IT/IS SLOD Oversight Risk Management & Governance Executive

Job description

**Why USAA?**

At USAA, our mission is to empower our members to achieve financial security through highly competitive products, exceptional service and trusted advice.

We seek to be the #1 choice for the military community and their families.

Embrace a fulfilling career at USAA, where our core values – honesty, integrity, loyalty and service – define how we treat each other and our members.

Be part of what truly makes us special and impactful.

**The Opportunity**

USAA is seeking an **IT/Info Security Risk Management & Governance Executive** who needs to have expertise in **Risk Oversight - Second Line of Defense** .

This role sits within the Chief Risk Office for Technology.

We offer a flexible work environment that requires an individual to be **in the office 4 days per week.** This position can be based in one of the following locations: **Charlotte, NC** , San Antonio, TX, Tampa, FL with a preference for **Charlotte** .

**_*** Relocation assistance is available to Charlotte for this position ***_**

The successful candidate will serve as a key advisor responsible for recognizing and reporting Information Technology (IT) and Information Security (IS) strategic and aggregate risks across the business while advancing the Enterprise Risk Management function for aggregation, quantification, and qualification of risks.

Sets direction for risk management programs within IT/IS and leads all aspects of the delivery of those programs across the line of business.

Provide risk management and governance leadership, operational direction and operational oversight of Information Security, Business Continuity, Data Center Security, AI and Corporate Investigations domains and establish a best-in-class Risk Management framework for the Enterprise Security Group (ESG) to ensure comprehensive oversight and management of risks across the full risk taxonomy.

Ensures risks align within appetite tolerances and strategic goals, product plans, forecasts, and adjusts to variances.

Responsible for the aggregation and reporting of risks to senior leadership and effectively assessing and influencing business decisions and direction.

Contributes to the long-term strategy of how risk systems should be adapted and integrated to maximize the ability to manage risk in an environment shaped by regulatory change and disruptive, emerging technologies.

Ensures effective and appropriate policies, procedures, and controls are in place supporting all risk processes, systems, strategies, and implementations.

Additional responsibilities include but are not limited to:

+ Establishes trust and rapport with senior business leaders across the enterprise to sustain oversight of the **second line risk role.** Actively engages line of business leaders to ensure all risks are appropriately addressed consistent with policy and the Risk Appetite.
+ Partners with senior risk executives in managing overall risk appetite to include the identification and definition of key methods, metrics, and limits.

Influences and sets strategy for advancement of the risk management framework.
+ Partners across Risk Management, Finance, and the business while effectively challenging variances to plan and strategies to mitigate.

Provides advice to other key business partners and drive key decisions assessing risk and reward through effective challenge.
+ Liaises with Compliance and CLO on legal & regulatory considerations that impact business operations and product offerings in accordance with federal and state regulations.

Influences sound governance structure for oversight of risks and business operations and interacts & engages with all product & channel leaders on complex, multi-product processes and procedures while factoring in all legal & regulatory requirements.
+ Assists in interactions and briefs on domain of responsibility with **regulators from the OCC, FED, FDIC, and CFPB** as well as prepare Board and Senior Management level reports related to IT/IS risk.
+ Builds and oversees a team of employees (~5 direct reports / 20-30 team size to start) for assigned functional area through ongoing execution of recruiting, development, retention, coaching and support, performance management, and managerial activities.

**Minimum Education:**

+ Bachelor’s degree; OR 4 years of related experience (in addition to the minimum years of experience required) may be substituted in lieu of degree.

**Minimum Experience:**

+ 10+ years of risk management, regulatory or operations experience in a functional area such as insurance, banking, or financial services with 5+ years of this experience focused on Information Security, Business Continuity, Physical Security or Corporate Investigations.
+ 4+ years of people leadership experience in building, managing and/or developing high-performing teams.
+ Industry certification(s) in Information Security (e.g., **CISSP** , CISM) or Business Continuity (e.g., ABCP, CBCP) or Risk Management (e.g., **CRISC** ) or Physical Security (e.g., CPP).
+ Demonstrated experience working with and applying Risk, Security or Audit frameworks ( **FFIEC, COBIT, COSO, ISO 27001/2, NIST 800-53, SSAE16** ).
+ Knowledge of applicable laws, rules, and regulations applicable to financial institutions.
+ Experience making data-driven decisions.
+ Experience working with external agencies and regulators.
+ Broad knowledge of information technology systems and general system development principles.

