below marketmost similar roles pay hereabove market
This role pays more than
67%
of similar roles. Most pay
$151,475–$208,800
— the blue band above.
At the midpoint, this role pays about
$198k
versus about
$180k
for comparable roles.
Based on 240 similar postings.
Employer
About AT&T
AT&T is a US-based telecommunications company providing wireless, broadband, and fiber internet service along with phone and connectivity products for consumers and businesses.
AT&T currently has
100 open roles
on FindRole.
Listed pay typically runs
$106,000–$198,358
across 91 roles with salary data.
The Principal Technology Security - ISSO joins the Integrity, Compliance & Risk Management Team to provide technical leadership for the Federal Aviation Administration - Enterprise Network Services program. This role involves translating FISMA, FEDRAMP, and NIST Risk Management Framework mandates into scalable security practices. You will lead the full cybersecurity compliance lifecycle, including system categorization, control tailoring, and Authorization to Operate processes. Daily tasks include developing authorization packages, overseeing security control assessments, and managing POA&M governance. You will utilize Xacta, ServiceNow, and Tenable Security Center to monitor vulnerabilities and automate evidence collection. Key responsibilities include performing security architecture reviews across cloud and network domains while applying Zero Trust principles. The role ensures that all systems meet stringent federal security requirements and contractual obligations throughout the entire system lifecycle.
Lead NIST RMF lifecycle activities including system categorization, control selection, implementation, assessment, and continuous monitoring using Xacta.
Translate FISMA, FEDRAMP, and agency policies into actionable security control plans and technical standards.
Develop and quality-assure authorization packages including system security plans, risk assessments, and privacy artifacts.
Oversee security control assessments to identify implementation deficiencies and verify corrective actions.
Manage POA&M governance using Xacta and ServiceNow to prioritize and track vulnerability remediation.
Establish continuous-compliance practices using automated evidence, security baselines, and Tenable Security Center data.
Perform security architecture reviews across identity, network, cloud, and data domains to identify control gaps.
Communicate security posture and residual risk to executive stakeholders using compliance trends and vulnerability metrics.
What we're looking for
Must possess a Bachelor’s degree.
Must have an active CISSP certification.
Must have a Public Trust security clearance.
CSM, Sec+, or CCNA certifications (preferred).
Advanced proficiency with Xacta 360 or comparable GRC platforms (preferred).
Hands-on experience with Tenable Security Center and enterprise vulnerability management (preferred).
Working knowledge of the ServiceNow ecosystem, including GRC and vulnerability management (preferred).
Experience with FEDRAMP and CMMC Certification Process and certified cloud service deployment (preferred).
Risk Management Framework
RMF
DoD 8570
IAM Level I
Information Assurance
Configuration Management
Encryption
Communication Protocols
System Security Plans
POA&M
CONOPS
Security Operations
Classified Systems
ODNI
DoD Policies