Executive Director, Business Information Security Officer - Bank

Why USAA?

At USAA, our mission is to empower our members to achieve financial security through highly competitive products, exceptional service and trusted advice. We seek to be the #1 choice for the military community and their families.

Embrace a fulfilling career at USAA, where our core values – honesty, integrity, loyalty and service – define how we treat each other and our members. Be part of what truly makes us special and impactful.

The Opportunity

As a dedicated Executive Director, Business Information Security Officer, you will act on behalf of the Bank Chief Information Officer (CIO) as the primary enterprise Information Security interface, including all aspects of Information Security/Cyber strategy, operations and risk management requiring implementation by the USAA Federal Savings Bank (FSB). Accountable to focus, prioritize and drive risk management deliverables and activities; collaborate with risk partners on information security priorities, and identify and measure enterprise Information Security controls of critical business processes, technologies and experiences on behalf of the USAA FSB. Additionally, this role provides governance over central Information Security functions through the effective management of affiliate agreements, ensuring alignment between enterprise security policies/standards and Bank requirements. Utilizes Information Security expertise, industry experience, analysis and innovation to design and deliver strategic engagement plans to internal clients.

Interacts with or participates in enterprise governance committees, such as:

• Bank Technology Risk Committee

• Enterprise Operational Risk Committee

• Enterprise Information Technology and Information Security Committee

• Third Party Risk Committee

• Enterprise Compliance and Operational Risk Committee

This role is remote eligible in the continental U.S. with occasional business travel. However, individuals residing within a 60-mile radius of a USAA office will be expected to work on-site four days per week.

What you'll do:

• Works with FSB senior level executives as a trusted advisor to define their business problem and structure a strategic Information Security engagement plan and ensures security strategies support FSB business goals. This includes understanding FSB specific business needs and risk profiles.

• Responsible for defining, implementing, and contributing to the creation and upkeep of security policies and procedures specific to the FSB, such as the FSB Information Security Policy Addendum.

• Actively participates as an extended member of the FSB senior leadership team, and accountable for understanding and contributing to the strategic goals and embedding Information Security risk management into their culture. Key stakeholder engaged with centralized Information Security functions in response to security incidents within FSB area of responsibility.

• Provides thought leadership that directly shapes the analysis, design and implementation of business performance approaches, providing tailor-made information security solutions, while working closely with senior level executives to ensure positive impact and sustainable results.

• Serves as a trusted advisor and leads cross-functional, matrixed teams to solve highly complex and high value Information Security related business problems.

• Accountable for third party relationship management for the central Information Security affiliate service provider (USAA), inclusive of defining the services, ensuring appropriate contractual SLAs & D&Os are in place, executing ongoing monitoring, reporting of the service delivery and holding providers accountable for service level performance via Affiliate agreement.

• Owns and facilitates the feedback loop for improvement opportunities across all Information Security programs and with the FSB senior level executives to include assessment and reporting of Corrective Action Plans to improve Information Security programs and initiatives.

• Provides support to the FSB President and General Managers for the day-to-day execution of one or more Information Security strategic engagements and the quality of those solutions.

• Provides Information Security risk understanding and enables sound decision making throughout the strategy engagement to identify, prioritize and mitigate Information Security risks, including escalating, managing and reporting control issues; follows written risk and compliance policies, standards, and procedures for business activities.

• Serves as a liaison between the central Information Security (USAA) team and various FSB business unit. This involves translating technical security informa