{"id":3558373,"url":"https://alion.io/job/usaa-technology-risk-and-controls-advisor-senior","title":"Technology Risk and Controls Advisor - Senior","company":{"id":4683,"name":"USAA","domain":"usaa.com","url":"https://alion.io/company/usaa","size_band":"5000+","is_staffing_agency":false,"employer_type":"direct","is_intermediary":false,"listed_via":null,"ats_vendor":"Workday","truth_index":{"grade":"A","score":99,"open_postings":20,"ghost_share":0.05,"stale_share":0.05,"repost_share":0.1,"time_to_fill_p50_days":9,"computed_at":"2026-11-02T06:13:15Z"}},"role":"Security","role_family":"Security","seniority":"senior","employment_type":"full_time","work_mode":"hybrid","remote_scope":null,"remote_scope_basis":null,"remote_working_hours":null,"hiring_geo_confidence":"structured","locations":["San Antonio, United States"],"countries":["US"],"hiring_countries":[],"hiring_countries_total":0,"salary":{"min":114080,"max":218030,"currency":"USD","period":"year","gross":null,"usd_annual":218030},"salary_estimate":null,"experience_years_min":3,"visa_sponsorship":true,"relocation_package":false,"has_equity":false,"technologies":[{"name":"Incident Management","optional":false},{"name":"ITIL","optional":false},{"name":"NIST CSF","optional":true},{"name":"Path Planning","optional":true}],"status":"live","first_seen_at":"2026-10-30T00:00:00Z","employer_posted_date":"2026-10-30","last_verified_at":"2026-11-02T20:25:04Z","board_verified":true,"closed_at":null,"days_open":3,"trust":{"level":"ok","repost_count":null,"flags":[],"days_open":3},"description":"Why USAA?\nAt USAA, our mission is to empower our members to achieve financial security through highly competitive products, exceptional service and trusted advice. We seek to be the #1 choice for the military community and their families.\nEmbrace a fulfilling career at USAA, where our core values - honesty, integrity, loyalty and service - define how we treat each other and our members. Be part of what truly makes us special and impactful.\nWe are proud to support active-duty military spouses. USAA roles may offer remote or hybrid flexibility for active-duty military spouses consistent with applicable policy and business needs.\nThe Opportunity\nThere are 3 available positions for this Senior role. Of which will be focusing on 3 different roles:\nTECHNOLOGY\nCONTROL TESTING\nINFOSEC\nPositioned in the first line of defense, this role leverages advanced technical expertise in Information Technology (IT), Information Security, and Information Management to strengthen risk and compliance programs within a technology-focused business operation.\nThis role will partner with business units, Compliance, Risk Management, Audit, and Regulators to identify, assess, and mitigate risks.\nResponsible for supporting business leader adherence to the established risk framework and ongoing supervision of business controls; including, risk and control self-assessments, identification and evaluation of control effectiveness, identifying control failures, facilitating risk and compliance remediation, internal and external audits and regulatory exams, and monitoring of the first line of defense to minimize risk exposures and strengthen the overall control environment leveraging industry frameworks.\nManages risk assessment data and uses critical thinking to identify key data-driven insights tied to first line of defense, specifically focusing on the identification of trends and patterns related to IT, Cyber, and Data risks.\nWe offer a flexible work environment that requires an individual to be in the office 4 days per week. This position can be based in one of the following locations: San Antonio, TX\n.\nRelocation assistance is not available for this position.\nWhat you'll do:\nManages and drives IT Risk Assessment and Management to include but not limited to: Conducting regular risk assessments of IT systems, applications, infrastructure, and data, identifying vulnerabilities and recommending appropriate mitigation strategies. This includes evaluating risks related to cybersecurity, data management, system availability, architectural health and application failures.\nOversight of procedures/process, accurate regulatory reporting and filing, document governance, risk control self-assessments, procedure governance, control design, new product controls, Function or Line of Business Third Party Governance, or quality governance.\nApplies a holistic understanding of risk and regulatory compliance to include business strategies and solutions leveraging an advanced understanding of information technology, information security, and information management.\nResponsible for first line of defense data analysis, report preparation and trend analysis, utilizing business intelligence tools.\nDesigns solutions for unanswered business questions and anticipates future business needs.\nAssists with translating control deficiencies into action plans designed to enhance risk management practices in alignment with industry frameworks (e.g., ITIL, NIST, TOGAF, COBIT).\nInfluences and develops innovative solutions to mitigate risk and prevent risk exposures which result in significant business impacts.\nDefines and outlines new approaches to problem resolution and serves as a primary member of project team from concept through implementation.\nAdvises senior management on the status of their control environment related to risk identification and control weaknesses.\nIdentifies critical areas to monitor and escalates issues and findings to appropriate stakeholders.