Risk and Compliance Advisor Lead – Technology AI Risk Management

USAA•Tampa, FL

2d•$143,320 - $273,930•Hybrid

About The Position

We are seeking a Lead Technology AI Risk Management Professional with extensive experience providing Second Line of Defense (SLOD) oversight for AI, Generative AI, data, and emerging technology initiatives within the financial services or insurance industry. The ideal candidate possesses deep expertise in technology risk, compliance, data governance, cybersecurity, and regulatory requirements, with a proven ability to assess complex AI use cases, challenge control effectiveness, and influence risk-based business decisions. This individual will have strong knowledge of leading AI and GenAI platforms, including large language models (LLMs), open-source technologies, Microsoft Copilot, OpenAI, Anthropic, and Amazon Q, as well as data protection, privacy, encryption, access management, and cloud-based technologies. Working across business, technology, legal, compliance, and audit functions, the successful candidate will drive AI governance, provide credible challenge to senior stakeholders, identify emerging risks, and help ensure the responsible, secure, and compliant adoption of AI capabilities across the enterprise. We offer a flexible work environment that requires an individual to be in the office 4 days per week. This position can be based in one of the following locations: Charlotte, NC, or Tampa, FL. Relocation assistance is not available for this position.

Requirements

Bachelor's degree; OR 4 years of relevant education and/or experience.
8+ years of progressive experience in risk management, compliance, technology risk, information security, audit, legal, data governance, or regulatory oversight within financial services, insurance, or other highly regulated industries, including experience supporting emerging technologies, AI, and Generative AI initiatives.
Extensive experience leading risk and compliance programs within large, complex, and highly matrixed organizations, with a demonstrated ability to navigate competing priorities, influence stakeholders, and drive effective risk management outcomes across multiple business and technology functions.
Expert knowledge of applicable laws, regulations, supervisory guidance, and industry frameworks, including those related to technology, data management, cybersecurity, model risk management, privacy, and the evolving regulatory landscape governing AI and Generative AI.
Demonstrated ability to serve as a trusted advisor by translating regulatory requirements, emerging risks, and industry best practices into actionable guidance, governance requirements, and business-focused risk solutions for executive leadership and key stakeholders.
Proven experience providing credible challenge and independent oversight, including the ability to effectively influence decisions, resolve conflicts, negotiate risk treatment strategies, and drive accountability across all levels of management, including senior executives.
Strong analytical, critical thinking, and problem-solving capabilities, including experience leveraging data analysis techniques, risk metrics, key risk indicators (KRIs), trend analysis, and reporting to support fact-based decision-making and executive-level risk insights.
Advanced proficiency with Microsoft 365 and productivity technologies, including Word, Excel, PowerPoint, Teams, and Copilot, with experience developing executive presentations, risk dashboards, governance reporting, and data-driven insights for senior leadership.
Demonstrated leadership in balancing innovation with risk management, enabling responsible adoption of AI technologies while maintaining strong governance, regulatory compliance, customer trust, and organizational resilience.

Nice To Haves

Preferred experience overseeing AI and Generative AI governance programs, including AI risk assessments, model governance, responsible AI controls, third-party AI evaluations, AI regulatory compliance, and implementation of frameworks such as NIST AI RMF, ISO 42001, and enterprise AI governance standards.
Demonstrated experience developing, implementing, or overseeing enterprise AI governance, responsible AI, and AI ethics frameworks, including policies, standards, risk appetite statements, control requirements, and governance processes aligned with regulatory and industry expectations.
Proven ability to advise senior leaders and business stakeholders on AI-related risks, including data privacy, explainability, fairness, transparency, bias mitigation, human oversight, and responsible use of AI and Generative AI technologies.
Deep understanding of Second Line of Defense (SLOD) risk management, compliance, and governance practices supporting AI and GenAI initiatives within highly regulated financial services and insurance environments.
Strong knowledge of AI/GenAI technologies and ecosystems, including large language models (LLMs), foundation models, AI agents, open-source frameworks, and leading platforms such as Microsoft Copilot, OpenAI, Anthropic, Amazon Q, Azure OpenAI, and Google Gemini.
Experience assessing and challenging AI solution designs, identifying technology and model risks, evaluating control effectiveness, and defining risk mitigation requirements that enable responsible innovation while protecting the enterprise.
Familiarity with cloud-native AI architectures and MLOps practices within AWS, Microsoft Azure, and Google Cloud Platform environments, including model deployment, monitoring, lifecycle management, performance validation, and operational risk considerations.
Strong understanding of data governance, data risk management, and information protection principles, including data classification, encryption, access management, PII handling, data lineage, retention requirements, and compliance with privacy regulations and industry standards.
Proven success leading complex projects, programs, or portfolios involving cross-functional stakeholders across technology, risk, compliance, legal, audit, and business organizations.
Expertise in evaluating and governing third-party and cloud-based AI/SaaS solutions, including security controls, vendor risk assessments, data protection requirements, resiliency considerations, and regulatory compliance obligations.
Strong background in cybersecurity, information security, and technology risk management, including cloud security, secure development practices, identity and access management, cyber resilience, and emerging threats associated with AI and GenAI technologies.
Experience applying risk and control frameworks such as NIST AI RMF, NIST CSF, ISO 42001, ISO 27001, FFIEC guidance, OCC expectations, NYDFS requirements, and emerging AI regulatory and supervisory standards.
Professional certifications such as CRISC, CISM, CRCM, CIPP, FAIR, CISSP, or ABA Risk Management Certification are strongly preferred.
AI and technology certifications such as ISACA Certified in Emerging Technology (CET), Microsoft Azure AI Fundamentals (AI-900), Azure AI Engineer Associate, IBM AI Engineering Professional Certificate, or comparable credentials are highly valued.
Exceptional communication and executive influence skills, with a demonstrated ability to translate complex AI, cybersecurity, and technology risks into clear, actionable insights for senior leadership, risk committees, regulators, and auditors.
Recognized as a trusted advisor capable of balancing innovation and risk management while shaping enterprise AI governance strategies, risk frameworks, and oversight programs that support safe and responsible AI adoption at scale.

Responsibilities

Routinely communicates results of risk assessments to governance committees, business process owners and various levels of leadership and influences decision making.
Develops processes and procedures for successful implementation of new risk policies, practices, appetites, and solutions to ensure holistic understanding and management of risks according to industry best practice.
Identifies and seeks key stakeholders across the enterprise to support the identification, assessment, aggregation and the overall management of risks and controls.
Crafts key communications related to risk and compliance insights to be delivered to executives and board members.
Executes compliance risk management activities in accordance with enterprise compliance standards.
Maintains and expands expert knowledge of the competitive/regulatory landscape and the company's key challenges. Keeps abreast of the competitive/regulatory landscape and shares expert knowledge w/team members.
Coordinates and responds to regulatory requirements and requests and ensures the execution of examinations.
Applies expert knowledge to utilize or produce analytical material for discussions with cross functional teams to understand business objectives and influence solution strategies.
Leads, assembles, and facilitates cross-functional teams to identify, assess, aggregate, and mitigate current and emerging risk events.
Serves as the point of contact for senior risk leadership on projects and special management requests that often impact the enterprise or core operating area.
Formulates and reviews stress test plans for a line of business or the enterprise.