Executive Director, Technology Business Risk and Controls – Data and AI

USAA

. Lead implementation and advancement of Technology Business Risk and Controls programs, operating models, and roadmaps across assigned technology organizations .

Posted 11/4/2026full-timeUnited StatesLead💰 $169,880 - $305,780 per yearWebsite

Core Competencies

Role fit

Core Competencies

Use this summary to align your resume positioning with the role.

Demonstrates expertise in Technology Risk Management, Compliance, and Controls, with a strong focus on regulatory requirements and operational risk concepts. Proven ability to lead teams, drive risk initiatives, and leverage data analytics for informed decision-making.

Highest-signal resume keywords

Technology Risk ManagementRegulatory ComplianceInformation SecurityData GovernancePeople Leadership

ATS Keywords

Tailor your resume

Applicant Tracking System Keywords

Tip: use these terms in your resume and cover letter to boost ATS matches.

Hard Skills

Risk AssessmentControl FrameworksCloud TechnologiesSDLCIncident ManagementVulnerability ManagementChange ManagementOperational ResiliencyData AnalyticsAutomation

Soft Skills

Exceptional CommunicationRelationship ManagementExecutive Presence

Tools & Technologies

NISTCOBITISO 27001FFIEC GuidanceContinuous Monitoring

Certifications & Qualifications

CISSPCISMCRISCCGEITCDPSECIPPCDMPAIGP

Industry Keywords

Technology OperationsCybersecurityInformation GovernanceAuditRisk Management

Tech Stack

Tools & technologies

CloudCyber SecuritySDLC

About the role

Key responsibilities & impact

Lead implementation and advancement of Technology Business Risk and Controls programs, operating models, and roadmaps across assigned technology organizations
Advise senior technology leaders on information technology, cyber, data, AI, resiliency, and operational risk matters
Oversee association-scale risk identification, assessment, measurement, monitoring, and control activities across technology infrastructure, software development, cloud environments, information security, data governance, third-party technology services, and emerging technologies
Design, implement, and continuously improve first-line technology risk and control programs, including risk and control self-assessments, issue management, control monitoring, risk indicators, loss event management, and governance processes
Partner with Risk Management, Compliance, Audit, and Legal to address complex risk matters and drive remediation
Lead first-line engagement activities for regulatory examinations, internal audits, external audits, and risk reviews
Identify emerging technology, cyber, data, and operational risk themes and systemic control weaknesses through analytics, trend analysis, and industry intelligence
Oversee development, monitoring, and reporting of technology risk metrics and key risk indicators for senior leadership and governance committees
Build and oversee a high-performing team through recruiting, development, retention, coaching, performance management, and managerial activities
Ensure risks associated with business activities are identified, measured, monitored, and controlled in accordance with risk and compliance policies and procedures

Requirements

What you’ll need

Bachelor's degree in Business, Information Technology, Information Security, Information Management, Risk Management, Finance, or a related field
10 years of progressive experience supporting technology risk, compliance, controls, audit, cybersecurity, information governance, technology operations, or related disciplines within a highly regulated environment
5-8 years of direct experience in information technology, information security, data governance, technology operations, infrastructure, engineering, architecture, cloud technologies, or related technical fields
4 years of direct people leadership experience, including leadership of managers, large teams, or multiple functional areas
Executive-level knowledge of industry-related regulatory requirements and operational risk concepts
Experience leading complex, cross-functional risk, controls, governance, remediation, or regulatory initiatives
Strong understanding of technology risk management principles, control frameworks, and industry standards, including NIST, COBIT, ISO 27001, FFIEC guidance, and related regulatory expectations
Deep knowledge of technology and data processes, including SDLC, change management, access management, privileged access controls, vulnerability management, incident management, cloud technologies, operational resiliency, and information governance
Experience leading or supporting regulatory examinations, internal audits, external audits, issue management, and remediation programs
Ability to leverage data, analytics, and risk intelligence to identify emerging risks, evaluate control effectiveness, and influence risk-based business decisions
Experience leveraging automation, AI, analytics, and continuous monitoring capabilities to modernize assurance and testing programs
Exceptional communication, executive presence, and relationship-management skills
USAA does not provide visa sponsorship; applicants must not require immigration support now or in the future
Master's degree in Cybersecurity, Computer Science, Data Science, Artificial Intelligence, Information Systems, Risk Management, or a related field (preferred)
Professional certifications such as CISSP, CISM, CRISC, CGEIT, CDPSE, CIPP, CDMP, AIGP, or equivalent (preferred)
US military experience through military service or a military spouse/domestic partner (preferred)

Benefits

Comp & perks

Flexible work environment with remote or hybrid flexibility for active-duty military spouses consistent with applicable policy and business needs
Relocation assistance
Pay incentives based on overall corporate and individual performance, at the discretion of the USAA Board of Directors
Long Term Incentive Plan cash payment for Executive level roles, time and performance based
Comprehensive medical, dental and vision plans
401(k)
Pension
Life insurance
Parental benefits
Adoption assistance
Paid time off program
Paid holidays
16 paid volunteer hours
Wellness programs
Career path planning
Continuing education