Lead Technology Risk and Controls Advisor

USAA

. Direct and oversee IT risk assessment and management for IT systems, applications, infrastructure, and data .

Posted 10/30/2026full-timeSan Antonio • Texas • United StatesSenior💰 $143,320 - $273,930 per yearWebsite

Core Competencies

Role fit

Core Competencies

Use this summary to align your resume positioning with the role.

Demonstrates expertise in IT Risk Management, Cybersecurity, and Regulatory Compliance, with a strong focus on risk assessment, control design, and mitigation strategies. Proficient in analyzing technology incidents and implementing solutions to enhance risk management practices across cross-functional teams.

Highest-signal resume keywords

IT Risk ManagementCybersecurity ExpertiseRegulatory ComplianceControl DesignRisk Assessment

ATS Keywords

Tailor your resume

Applicant Tracking System Keywords

Tip: use these terms in your resume and cover letter to boost ATS matches.

Hard Skills

Risk Control Self-AssessmentsData ManagementBusiness Intelligence ToolsITIL FrameworkNIST FrameworkTOGAFCOBITSDLCCloud TechnologiesRoot-Cause Analysis

Soft Skills

Excellent CommunicationOrganization SkillsPrioritization SkillsProblem ResolutionMentoring

Tools & Technologies

Information Security ToolsBusiness Intelligence ToolsCloud Governance ToolsInfrastructure ServicesIncident Management Systems

Certifications & Qualifications

CISSPCISACRISC

Industry Keywords

Financial ServicesGLBA Safeguards RuleFFIEC GuidanceNYDFS 23 NYCRR 500OCC GuidanceFirst-Line Risk FunctionBig 4 Firm ExperienceInternal AuditSecond-Line Risk Function

Tech Stack

Tools & technologies

CloudCyber SecuritySDLC

About the role

Key responsibilities & impact

Direct and oversee IT risk assessment and management for IT systems, applications, infrastructure, and data
Identify vulnerabilities and recommend mitigation strategies for cybersecurity, data management, system availability, architectural health, and application failures
Oversee procedures, regulatory reporting and filing, document governance, risk control self-assessments, procedure governance, control design, new product controls, third-party governance, and quality governance
Apply IT, Information Security, Information Management, risk, and regulatory compliance expertise to business strategies and solutions
Analyze first-line-of-defense data, prepare reports, and perform trend analysis using business intelligence tools
Design solutions for unanswered business questions and anticipate future business needs
Direct action plans to enhance risk management practices using frameworks such as ITIL, NIST, TOGAF, and COBIT
Develop innovative solutions to mitigate risk and prevent significant business impacts
Manage complex cross-functional projects within the first line of defense
Define new approaches to problem resolution and lead project teams from concept through implementation
Advise senior management on control environment status, risk identification, and control weaknesses
Identify critical areas to monitor and escalate issues and findings to stakeholders
Serve as a primary resource for cross-functional team members and advise on risk mitigation opportunities
Monitor regulatory changes and ensure compliance with processes and requirements
Ensure business risks are identified, measured, monitored, and controlled according to risk and compliance policies
Partner with business units, Compliance, Risk Management, Audit, and regulators
Support risk and control self-assessments, control effectiveness evaluations, control failure identification, remediation, audits, regulatory exams, and first-line-of-defense oversight

Requirements

What you’ll need

Bachelor's degree in a related field; OR 4 years of relevant education and/or experience
8 years of experience supporting risk-related, compliance-related, or business control design activities; OR 8 years of experience in a relevant quantitative discipline
Advanced degree or designation in a risk management, technology, or quantitative discipline and 6 years of relevant experience; OR PhD and 4 years of relevant experience
3-5 years of direct experience in technical roles in IT, Information Security, or Information Governance
Familiarity with change management, access management, SDLC, patching, information governance, sensitive data management and incident management
Strong understanding of IT controls and risk management principles, ideally within a financial services or regulated industry context
Deep technical expertise in IT, Information Security, and Information Management
Strong technical understanding of IT Operations and SDLC
Understanding of infrastructure services, including networks, databases, mainframe, and related technology controls
Knowledge of cloud technologies, cloud governance, and associated risk and control requirements
Understanding of AI and emerging technology risks
Ability to analyze technology and cyber incidents, identify root causes and control failures, and drive control improvements
Excellent communication, organization, and prioritization skills
Quantitative discipline or advanced degree/designation plus relevant experience for Control Testing
Deep working knowledge of Information Security domains and common control types
Knowledge of RCSA, control design, operating effectiveness, root-cause analysis, and issue management
Strong risk metrics literacy
Familiarity with GLBA Safeguards Rule, FFIEC guidance, NYDFS 23 NYCRR 500, and OCC guidance
Ability to document, challenge, and improve risk and control processes
Strong written and verbal communication skills
Experience owning a risk/control portfolio, leading testing engagements, and/or mentoring analysts
Industry certification such as CISSP, CISA, or CRISC
Prior experience in a First-Line or “1.5 Line” risk function
Experience with NIST CSF, FFIEC, ISO/IEC 27001, or CIS Controls
Experience within a Big 4 firm, Internal Audit, or Second-Line Risk function is a plus
Must not require immigration support or visa sponsorship now or in the future

Benefits

Comp & perks

Flexible work environment with hybrid flexibility for active-duty military spouses, consistent with applicable policy and business needs
Pay incentives based on overall corporate and individual performance, at the discretion of the USAA Board of Directors
Comprehensive medical, dental and vision plans
401(k)
Pension
Life insurance
Parental benefits
Adoption assistance
Paid time off program
Paid holidays
16 paid volunteer hours
Various wellness programs
Career path planning
Continuing education assistance