Executive Director, Bank Technology and Affiliate Risk Governance

Why USAA?

At USAA, our mission is to empower our members to achieve financial security through highly competitive products, exceptional service and trusted advice. We seek to be the #1 choice for the military community and their families.

Embrace a fulfilling career at USAA, where our core values – honesty, integrity, loyalty and service – define how we treat each other and our members. Be part of what truly makes us special and impactful.

The Opportunity

As a dedicated Executive Director, Bank Technology and Affiliate Risk Management & Governance, you will be responsible for leading the first line of defense in IT risk management across the Federal Saving Bank. This role ensures that IT risk is proactively identified, assessed, mitigated, and communicated effectively across the FSB and to affiliated parties in the Association, including to the Board of Directors, regulators, and senior leadership. The leader will also oversee the development and ongoing governance of affiliate agreements related to IT services, ensuring alignment with enterprise risk appetite and regulatory expectations.

This role is remote eligible in the continental U.S. with occasional business travel. However, individuals residing within a 60-mile radius of a USAA office will be expected to work on-site four days per week.

What you'll do:

• Develop and execute the bank’s first line IT risk strategy aligned with Association risk and regulatory frameworks.

• Design and implement FSB IT risk governance structures, policies, and procedures.

• Serve as a key advisor to the FSB CIO and executive leadership on IT risk matters.

• Lead risk assessments for new technologies, systems, and major IT initiatives.

• Ensure continuous monitoring and reporting of IT risk metrics and key risk indicators (KRIs).

• Oversee identification, assessment, and mitigation of risks related to technology operations and monitoring, technology architecture and systems limitations and/or design and development.

• Monitor and implement relevant laws and regulations, including applicable regulatory guidance (e.g., GDPR, CCPA, GLBA, NYDFS 23 NYCRR 500, FFIEC).

• Align technology practices with industry standards (e.g., NIST, ISO 27001).

• Develop and manage ongoing oversight of affiliate agreements for IT services, ensuring FSB compliance and risk ownership.

• Conduct due diligence on affiliates and monitor performance and compliance with advertising laws, data privacy, and brand guidelines.

• Establish clear expectations, deliverables, and compliance requirements within affiliate agreements.

• Review affiliate programs and respond to incidents of non-compliance or brand abuse.

• Report on affiliate risk posture and mitigation efforts to senior leadership.

• Lead incident and issue management processes for FSB impacting technology issues, ensuring rapid triage, root cause analysis, and remediation.

• Support Control testing and Conduct risk assessments to evaluate effectiveness of operational and technical controls.

• Support Risk and Control Self-Assessments (RCSA) and identify gaps in technology and data management processes.

• Partner with risk leadership to integrate risk identification, assessment, and mitigation across FSB impacting technologies. Present IT and affiliate risk posture, trends, and mitigation strategies to the Board, regulators, and senior executives.

• Build strong relationships with business units, second line risk teams, audit, and external regulators.

• Provide concise risk reporting and updates to senior leadership.

• Build and lead a high-performing IT risk team, fostering a culture of accountability, innovation, and continuous improvement.

• Provide mentorship and development opportunities to team members.

• Lead risk workshops and training sessions to promote a risk-aware culture across the organization.

What you have:

• Bachelor's Degree in Information Technology, Risk Management, Business Administration, or a related field (Master’s preferred).

• 10+ years of experience in IT risk management, preferably within the financial services industry.

• 4+ years of people leadership experience, including building and developing high-performing teams.

• Proven experience engaging with regulators and presenting to Boards and senior leadership.

• Deep understanding of IT risk domains, including cybersecurity, third-party risk, and operational resilience.

• Strong knowledge of regulatory frameworks, such as FFIEC, OCC, FDIC, NIST, and ISO.

• Demonstrated e