FREE ACCESS
5,000–10,000 jobs/day
See all jobs on Scoutfield
Search thousands of fresh jobs every day.
Discover
- Fresh listings
- Fast filters
- No subscription required
Create a free account and start exploring right away.
Core Competencies
Role fitCore Competencies
Use this summary to align your resume positioning with the role.
Demonstrates expertise in IT Risk Management, Cybersecurity, and Regulatory Compliance, with a strong focus on risk assessment methodologies and control design. Proficient in leveraging business intelligence tools for data analysis and reporting to inform strategic decision-making.
Highest-signal resume keywords
IT Risk ManagementCybersecurity ExpertiseRegulatory ComplianceRisk Assessment MethodologiesControl Design
ATS Keywords
Tailor your resumeApplicant Tracking System Keywords
Tip: use these terms in your resume and cover letter to boost ATS matches.
Hard Skills
Risk AssessmentVulnerability IdentificationMitigation StrategiesData ManagementITIL FrameworkNIST FrameworkTOGAF FrameworkCOBIT FrameworkRCSA MethodologyRoot-Cause Analysis
Soft Skills
Problem ResolutionStakeholder CommunicationCross-Functional CollaborationTrend AnalysisAdvisory Skills
Tools & Technologies
Business Intelligence ToolsCloud TechnologiesInformation Security ToolsSDLCIncident Management Systems
Certifications & Qualifications
CISSPCISACRISC
Industry Keywords
GLBA Safeguards RuleFFIEC GuidanceNYDFS 23 NYCRR 500OCC GuidanceIT Operations
Tech Stack
Tools & technologiesCloudCyber SecuritySDLC
About the role
Key responsibilities & impact- Manage and drive IT risk assessment and management for systems, applications, infrastructure, and data
- Conduct regular risk assessments, identify vulnerabilities, and recommend mitigation strategies
- Evaluate cybersecurity, data management, system availability, architectural health, and application-failure risks
- Oversee procedures, regulatory reporting and filing, document governance, RCSAs, control design, new product controls, third-party governance, and quality governance
- Apply IT, information security, information management, risk, and regulatory compliance expertise to business strategies and solutions
- Analyze first-line-of-defense data, prepare reports, and conduct trend analysis using business intelligence tools
- Design solutions for unanswered business questions and anticipate future business needs
- Translate control deficiencies into action plans aligned with ITIL, NIST, TOGAF, and COBIT frameworks
- Develop innovative solutions to mitigate risk and prevent significant business impacts
- Define new approaches to problem resolution and serve as a primary project team member from concept through implementation
- Advise senior management on control-environment status, risk identification, and control weaknesses
- Identify critical monitoring areas and escalate issues and findings to stakeholders
- Advise cross-functional team members on risk mitigation opportunities
- Monitor regulatory changes and ensure compliance with processes and requirements
- Ensure business risks are identified, measured, monitored, and controlled according to risk and compliance policies
Requirements
What you’ll need- Bachelor's degree in a related field; OR 4 years of relevant education and/or experience
- 6 years of experience supporting risk-related, compliance-related, or business control design activities; OR 6 years of experience in a relevant quantitative discipline
- Advanced degree or designation in a risk management or quantitative discipline and 4 years of relevant experience; OR PhD in a risk management or quantitative discipline and 2 years of relevant experience
- 3-5 years of direct experience in technical roles in IT, Information Security, or Information Governance
- Familiarity with change management, access management, SDLC, patching, information governance, sensitive data management and incident management
- Strong understanding of IT controls and risk management principles
- Deep technical expertise in IT, Information Security, and Information Management
- Strong technical understanding of IT Operations and SDLC
- Understanding of infrastructure services, including networks, databases, mainframe, and related technology controls
- Knowledge of cloud technologies, cloud governance, and associated risk and control requirements
- Understanding of AI and emerging technology risks
- Deep working knowledge of Information Security domains and common control types
- Strong grounding in risk and controls methodology, including RCSA, control design, operating effectiveness, root-cause analysis, and issue management
- Strong risk metrics literacy
- Familiarity with GLBA Safeguards Rule, FFIEC guidance, NYDFS 23 NYCRR 500, and OCC guidance
- Experience documenting, challenging, and improving risk and control processes
- Experience owning a risk/control portfolio, leading testing engagements, and/or mentoring analysts
- Industry certification such as CISSP, CISA, or CRISC
- Prior experience in a First-Line or “1.5 Line” risk function
- Experience with NIST CSF, FFIEC, ISO/IEC 27001, or CIS Controls
- Visa sponsorship is not provided; applicants must not require immigration support now or in the future
Benefits
Comp & perks- Pay incentives based on overall corporate and individual performance, at the discretion of the USAA Board of Directors
- Comprehensive medical, dental and vision plans
- 401(k)
- Pension
- Life insurance
- Parental benefits
- Adoption assistance
- Paid time off program
- Paid holidays
- 16 paid volunteer hours
- Various wellness programs
- Career path planning
- Continuing education assistance
- Remote or hybrid flexibility may be available for active-duty military spouses, consistent with applicable policy and business needs