Director, SASE Engineering

USAA•San Antonio, TX

1d•Hybrid

About The Position

USAA is seeking a Director, SASE Engineering to lead the engineering organization responsible for secure access, network security, and communications security platforms and services that protect and connect its workforce and technology environment. The director is accountable for strategy, architecture, engineering, modernization, resiliency, and lifecycle management of SASE and secure communications capabilities, including Cato, Proofpoint, Blue Coat, SD-WAN, secure web access, and email security. The role ensures services remain secure, highly available, scalable, and aligned with USAA’s evolving network and cloud strategy. The position requires working in the office four days per week and can be based in San Antonio, Texas. Relocation assistance is available. The director owns the strategic vision, policies, standards, and procedures for assigned information security domains; directs enterprise security operations and risk management; partners with senior leaders and the CISO; represents USAA in discussions with external regulators; and oversees governance, assurance, monitoring, staffing, and budgets. The role also builds and leads a team through recruiting, development, retention, coaching, performance management, and other managerial activities.

Requirements

Bachelor’s degree in Information Security, Information Technology, Computer Science, Business Administration, Information Systems/Management, or a related field; or four years of relevant education and/or experience.
Eight years of related information security experience in one or more domains, such as cybersecurity, identity and access management, information assurance and governance, operational risk management, or information technology, including significant accountability for projects, programs, processes, or policies.
Three years of direct team lead, supervisor, or management experience in an Information Security or Information Technology domain.
Four years of researching, designing, or implementing technology, information security, or cybersecurity solutions in a large financial institution or large enterprise information security program, with a record of delivering results in compliance with federal, state, and regulatory information security and risk management policies, standards, and guidelines.
Expert knowledge of relevant risk management and information security regulations and standards, such as FFIEC, Gramm-Leach-Bliley, the FFIEC Cybersecurity Assessment Tool, the NIST Cybersecurity Framework, and the Payment Card Industry Data Security Standard.
Strong knowledge of security technologies, including cryptography, authentication, authorization, and controls.
Strong knowledge of IT risks and experience implementing security solutions.
Knowledge of threats, vulnerabilities, attack methods, and countermeasures for web-based applications, networks, and cybersecurity solutions.
Demonstrated financial acumen involving budgets, forecasting, and budget execution for an information security, cybersecurity, or technology support function.
Expert business acumen in business operations, risk management, industry practices, and emerging trends.
Strong written and verbal communication skills, including the ability to communicate technical analyses to non-technical audiences.

Nice To Haves

Ten or more years of progressive leadership experience in information security, network security, or cybersecurity engineering.
Ability to lead enterprise rollouts and work with key stakeholders to ensure timely delivery of capabilities.
Demonstrated experience leading enterprise-scale SASE, SD-WAN, Secure Web Gateway, Email Security, or Zero Trust programs.
Deep knowledge of platforms such as Cato, Proofpoint, Blue Coat/Symantec, Zscaler, Palo Alto Prisma Access, Netskope, or equivalent technologies.
Proven experience managing large-scale security operations, engineering, and platform delivery teams.
Strong understanding of cloud security, network security architecture, identity and access management, and cybersecurity risk management.
Experience developing multi-year technology roadmaps and driving strategic transformation initiatives.
Demonstrated success partnering with executive leadership, architecture teams, audit, risk, compliance, and regulatory stakeholders.
Experience overseeing high-availability, mission-critical security services supporting large enterprise environments.
Relevant industry credentials such as CISSP, CISM, CCSP, or comparable identity/security credentials.

Responsibilities

Lead the SASE Engineering organization and establish its engineering strategy and multi-year roadmap for secure access, network security, and communications security platforms, infrastructure, integrations, and services.
Ensure the security, reliability, resiliency, availability, scalability, and recoverability of critical SASE and communications security services through engineering standards, health metrics, lifecycle management, capacity planning, performance expectations, and operational readiness practices.
Partner with Cybersecurity, Network, Infrastructure, Cloud, and application engineering teams to translate connectivity and security requirements into scalable capabilities for secure access to internet, SaaS, cloud, and enterprise resources.
Lead modernization and convergence toward a SASE architecture, including SD-WAN, Secure Web Gateway, Zero Trust Network Access, cloud-delivered security, email protection, policy automation, and reduction of legacy infrastructure and point solutions.
Own critical security domains or capabilities, develop multi-year roadmaps, and lead senior managers as applicable.
Establish and ensure compliant execution of the information security domain’s strategic vision, goals, and metrics; govern its policies, standards, and procedures.
Direct enterprise information security domain operations, including capacity, resilience, and dependability, and assess how changes in conditions, operations, or the environment affect system operation.
Develop, review, and communicate information security risk management policies and procedures in partnership with the CISO and other senior leaders.
Represent USAA in discussions with external regulators regarding the assigned information security domain.
Oversee continuous monitoring of cybersecurity activities and alert senior management to potential risks, compliance issues, and operational inefficiencies.
Develop, design, and deliver a sustainable governance and assurance model across multiple domains and the enterprise.
Identify, monitor, and evaluate operational solutions that reduce information security risk, meet compliance requirements, and improve workforce efficiency, business agility, and scalability.
Promote information security awareness across the enterprise and with the external security community.
Manage organizational budgets and staffing as a financial steward, ensuring resources cost-effectively meet organizational needs.
Build and oversee a team through recruiting, development, retention, coaching, support, performance management, and other managerial activities.
Ensure risks associated with business activities are identified, measured, monitored, and controlled in accordance with risk and compliance policies and procedures.