IAM & Insider Threat Risk Principal at AT&T
Alpharetta, GA
$155,400–$261,100from the description
Jul 23, 2026
Alpharetta, GA
Jul 24, 2026
What this job asks for AI summary
A senior cybersecurity risk management role focused on Identity and Access Management (IAM) and Insider Threat domains. Day-to-day work involves identifying and assessing risks, evaluating control effectiveness, managing remediation efforts, and advising stakeholders across technology and business teams. Suited to someone with deep enterprise experience in information security risk, governance frameworks, and IAM programs.
Senior level · 7+ years · Atlanta-Sandy Springs-Alpharetta, GA · Full-time
Advertised as Principal, but the requirements read as Senior.
“or” means any one of them counts — you don't need all of them.
Posted 3 times — it's one opening, so apply once.
We read this from the posting text with AI. Skim the description below before ruling yourself out.
How this req sits in the market our data
Roughly 330 people in the Atlanta-Sandy Springs-Alpharetta, GA area plausibly meet what this posting asks for (information security analysts). range 95–590
Applicant volume Moderate — A normal amount of company. The rare requirements below are what will separate a shortlisted application from the rest.
Most people in this occupation already list these. Still required — just not what gets you shortlisted.
What the occupation pays Median $134,382 (middle half $104,315–$168,301). This posting is about at that midpoint.
Estimated from BLS employment for this occupation and area, per-skill prevalence across our listing corpus, and published wage benchmarks — as of Jul 28, 2026. It is a model, not a headcount.
Why we read it this way (8)
The role is titled 'Principal Cybersecurity' by AT&T's internal job family, but the actual scope — risk management, control assessment, issues lifecycle, and stakeholder advisory within IAM and Insider Threat domains — maps most closely to Information Security Analysts (15-1212). 15-1299 is noted as a runner-up given the GRC/risk-management-program focus that doesn't fit neatly into pure security analysis.
The posting lists multiple office locations (Alpharetta GA, Atlanta GA, Bedminster NJ, Dallas TX, Middletown NJ, Charlotte NC); the primary CBSA is reported as Atlanta-Sandy Springs-Alpharetta, GA, the first-listed Georgia metro.
The bachelor's degree is explicitly labeled 'Preferred,' so the degree requirement is set to None.
The 7+ years overall experience requirement is captured as the overall years minimum; the 5–7 years in risk/control/governance disciplines is a sub-requirement within that range and is not separately broken out.
NIST and ISO appear together as interchangeable framework references ('e.g., ISO, NIST'); they are captured as a single skill with ISO as an alternative.
AI-specific threat assessment experience appears in the requirements section but is framed with 'strong understanding of' rather than hard-gate language, and reads more as a depth qualifier on the IAM requirement than a standalone gate; it is marked preferred.
The posting explicitly states no employer sponsorship will be provided.
Ignored 3 non-technology phrase(s) as skills (responsibilities/concepts, not named tools): Technology Risk Management, Information Security risk management, Issues Management lifecycle.
Read the full posting
The employer publishes the full description on their own site — read it there ↗. Or sign in to read it here — it's free, and it also lets you track this application.