Responsible for cyber security areas across products, services, infrastructure, networks, and/or applications while providing protection for AT&T, our customers and our vendors/partners. Works with senior team members on various projects relating to the protection of devices, customers, assets, data, information technology, and networks. Supports innovation, strategic planning, technical proof of concepts, testing, lab work, and various other technical program management related tasks associated with the cyber security programs. Includes ideation, testing, proof of concept and support for various cyber related projects.Analysis, of complex security issues and the development and engineering activities to help mitigate risk.Responsible for the implementation of the National Institute of Standards and Technology (NIST) Special Publication 800-37, Guide for Applying the Risk Management Framework (RMF). Primary, responsible for leading the asset RMF team and submitting/creating status reports. Coordinate with the Information System Security Analysts (ISSAs), and system administrators for control implementation and Plans of Actions and Milestones (POA&Ms) closeout requirements.Ensure systems designs support incorporation to customer continuous monitoring solutions (i.e., Vulnerability Alerts, Splunk, Enterprise Scanning, etc.). Serve as the point of contact for compliance for areas of responsibility.Coordinates with SMEs preparation of data responses in support of audits.Work closely with business partners to align overlapping compliance efforts and eliminate redundant work.Perform other tasks as necessary to ensure that the Compliance meets its commitments to customers.Reviews all audit related requests and engages the teams to resolve as needed.Ensures compliance programs, projects, and work activities adhere to AT&T Security Policy & Requirements.Supporting the customers by providing Cyber Security Architecture Analysis and Security Engineering Support. Ensuring cyber security is baked into the design of new/existing operational environments. Perform and review technical security assessments of computing environments to identify points of vulnerability, non-compliance with established cybersecurity standards and regulations, and recommend mitigation strategies. Prepare, plan, conduct, and report IT Compliance assessments in accordance with industry best practices and established regulatory standards and requirements (e.g. SOX, PCI, ISO27001, NIST SP800-53, NERC CIP v5, SOX, FERC, FCC/FAA)