Executive Director, Bank Technology and Affiliate Risk Governance

Why USAA?

At USAA, our mission is to empower our members to achieve financial security through highly competitive products, exceptional service and trusted advice. We seek to be the #1 choice for the military community and their families.

Embrace a fulfilling career at USAA, where our core values – honesty, integrity, loyalty and service – define how we treat each other and our members. Be part of what truly makes us special and impactful.

The Opportunity

As a dedicated Executive Director, Bank Technology and Affiliate Risk Management & Governance, you will be responsible for leading the first line of defense in IT risk management across the Federal Saving Bank. This role ensures that IT risk is proactively identified, assessed, mitigated, and communicated effectively across the FSB and to affiliated parties in the Association, including to the Board of Directors, regulators, and senior leadership. The leader will also oversee the development and ongoing governance of affiliate agreements related to IT services, ensuring alignment with enterprise risk appetite and regulatory expectations.

This role is remote eligible in the continental U.S. with occasional business travel. However, individuals residing within a 60-mile radius of a USAA office will be expected to work on-site four days per week.

What you'll do:

• Develop and execute the bank’s first line IT risk strategy aligned with Association risk and regulatory frameworks.

• Design and implement FSB IT risk governance structures, policies, and procedures.

• Serve as a key advisor to the FSB CIO and executive leadership on IT risk matters.

• Lead risk assessments for new technologies, systems, and major IT initiatives.

• Ensure continuous monitoring and reporting of IT risk metrics and key risk indicators (KRIs).

• Oversee identification, assessment, and mitigation of risks related to technology operations and monitoring, technology architecture and systems limitations and/or design and development.

• Monitor and implement relevant laws and regulations, including applicable regulatory guidance (e.g., GDPR, CCPA, GLBA, NYDFS 23 NYCRR 500, FFIEC).

• Align technology practices with industry standards (e.g., NIST, ISO 27001).

• Develop and manage ongoing oversight of affiliate agreements for IT services, ensuring FSB compliance and risk ownership.

• Conduct due diligence on affiliates and monitor performance and compliance with advertising laws, data privacy, and brand guidelines.

• Establish clear expectations, deliverables, and compliance requirements within affiliate agreements.

• Review affiliate programs and respond to incidents of non-compliance or brand abuse.

• Report on affiliate risk posture and mitigation efforts to senior leadership.

• Lead incident and issue management processes for FSB impacting technology issues, ensuring rapid triage, root cause analysis, and remediation.

• Support Control testing and Conduct risk assessments to evaluate effectiveness of operational and technical controls.

• Support Risk and Control Self-Assessments (RCSA) and identify gaps in technology and data management processes.

• Partner with risk leadership to integrate risk identification, assessment, and mitigation across FSB impacting technologies. Present IT and affiliate risk posture, trends, and mitigation strategies to the Board, regulators, and senior executives.

• Build strong relationships with business units, second line risk teams, audit, and external regulators.

• Provide concise risk reporting and updates to senior leadership.

• Build and lead a high-performing IT risk team, fostering a culture of accountability, innovation, and continuous improvement.

• Provide mentorship and development opportunities to team members.

• Lead risk workshops and training sessions to promote a risk-aware culture across the organization.

What you have:

• Bachelor's Degree in Information Technology, Risk Management, Business Administration, or a related field (Master’s preferred).

• 10+ years of experience in IT risk management, preferably within the financial services industry.

• 4+ years of people leadership experience, including building and developing high-performing teams.

• Proven experience engaging with regulators and presenting to Boards and senior leadership.

• Deep understanding of IT risk domains, including cybersecurity, third-party risk, and operational resilience.

• Strong knowledge of regulatory frameworks, such as FFIEC, OCC, FDIC, NIST, and ISO.

• Demonstrated expertise in banking laws, regulations, and regulatory guidance, with a forward-looking view on applicability to institutions like USAA.

• Executive-level business acumen in evaluating data quality, governance practices, change management processes, and emerging industry trends.

• Experience with risk management tools and software to support oversight and reporting.

• Exceptional analytical and problem-solving skills, with the ability to identify and mitigate risk effectively.

• Strong leadership and communication abilities, including influencing stakeholders and aligning work to strategic goals.

• Proven track record of managing risk in a complex corporate environment.

• Experience in contract management, including drafting and reviewing affiliate agreements.

• Understanding of affiliate marketing principles, practices, and related legal and regulatory considerations.

• Ability to analyze affiliate data to identify potential risks and compliance issues.

• Effective communication skills across affiliates, internal teams, senior management, and the Board.

What sets you apart:

• Certifications such as CRISC, CISM, CISSP, or similar are a plus.

• US military experience through military service or a military spouse/domestic partner

Salary: The salary range for this position is: $169,880-$305,780.

Compensation: USAA has an effective process for assessing market data and establishing ranges to ensure we remain competitive. You are paid within the salary range based on your experience and market data of the position.

Employees may be eligible for pay incentives based on overall corporate and individual performance and at the discretion of the USAA Board of Directors.

The above description reflects the details considered necessary to describe the principal functions of the job and should not be construed as a detailed description of all the work requirements that may be performed in the job.

Long Term Incentive Plan: Cash payment for Executive level roles only, representing a cash payment which is both time and performance based.

Benefits: At USAA our employees enjoy best-in-class benefits to support their physical, financial, and emotional wellness. These benefits include comprehensive medical, dental and vision plans, 401(k), pension, life insurance, parental benefits, adoption assistance, paid time off program with paid holidays plus 16 paid volunteer hours, and various wellness programs. Additionally, our career path planning and continuing education assists employees with their professional goals.

For more details on our outstanding benefits, visit our benefits page on USAAjobs.com.

Applications for this position are accepted on an ongoing basis, this posting will remain open until the position is filled. Thus, interested candidates are encouraged to apply the same day they view this posting.

USAA is an Equal Opportunity Employer. All qualified applicants will receive consideration for employment without regard to race, color, religion, sex, sexual orientation, gender identity, national origin, disability, or status as a protected veteran.