Sr Specialist Cybersecurity - Control Testing - IT General Controls (ITGC), Cloud Security Controls, Application Security Controls, Information Security Controls, SOX Control Testing

Role: Sr Specialist Cybersecurity - Control Testing - ITGC / SOX Control Testing About the Job The CA (Controls Assurance) team is part of the Chief Security Office (CSO) and is responsible for testing information technology and information security controls owned and operated by AT&T Technology Services (ATS), including CSO. This Senior Specialist will work closely with control owners, control operators, technology teams, business process owners, transformation stakeholders, and technology leadership to identify gaps in control design and operating effectiveness across AT&T’s control environment. The professional in this role will independently test IT General Controls, Cloud security controls, critical application security controls, business process controls, IT-dependent manual controls, automated controls, and other technology or security controls. The ideal candidate will bring a strong combination of telecom industry experience, control design expertise, assurance and testing experience, and process / technology transformation exposure. Big 4 Manager or equivalent who has led or executed complex control testing, technology risk, SOX, ITGC / ITAC, business process controls, or technology transformation assurance engagements. Experience Level 8+ years of experience. Location Hyderabad / Bengaluru Responsibilities Include Work with CTR leadership to understand control testing priorities and support annual test planning, risk-based prioritization, scope definition, and control testing execution. Independently execute complex engagements from the annual testing plan or discrete risk-based reviews, including test script preparation, walkthroughs, evidence review, issue identification, stakeholder alignment, documentation, and reporting to senior ATS stakeholders. Test IT General Controls, IT Application Controls, automated controls, IT-dependent manual controls, cloud security controls, critical application security controls, and business process controls. Evaluate control design and operating effectiveness across technology platforms, telecom systems, applications, infrastructure, data flows, and business processes. Partner with external auditors, internal stakeholders, technology teams, control owners, and business process owners to drive efficient testing, evidence collection, issue resolution, and audit readiness. Provide analysis of complex technology and security control issues and clearly articulate risk to AT&T assets, including devices, networks, applications, data, customers, and business objectives. Support reporting of test results, open issues, risk themes, control gaps, and remediation progress to leadership and relevant stakeholders. Bring a process transformation mindset by identifying opportunities to improve control design, reduce control complexity, increase automation, and strengthen preventive and detective controls.