FREE ACCESS
5,000–10,000 jobs/day
See all jobs on Scoutfield
Search thousands of fresh jobs every day.
Discover
- Fresh listings
- Fast filters
- No subscription required
Create a free account and start exploring right away.
Core Competencies
Role fitCore Competencies
Use this summary to align your resume positioning with the role.
Demonstrates expertise in risk management and compliance, with a strong foundation in Secure Software Development Lifecycle methodologies and regulatory frameworks such as NIST, COBIT, and ISO 27001. Capable of analyzing data to drive insights and influence decision-making while effectively communicating complex concepts to diverse audiences.
Highest-signal resume keywords
Risk ManagementCybersecuritySecure Software Development LifecycleNIST, COBIT, ISO 27001CISSP, CSSLP, CISA, CISM, CRISC
ATS Keywords
Tailor your resumeApplicant Tracking System Keywords
Tip: use these terms in your resume and cover letter to boost ATS matches.
Hard Skills
Risk AssessmentCompliance ControlsData AnalysisTechnology Risk ManagementIT Change ManagementControl Effectiveness EvaluationTechnology Risk MethodologiesMonitoring Technology RisksStress TestingContingency Planning
Soft Skills
Strong Communication SkillsOrganizational SkillsInfluencing Decision-MakingCollaborationPlanning Skills
Tools & Technologies
Mainframe CI/CD PipelinesGovernance RoutinesReporting Requirements
Certifications & Qualifications
CISSPCSSLPCISACISMCRISC
Industry Keywords
Risk and Compliance FrameworkFirst Line of DefenseFFIEC GuidanceRegulatory RequirementsInformation Security
Tech Stack
Tools & technologiesCyber Security
About the role
Key responsibilities & impact- Provide independent second-line oversight, effective challenge, and risk guidance within an established risk and compliance framework
- Partner with business leaders and stakeholders to identify, assess, aggregate, and document risk exposures and compliance controls
- Communicate risk and compliance results to governance committees, business process owners, and leadership
- Contribute to implementation of risk and compliance policies, practices, appetites, and solutions
- Execute assigned risk and compliance activities according to enterprise policies and procedures
- Monitor the competitive and regulatory landscape and assess business impact
- Review laws and regulations and propose awareness and action
- Coordinate and respond to regulatory requirements and requests and support examinations
- Enhance risk and compliance strategies, tools, and methodologies for measuring, monitoring, and reporting risks
- Analyze data to produce insights, support business decisions, and influence solution strategies
- Participate in cross-functional teams to identify, assess, aggregate, and mitigate current and emerging risks
- Contribute to stress test plans, evaluate results, and frame contingency plans with business stakeholders
Requirements
What you’ll need- Bachelor's degree; OR 4 years of relevant education and/or experience
- Minimum of 4 years of experience in risk management, cybersecurity, information security, or a related field
- Foundational understanding of Secure Software Development Lifecycle methodologies
- Knowledge of IT Change and Release Management
- Foundational understanding of risk management principles, including NIST, COBIT, ISO 27001, ITIL, and ITGC frameworks and controls
- Knowledge of FFIEC guidance and regulatory expectations
- Experience supporting First Line of Defense (1LOD) technology risk functions
- Strong verbal and written communication skills with the ability to present complex concepts to technical and non-technical audiences
- Organization and planning skills to set priorities and execute workload
- Ability to partner effectively with stakeholders and influence decision-making through data-driven insights
- Experience in Technology Risk Management, Information Technology, Information Security, IT Audit, or Business Risks and Controls with an information technology emphasis
- Experience evaluating the design and effectiveness of technology controls and assessing residual risk
- Strong technical aptitude for distributed and Mainframe CI/CD pipelines
- Experience applying technology risk methodologies, standards, procedures, governance routines, and reporting requirements
- Experience monitoring material technology risks, control weaknesses, issues, exceptions, and dependencies
- Experience reviewing and challenging technology-related issues and action plans
- Completion of relevant industry certifications such as CISSP, CSSLP, CISA, CISM, or CRISC
- Must not require immigration support or visa sponsorship
Benefits
Comp & perks- Flexible work environment
- Medical, dental and vision plans
- 401(k)
- Pension
- Life insurance
- Parental benefits
- Adoption assistance
- Paid time off program
- Paid holidays
- 16 paid volunteer hours
- Wellness programs
- Career path planning
- Continuing education
- Pay incentives based on overall corporate and individual performance, at the discretion of the USAA Board of Directors