\nServes as a primary resource to cross functional team members and advises on risk mitigation opportunities.\nStays informed of changes to the regulatory environment to ensure proper compliance with processes and requirements are followed.\nEnsures risks associated with business activities are effectively identified, measured, monitored, and controlled in accordance with risk and compliance policies and procedures.\nWhat you have:\nBachelor's degree in a related field; OR 4 years of relevant education and/or experience.\nExperiences that will support your success:\n6 years of experience supporting risk-related, compliance related, or business control design activities; OR 6 years of experience in a relevant quantitative discipline; OR Advanced degree or designation in a risk management or quantitative discipline, and 4 years of experience supporting risk-related, and/or compliance-related, or business control design activities; OR PhD in a risk management or quantitative discipline, and 2 years of experience supporting risk-related, and/or compliance-related, or business control design activities.\n3-5 years of direct experience in technical roles in IT, Information Security, or Information Governance (e.g., systems administration, IT operations, application development, infrastructure support, cloud engineering, information security engineering, IT architecture, information governance).\nFamiliarity with key technology and data processes such as change management, access management, SDLC, patching, information governance, sensitive data management and incident management.\nStrong understanding of IT controls and risk management principles, ideally within a financial services or regulated industry context.\nNote: This role requires deep technical expertise in IT, Information Security, and Information Management to support technology and data-centric functions.\nWhat sets you apart:\nTECHNOLOGY:\nStrong technical understanding of IT Operations and SDLC, with the ability to identify technology risks, control gaps, and process weaknesses.\nDeep understanding of infrastructure services, including networks, databases, mainframe, and related technology controls.\nStrong knowledge of Cloud technologies, cloud governance, and associated risk and control requirements.\nStrong understanding of AI and emerging technology risks, with the ability to evaluate and recommend appropriate controls.\nAbility to analyze technology and cyber incidents, identify root causes and control failures, and drive sustainable control improvements.\nStrong technical risk judgment and critical thinking, with the ability to connect risks across processes, applications, infrastructure, cyber, cloud, and AI and make sound control decisions.\nExcellent communication, organization, and prioritization skills, with the ability to manage competing priorities and deliver under tight deadlines; hands-on coding/development experience is a plus.\nCONTROL TESTING:\nQuantitative discipline; OR Advanced degree or designation in a risk management, technology, or quantitative discipline, and 6 years of experience supporting risk-related, and/or compliance-related, or business control design activities; OR PhD in a risk management, technology, or quantitative discipline, and 4 years of experience supporting risk-related, and/or compliance-related, or business control design activities.\nINFOSEC:\nDeep working knowledge of Information Security domains and common control types, including access management, vulnerability management, encryption, logging and monitoring, incident response, and related technical controls.\nStrong grounding in risk and controls methodology, including RCSA, the distinction between control design and operating effectiveness, root-cause analysis, and issue management.\nStrong risk metrics literacy, with the ability to distinguish genuine risk indicators from performance metrics and define thresholds aligned to risk appetite or tolerance statements.\nWorking familiarity with financial-services regulatory expectations relevant to Information Security, including the GLBA Safeguards Rule, FFIEC guidance, NYDFS 23 NYCRR 500, and OCC guidance, with the ability to apply those expectations to control and metric decisions.\nDemonstrated ability to document, challenge, and improve existing risk and control processes rather than simply execute established processes.\nStrong written and verbal communication skills, with the ability to effectively engage control owners, technology leadership, and governance committees.\nDemonstrated experience owning a risk/control portfolio, leading testing engagements, and/or mentoring analysts.\nIndustry certification such as CISSP, CISA, or CRISC.\nPrior experience in a First-Line or “1.5 Line” risk function, with an understanding of how oversight and challenge responsibilities differ from independent assurance.\nDepth of experience with one or more recognized Information Security frameworks, including NIST CSF, FFIEC, ISO/IEC 27001, or CIS Controls.\nExperience within a Big 4 firm, Internal Audit, or Second-Line Risk function is a plus.\nCompensation range: The salary range for this position is: $114,080 - $218,030.\nUSAA does not provide visa sponsorship for this role. Please do not apply for this role if at any time (now or in the future) you will need immigration support (i.e., H-1B, TN, STEM OPT Training Plans, etc.).\nCompensation: USAA has an effective process for assessing market data and establishing ranges to ensure we remain competitive. You are paid within the salary range based on your experience and market data of the position. The actual salary for this role may vary by location.