Risk and Compliance Advisor I

USAA•Charlotte, NC

4d•Hybrid

About The Position

The Risk and Compliance Advisor I provides independent second-line oversight, effective challenge, and risk guidance for business products, services, and processes within an established risk and compliance framework. The role partners with business leaders and stakeholders to identify, assess, and manage risk exposures, support adherence to policies and regulatory requirements, and promote a strong risk culture through insights, emerging-risk monitoring, and practical recommendations. This technology risk professional bridges policy requirements and operational execution. The position requires a solid understanding of governance, risk, and compliance frameworks, risk assessment methodologies, control mapping, exception management, and collaboration with First Line of Defense (FLOD) partners. The role performs risk and compliance activities, supports policy and process implementation, reviews regulatory requirements, develops analytical insights, and contributes to cross-functional risk mitigation and stress-testing work. The position requires working in the office four days per week and may be based in San Antonio, Texas; Charlotte, North Carolina; or Tampa, Florida. Relocation assistance is not available. USAA does not provide visa sponsorship for this role.

Requirements

Bachelor's degree, or four years of relevant education and/or experience.
At least four years of experience in risk management, cybersecurity, information security, or a related field.
Foundational understanding of Secure Software Development Lifecycle methodologies.
Knowledge of IT Change and Release Management.
Foundational understanding of risk management principles and frameworks, including NIST, COBIT, ISO 27001, ITIL, and ITGC, as well as controls.
Knowledge of FFIEC guidance and regulatory expectations.
Experience supporting First Line of Defense (1LOD) technology risk functions.
Strong verbal and written communication skills, including the ability to present complex concepts to technical and non-technical audiences.
Organization and planning skills to set priorities and plan, prioritize, and execute workload.
Ability to partner effectively with stakeholders and influence decision-making using data-driven insights.

Nice To Haves

Experience in Technology Risk Management, Information Technology, Information Security, IT Audit, or Business Risks and Controls with an information technology emphasis.
Experience evaluating technology-control design and effectiveness, and assessing whether residual risk is understood, appropriately rated, and managed within risk appetite.
Strong technical aptitude for distributed and Mainframe CI/CD pipelines.
Experience applying technology risk methodologies, standards, procedures, governance routines, and reporting requirements to promote consistent execution.
Experience monitoring material technology risks, control weaknesses, issues, exceptions, and dependencies, and escalating concerns when exposure or remediation progress warrants attention.
Experience reviewing and challenging technology-related issues and action plans for clear root cause, sustainable corrective action, appropriate milestones, supporting evidence, and timely closure.
Strong ability to partner effectively with stakeholders and influence decision-making through data-driven insights.
Exceptional verbal and written communication skills, including the ability to present complex concepts to technical and non-technical audiences.
US military experience gained through military service or as a military spouse or domestic partner.
Relevant industry certifications such as CISSP, CSSLP, CISA, CISM, or CRISC.

Responsibilities

Partner with business stakeholders to identify, assess, aggregate, and document risk and compliance controls, including risks related to new or modified products, services, distribution channels, regulations, and third-party operations.
Communicate risk and compliance work results to governance committees, business process owners, and leadership at various levels.
Contribute to implementation of risk and compliance policies, practices, appetites, and solutions, supporting holistic risk understanding and management.
Execute assigned risk or compliance activities in accordance with enterprise policies and procedures.
Maintain and expand knowledge of the competitive and regulatory landscape and the company's key challenges.
Review laws and regulations for business impact and propose awareness and action.
Coordinate and respond to regulatory requirements and requests, as applicable, and ensure examinations are executed.
Work on risk and compliance processes that improve strategies, tools, and methodologies for measuring, monitoring, and reporting risks.
Assess data and produce analytical insights to understand business objectives, drive decisions, and influence solution strategies.
Contribute to cross-functional teams to identify, assess, aggregate, and mitigate current and emerging risk events.
Contribute to stress-test plans for a business line or the enterprise, including evaluating results and framing contingency plans with business stakeholders.