Director, Audit IT

Why USAA?

Let’s do something that really matters.

At USAA, we have an important mission: facilitating the financial security of millions of U.S. military members and their families. Not all of our employees served in our nation’s military, but we all share in the mission to give back to those who did. We’re working as one to build a great experience and make a real impact for our members.

We believe in our core values of honesty, integrity, loyalty and service. They’re what guides everything we do – from how we treat our members to how we treat each other. Come be a part of what makes us so special!

The Opportunity

As a dedicated Director, Audit IT, you will manage the planning, execution and oversight of the consolidated annual audit plan including risk-based assurance and advisory engagements driving quality of technology and information/cybersecurity audit work. Maintain knowledge of large financial services regulations (e.g., Office of the Comptroller of Currency’s Heightened Standards and Federal Reserve Board’s Large Financial Institution Rating System) and effectively respond and interacts with regulators. This role manages strategic initiatives and leads in the development and implementation of the risk-based audit plan for technology and information/cybersecurity. Provides independent oversight and thought leadership for audit disciplines ensuring that audit plans, frameworks, standards, and processes provide appropriate risk coverage. Adheres to the Institute of Internal Auditors' International Standards for the Professional Practice of Internal Auditing (Standards) and Code of Ethics and ensures fiscally responsible expense management.

We offer a flexible work environment that requires an individual to be in the office 4 days per week. This position can be based in one of the following locations: San Antonio, TX, Plano, TX or Charlotte, NC. Relocation assistance is not available for this position.

What you'll do:

• Accountable for timely delivery and quality execution of Information Technology (IT)/Information Security (IS) audit plan/reports, issue validation, driving continuous monitoring activities, and ensuring appropriate risks are covered for assigned areas of responsibility based on knowledge, skills, and expertise, which include IT general controls, technology infrastructure management and platforms (e.g., mainframe, midrange, distributed), and network architecture and security (e.g., network segmentation, firewalls, proxies, encryption protocols, endpoint protection).

• Manages strategic technology and information/cybersecurity initiatives for emerging technology and leads in the development and implementation of a risk-based technology and information/cybersecurity audit plan. Reviews audit universe for completeness for area of responsibility.

• Accountable for quality and providing IT/IS technical engagement oversight for multiple engagements, and approval of engagement risk assessment and audit scope.

• Develops and maintains effective working relationships with key IT/IS stakeholders across the enterprise to ensure audit objectives are effectively met and contribute to the overall mission of USAA. Communicates effectively with key stakeholders across the enterprise and external regulators to ensure audit objectives are effectively met and contribute to the overall mission of USAA and risk-based and difficult messages are delivered timely.

• Oversees the preparation of key reports and communications and may present to governance committees, senior leaders, regulatory bodies, and the USAA Board of Directors.

• Provides effective challenge and approval of audit engagement scoping, planning, fieldwork, and reporting. Provides insight in reviewing technology-focused audit issues and identified root cause. Recognizes and communicates impact of related technology and information/cybersecurity issues, MRIAs, MRAs and Enterprise issues on audit engagements and risk profile.

• Responsible for reviewing results of the annual risk assessment and providing input into the creation of the technology and information/cybersecurity risk profile. Effectively challenges business management to adopt appropriate policies and procedures and effective controls designed to mitigate risks.

• Updates universe risk assessment information with current and applicable research, industry feedback and audit results. Shares perspectives including best practices, audit standards, regulatory requirements with team and stakeholders.

• Responsible for providing oversight of issue severity and impact to business processes and the control environment. E