Senior Information Security & Privacy Advisor- Risk & Controls

USAA • Tampa, FL

23h • Hybrid

About The Position

As a dedicated Senior Information Security & Privacy Advisor- Risk & Controls, you will provide critical support and hands-on expertise in managing Information Security and Privacy risks and controls across various technology initiatives. This role is pivotal in identifying and assessing risks, driving remediation efforts for audit and exam findings, managing security-related issues, and conducting rigorous control testing and validation. The ideal candidate will be highly technical, with a proven ability to translate complex risk landscapes into actionable plans, deliver timely results, and expertly navigate through uncertainties and evolving threat environments. This individual will partner closely with engineering, product, and other business units to ensure robust security controls are implemented and maintained, fostering a proactive risk management culture. Positioned in the first line of defense to ensure the overall effectiveness of risk and compliance management programs, risk analytics and operations in the business. This role will partner and collaborate with Compliance and Risk Management, as well as Business Operations, IT, Audit Services, and Regulators to support risk and compliance-based initiatives. Responsible for supporting business leader adherence to the established risk framework and ongoing supervision of business controls including risk and control self-assessments, identification and evaluation of control effectiveness, identifying control failures, facilitating risk and compliance remediation, internal and external audits and regulatory exams, and monitoring of the first line of defense to minimize risk exposures and strengthen the overall control environment. Manages risk assessment data and uses critical thinking to identify key data-driven insights tied to first line of defense. We offer a flexible work environment that requires an individual to be in the office 4 days per week. This position can be based in one of the following locations: San Antonio; TX, Plano; TX, Phoenix; AZ, Charlotte; NC, Tampa; FL, Colorado Springs; CO. Relocation assistance is not available for this position.

Requirements

• Bachelor’s degree; OR 4 years of related experience (in addition to the minimum years of experience required) may be substituted in lieu of degree.
• 6 years of experience supporting risk-related, compliance related, or business control design activities; OR 6 years of experience in a relevant quantitative discipline; OR Advanced degree or designation in a risk management or quantitative discipline, and 4 years of experience supporting risk-related, and/or compliance-related, or business control design activities; OR PhD in a risk management or quantitative discipline, and 2 years of experience supporting risk-related, and/or compliance-related, or business control design activities.

Nice To Haves

• Deep technical understanding of Cybersecurity principles, common vulnerabilities, and security control mechanisms across various domains (e.g., network security, endpoint security, cloud security, application security).
• Certifications such as CISSP, CISM, CRISC, CIPP, or GIAC certifications are highly desirable.
• Familiarity with security frameworks (e.g., NIST Cybersecurity Framework, ISO 27001) and their application in control design and assessment.
• Demonstrated ability to manage complex issues and drive them to resolution in dynamic and uncertain environments.
• Excellent communication and interpersonal skills, with the ability to influence and collaborate effectively with technical and non-technical stakeholders

Responsibilities

• Manages and drives solutions for stronger controls, and in support of risk and/or regulatory compliance related initiatives which may include: oversight of procedures/process, accurate regulatory reporting and filing, document governance, risk control self-assessments, procedure governance, control design, new product controls, CoSA Third Party Governance, or quality governance.
• Performs ongoing supervision and oversight of business controls and shares knowledge with team members to evaluate the effectiveness of established business controls.
• Responsible for risk data analysis, report preparation and trend analysis, utilizing business intelligence tools.
• Anticipates business needs and proactively identifies opportunities to improve and strengthen the control environment through actionable insights.
• Assists with translating control deficiencies into action plans and provides recommendations to enhance governance practices in alignment with risk and compliance frameworks.
• Partners with stakeholders to drive improvement efforts to correct or prevent unfavorable trends and assess the impacts.
• Leads project team through concept, planning, execution, and implementation phases for effective and timely risk remediation.
• Advises senior management on the status of their control environment related to risk identification and control weaknesses.
• Identifies critical areas to monitor and escalates issues and findings to appropriate stakeholders.
• Develops and maintains processes, procedures and tools for managing exception alerts as they occur, including monitoring of resulting exception cases.
• Provides control oversight to ensure compliance with laws and regulations.
• Serves as a primary resource to team members.
• Ensures risks associated with business activities are effectively identified, measured, monitored, and controlled in accordance with risk and compliance policies and procedures.

Benefits

• At USAA our employees enjoy best-in-class benefits to support their physical, financial, and emotional wellness.
• These benefits include comprehensive medical, dental and vision plans, 401(k), pension, life insurance, parental benefits, adoption assistance, paid time off program with paid holidays plus 16 paid volunteer hours, and various wellness programs.
• Additionally, our career path planning and continuing education assists employees with their professional goals.
• For more details on our outstanding benefits, visit our benefits page on USAAjobs.com.

What This Job Offers

• Job Type: Full-time
• Career Level: Senior