mitigations and enhancements to existing controls.
• Drive Issues Management and Remediation efforts aligned to the Technology Risk Management program.
• Partner with and advise key stakeholders across technology, business, and risk partners to identify, assess, respond to, and monitor risks that help keep AT&T and its customers safe and resilient.
• Support Tech Risk teams responsible for risk monitoring, periodic controls testing, evidence collection, and audit readiness efforts.

What you bring

• Preferred Bachelor’s degree in Information Systems, Engineering, Cyber Security, or a related field.
• 5+ years of work experience in technology, operational risk management, or a related discipline at a global company.
• Significant (5-7 years) experience across multiple industry risk, control, and governance disciplines such as Audit, Information Security, or Regulatory Compliance.
• Proven experience in vulnerability management and application security, including identifying, assessing, prioritizing, and remediating vulnerabilities in complex environments.
• Strong understanding of AI-specific threats (including adversarial attacks, model theft, and data poisoning) and practical experience mitigating these risks in enterprise environments.
• Strong information security risk and cybersecurity control knowledge, including familiarity with information and technology risk management policies, methods, standards, tools, and processes such as ISO, COSO, COBIT, and NIST, plus experience with compliance, legal, and internal or external audit and regulatory requirements.
• Experience identifying, tracking, monitoring, and remediating critical non-compliance issues through the issue management lifecycle.
• Strong client relationship management experience, including communication and influencing skills.
• Strong interpersonal and oral and written communication skills, with the ability to build relationships at all levels.

Tools and focus areas

• AI-specific threats
• ISO
• COSO
• COBIT
• NIST

Location and schedule

• Onsite: Charlotte, NC
• Also listed: Charlotte, North Carolina, Dallas, Texas
• Weekly hours: 40
• Time type: Regular

Compensation

Salary range: USD 141,300 - 237,400 per year.

Benefits

• Medical/Dental/Vision coverage
• 401(k) plan
• Tuition reimbursement program
• Paid Time Off and Holidays (based on date of hire, at least 23 days of vacation each year and 9 company-designated holidays)
• Paid Parental Leave
• Paid Caregiver Leave
• Additional sick leave beyond what state and local law require may be available but is unprotected
• Adoption Reimbursement
• Disability Benefits (short term and long term)
• Life and Accidental Death Insurance
• Supplemental benefit programs: critical illness/accident hospital indemnity/group legal
• Employee Assistance Programs (EAP)
• Extensive employee wellness programs
• Employee discounts up to 50% off on eligible AT&T mobility plans and accessories
• AT&T internet (and fiber where available) and AT&T phone