Risk and Compliance Advisor I

USAA•Tampa, FL

1d•$85,040 - $162,550•Hybrid

About The Position

The Risk and Compliance Advisor I provides independent second-line oversight, effective challenge, and risk guidance to support business products, services, and processes within an established risk and compliance framework. The role partners with business leaders and stakeholders to identify, assess, and manage risk exposures while helping ensure adherence to applicable policies, regulatory requirements, and enterprise risk standards. The advisor supports a strong risk culture by providing insights, monitoring emerging risks, and recommending practical solutions that balance business objectives with sound risk management practices. The ideal candidate is a technology risk professional who can bridge policy requirements and operational execution, with an understanding of governance, risk, and compliance frameworks. The position requires experience with risk assessment methodologies, control mapping, exception management, and working with First Line of Defense partners. The work environment is flexible but requires being in the office four days per week. The position may be based in San Antonio, Texas; Charlotte, North Carolina; or Tampa, Florida. Relocation assistance is not available.

Requirements

Bachelor's degree, or four years of relevant education and/or experience.
At least four years of experience in risk management, cybersecurity, information security, or a related field.
Foundational understanding of Secure Software Development Lifecycle methodologies.
Knowledge of IT Change and Release Management.
Foundational understanding of risk management principles and frameworks, including NIST, COBIT, ISO 27001, ITIL, and ITGC, as well as controls.
Knowledge of FFIEC guidance and regulatory expectations.
Experience supporting First Line of Defense technology risk functions.
Strong verbal and written communication skills, including the ability to present complex concepts to technical and non-technical audiences.
Organization and planning skills to set priorities and plan, prioritize, and execute workload.
Ability to partner effectively with stakeholders and influence decision-making through data-driven insights.

Nice To Haves

Experience in Technology Risk Management, Information Technology, Information Security, IT Audit, or Business Risks and Controls with an information technology emphasis.
Experience evaluating the design and effectiveness of technology controls and assessing whether residual risk is understood, appropriately rated, and managed within risk appetite.
Strong technical aptitude for distributed and Mainframe CI/CD pipelines.
Experience applying technology risk methodologies, standards, procedures, governance routines, and reporting requirements to promote consistent execution.
Experience monitoring material technology risks, control weaknesses, issues, exceptions, and dependencies, and escalating concerns when exposure or remediation progress warrants attention.
Experience reviewing and challenging technology-related issues and action plans for clear root cause, sustainable corrective action, appropriate milestones, supporting evidence, and timely closure.
Strong ability to partner effectively with stakeholders and influence decision-making through data-driven insights.
Exceptional verbal and written communication skills, including the ability to present complex concepts to technical and non-technical audiences.
US military experience gained through military service or as a military spouse or domestic partner.
Completion of relevant industry certifications such as CISSP, CSSLP, CISA, CISM, or CRISC.

Responsibilities

Partner with business stakeholders to identify, assess, aggregate, and document risk and compliance controls, including risks associated with new or modified products, services, distribution channels, regulations, and third-party operations.
Communicate results of risk and compliance work to governance committees, business process owners, and leadership at various levels.
Contribute to implementing risk and compliance policies, practices, appetites, and solutions to promote holistic risk understanding and management consistent with industry best practices.
Execute assigned risk or compliance activities in accordance with enterprise policies and procedures.
Maintain and expand knowledge of the competitive and regulatory landscape and the company's key challenges.
Review laws and regulations for business impact and propose awareness and action.
May coordinate and respond to regulatory requirements and requests and ensure examinations are executed.
Perform risk and compliance process work that enhances strategies, tools, and methodologies for measuring, monitoring, and reporting risks.
Assess data and produce analytical insights to understand business objectives, drive decisions, and influence solution strategies.
Contribute to cross-functional teams identifying, assessing, aggregating, and mitigating current and emerging risk events.
Contribute to stress test plans for a line of business or the enterprise, including evaluating results and framing contingency plans with business stakeholders.