**What sets you apart:**

+ 7+ years of risk management, regulatory or operations experience in a functional area such as **insurance, banking, or financial services.**
+ 10+ years experience focused on **Information Security, Data, Risk Management** , evaluating the design and development of software.
+ 3+ years experience with **artificial intelligence (AI)** and machine learning principles, including responsible AI use case evaluations and deployment.
+ 10+ years hands-on experience integrating security throughout the **Software Development Lifecycle (SDLC)** , including component analysis, static and dynamic scanning (SAST/DAST), penetration testing, and comprehensive application security testing across build, deploy, and maintenance phases.
+ Proven ability to develop high-impact materials and deliver concise, insight-driven presentations to executive leadership, translating complex concepts into actionable recommendations that influence strategic decision-making.

**Compensation range:** The salary range for this position is: $169,880.00 - $305,780.00 **.**

**USAA does not provide visa sponsorship for this role.

Please do not apply for this role if at any time (now or in the future) you will need immigration support (i.e., H-1B, TN, STEM OPT Training Plans, etc.).**

**Compensation:** USAA has an effective process for assessing market data and establishing ranges to ensure we remain competitive.

You are paid within the salary range based on your experience and market data of the position.

Employees may be eligible for pay incentives based on overall corporate and individual performance and at the discretion of the USAA Board of Directors.

The above description reflects the details considered necessary to describe the principal functions of the job and should not be construed as a detailed description of all the work requirements that may be performed in the job.

Long Term Incentive Plan: Cash payment for Executive level roles only, representing a cash payment which is both time and performance based.

**Benefits:** At USAA our employees enjoy best-in-class benefits to support their physical, financial, and emotional wellness.

These benefits include comprehensive medical, dental and vision plans, 401(k), pension, life insurance, parental benefits, adoption assistance, paid time off program with paid holidays plus 16 paid volunteer hours, and various wellness programs.

Additionally, our career path planning and continuing education assists employees with their professional goals.

For more details on our outstanding benefits, visit our benefits page on USAAjobs.com.

_Applications for this position are accepted on an ongoing basis, this posting will remain open until the position is filled.

Thus, interested candidates are encouraged to apply the same day they view this posting._

_USAA is an Equal Opportunity Employer.

All qualified applicants will receive consideration for employment without regard to race, color, religion, sex, sexual orientation, gender identity, national origin, disability, or status as a protected veteran._

**If you are an existing USAA employee, please use the internal career site in OneSource to apply.**

**Please do not type your first and last name in all caps.**

**_Find your purpose.

Join our mission._**

USAA is unlike any other financial services organization.

The mission of the association is to facilitate the financial security of its members, associates and their families through provision of a full range of highly competitive financial products and services; in so doing, USAA seeks to be the provider of choice for the military community.

We do this by upholding the highest standards and ensuring that our corporate business activities and individual employee conduct reflect good judgment and common sense, and are consistent with our core values of service, loyalty, honesty and integrity.

USAA attributes its long-standing success to its most valuable resource: our 35,000 employees.

They are the heart and soul of our member-service culture.

When you join us, you'll become part of a thriving community committed to going above for those who have gone beyond: the men and women of the U.S. military, their associates and their families.

In order to play a role on our team, you don't have to be connected to the military yourself – you just need to share our passion for serving our more than 13 million members.

USAA is an EEO/AA Employer - applicants will receive consideration for employment without regard to race, color, religion, sex, national origin, age, disability, genetic information, sexual orientation, gender identity or expression, pregnancy, protected veteran status or other status protected by law.

California applicants, please review our HR CCPA - Notice at Collection (https://statmcstg.usaa.com/mcontent/static_assets/Media/enterprise_hr_cpra_notice_at_collection.pdf) here.
USAA is an EEO/AA Employer - applicants will receive consideration for employment without regard to race, color, religion, sex, national origin, age, disability, genetic information, sexual orientation, gender identity or expression, pregnancy, protected veteran status or other status protected by law.

Required Skill Profession

Other General