\nEmployees may be eligible for pay incentives based on overall corporate and individual performance and at the discretion of the USAA Board of Directors.\nThe above description reflects the details considered necessary to describe the principal functions of the job and should not be construed as a detailed description of all the work requirements that may be performed in the job.\nBenefits: At USAA our employees enjoy best-in-class benefits to support their physical, financial, and emotional wellness. These benefits include comprehensive medical, dental and vision plans, 401(k), pension, life insurance, parental benefits, adoption assistance, paid time off program with paid holidays plus 16 paid volunteer hours, and various wellness programs. Additionally, our career path planning and continuing education assists employees with their professional goals.\nFor more details on our outstanding benefits, visit our benefits page on USAAjobs.com.\nApplications for this position are accepted on an ongoing basis, this posting will remain open until the position is filled. Thus, interested candidates are encouraged to apply the same day they view this posting.\nUSAA is an Equal Opportunity Employer. All qualified applicants will receive consideration for employment without regard to race, color, religion, sex, sexual orientation, gender identity, national origin, disability, or status as a protected veteran.","description_format":"text","description_chars":11051,"description_truncated":false,"requirements":{"experience_years_min":3,"management_years_min":null,"team_size_min":null,"manages_managers":false,"education":{"level":"bachelor","optional":false},"security_clearance":false,"languages":[]},"benefits":["Flexible schedule","Life insurance","Military spouse friendly","Relocation assistance","Wellness"],"hiring_locations":[{"name":"United States","iso":"US","kind":"country"}],"hiring_excludes":[],"relocation_offered":true,"industries":["Commercial & Retail Banks","Wealth Management & Financial Advisors","Property & Casualty Insurance","Life Insurance & Annuities"],"lifecycle":[{"event":"open","at":"2026-10-31T02:18:02Z"}],"visa":[],"liveness":{"score":81,"band":"hot","label":"Hiring now","p_open":1,"p_active":0.899,"p_room":0.9,"age_days":3,"expected_fill_days":9,"reasons":["conf:0","velocity","win:mid","comp:brand"],"computed_at":"2026-11-02T06:13:15Z"},"pay":{"stated_usd_annual":218030,"is_top_pay":true},"html_url":"https://alion.io/job/usaa-technology-risk-and-controls-advisor-senior","json_url":"https://alion.io/job/usaa-technology-risk-and-controls-advisor-senior.json","meta":{"generated_at":"2026-11-02T21:57:15Z","cache_seconds":300,"methodology":"https://alion.io/methodology","terms":"https://alion.io/terms","contact":"https://alion.io/contact","api":"https://alion.io/developers","about":"Alion is a live layer of people, companies and AI agents: who they are, whether they are real and active right now, what they do and how to work with them, readable by people and by agents and paid per call.","catalog":"https://alion.io/catalog.json","usage":{"tier":"crawler_verified","counted_by":"address","units_charged":1,"used_today":30782,"day_limit":null,"remaining_today":null,"minute_limit":300,"resets_at":"2026-11-03T00:00:00Z"}},"offers":[{"id":"company.slices","title":"One company in depth, by slice","status":"live","price":{"credits":0.02,"usd":0.002,"plus_per_slice":{"credits":0.05,"usd":0.005}},"unit":"per company, plus each slice with data","note":"the employer in depth","call":{"mcp_tool":"get_company","arguments":{"id":4683},"rest":"https://alion.io/mcp/rest/get_company?id=4683"},"human":"https://alion.io/catalog?offer=company.slices&for=job%2Fusaa-technology-risk-and-controls-advisor-senior"},{"id":"market.stats","title":"A market slice: pay, demand and time to fill","status":"live","price":{"credits":1,"usd":0.1},"unit":"per slice","note":"pay, demand and time to fill for this role and place","call":{"mcp_tool":"market_stats"},"human":"https://alion.io/catalog?offer=market.stats&for=job%2Fusaa-technology-risk-and-controls-advisor-senior"},{"id":"job.search","title":"Open jobs by role, technology, place, pay and visa","status":"live","price":{"credits":0.02,"usd":0.002},"unit":"per posting in a list","note":"similar open postings","call":{"mcp_tool":"search_jobs"},"human":"https://alion.io/catalog?offer=job.search&for=job%2Fusaa-technology-risk-and-controls-advisor-senior"},{"id":"company.verify","title":"Is this company real and active right now","status":"pilot","price":null,"unit":"per company","request":{"url":"https://alion.io/catalog/request","method":"POST","body":"{\"offer\": \"company.verify\", \"for\": \"job/usaa-technology-risk-and-controls-advisor-senior\", \"note\": \"what you need it for\"}"},"human":"https://alion.io/catalog?offer=company.verify&for=job%2Fusaa-technology-risk-and-controls-advisor-senior"}],"agent":{"mcp":"https://alion.io/mcp/jobs","mcp_open":"https://alion.io/mcp/open","next":[{"tool":"get_job","arguments":{"id":3558373}},{"tool":"search_jobs","arguments":{"company":"usaa.com","detail":"compact"}},{"tool":"match_people","arguments":{"job_id":3558373},"note":"people open to offers who fit this vacancy"}],"note":"The same data through MCP tools: https://alion.io/mcp/open needs no sign-in (compact searches, postings, people); https://alion.io/mcp with an Alion account has everything. Docs: https://alion.io/developers"}}