Specialist Cybersecurity -Audit Management (PCI, SOC and ISO 27001)

Role: Specialist – Audit Management (PCI, SOC and ISO 27001) About the Company: Join AT&T and reimagine the communications and technologies that connect the world. Our Chief Security Office ensures that our assets are safeguarded through truthful transparency, enforce accountability and master cybersecurity to stay ahead of threats. Bring your bold ideas and fearless risk-taking to redefine connectivity and transform how the world shares stories and experiences that matter. When you step into a career with AT&T, you won’t just imagine the future-you’ll create it. About the Job: The Technology Risk Management team is part of Chief Security Office (CSO) and responsible for managing multiple teams that facilitate external audits, internal audits, analyze policy exceptions, conduct risk assessments, and run enforceable governance across processes. They work closely with the AT&T Technology Services (ATS) teams, Cyber Security Risk Management (CSRM) teams and other CSO teams to ensure effective and efficient GRC processes. Below are the key responsibilities of the Specialist – Audit Management position: Develop and maintain comprehensive internal and external audit plans, including PCI DSS audits, ensuring scope, objectives, deliverables, activities, owners, timelines, and dependencies are clearly defined, assigned, tracked, and completed in a timely manner. Maintain end-to-end audit process documentation and process flows for internal and external audits, ensuring procedures, roles, responsibilities, and supporting documentation remain current and clearly defined. Lead the annual Control Owner Assertion (COA) process, ensuring completion at least six weeks before the start of the internal audit cycle (SOC), and drive readiness activities with Data and Control Owners. Develop and facilitate audit kick-off activities, including presentations, timelines, communication protocols, expectations, and audit-request templates; finalize materials at least two weeks before kick-off and ensure external auditor requests are clearly documented in advance. Facilitate PCI DSS audits end to end, coordinating audit readiness, evidence and documentation requests, control-owner engagement, interviews, walkthroughs, testing support, auditor inquiries, fieldwork, and remediation activities to support successful completion of the PCI DSS assessment. Serve as the primary coordination point between external auditors and internal Data and Control Owners, scheduling interviews, walkthroughs, onsite and remote fieldwork, and working sessions while ensuring auditors receive appropriate access, evidence, clarification, and support. Manage inquiries, clarification requests, and follow-ups from both auditors and internal stakeholders throughout the audit lifecycle, while ensuring the confidentiality and integrity of sensitive audit information.