Senior Auditor - Cybersecurity

Why USAA?

At USAA, our mission is to empower our members to achieve financial security through highly competitive products, exceptional service and trusted advice. We seek to be the #1 choice for the military community and their families.

Embrace a fulfilling career at USAA, where our core values – honesty, integrity, loyalty and service – define how we treat each other and our members. Be part of what truly makes us special and impactful.

The Opportunity

As a dedicated Senior Auditor you will lead and execute technology and information/cyber security (IT/IS) audit assignments. Identifies problems and resolutions for risk-based assurance and advisory engagements across the IT/IS organization.  Performs IT/IS risk and control identification and evaluation, advanced audit techniques, research, and analysis, and conducts client meetings and interviews. Adheres to the Institute of Internal Auditors' International Standards for the Professional Practice of Internal Auditing (Standards) and Code of Ethics.

We offer a flexible work environment that requires an individual to be in the office 4 days per week. This position can be based in one of the following locations: San Antonio, TX, Plano, TX, or Charlotte, NC. Relocation assistance is not available for this position.

What you'll do:

• Independently executes IT/IS audit test work timely and with high quality.

• Executes and may lead as Auditor in Charge (AIC) for IT/IS audit engagements throughout the audit life cycle, to include understanding of horizontal and vertical business impacts, integrating audits with analytics, and projects. 

• Ensures IT/IS engagements are completed objectively, professionally, timely and in accordance with corporate and industry audit standards.

• Assists in updating the IT/IS risk and control matrix for each engagement with oversight from the AIC and/or other Audit leadership.

• Identifies IT/IS control weaknesses and opportunities for improvement in the current operating environment; develops and implements recommendations for corrective action.

• Assists AIC in drafting related IT/IS issues and audit reports for review by audit leadership.

• Participates and provides feedback during team audit activities on IT/IS planning and scoping, business understanding/walkthroughs, and review of risk assessment and testing applying critical thinking.

• Executes on audit documentation techniques including IT/IS key risks and controls alignment to audit test objectives and conclusions; is accountable for completing work paper documentation within quality standards.

• Utilizes analytical skills to conduct or assist team members with continuous monitoring activities, advisory activities, special reviews and/or investigations.

• Develops internal, business leader and business partner relationships while also providing effective challenge, communicating, and delivering risk-based, difficult messages regarding issues and control opportunities to ensure proper risk assurance coverage for the IT/IS space.

What you have:

• Bachelor’s degree; four additional years of related experience beyond minimum required may be substituted in lieu of a degree.

• 4 years of audit, risk, or compliance/control experience in a financial services or technology/information security (IT/IS) environment.

• Experience performing internal and external audits within IT/IS, and applying audit, risk, or compliance acumen in a complex operational and regulatory environment.

• Demonstrated experience effectively communicating and challenging Controls with business partners and leaders.

• Understanding of risks and internal controls and the ability to evaluate and determine adequacy and efficiency of controls.

• Demonstrated experience in highly dynamic environment with ability to manage competing priorities.

• Knowledge of large financial services regulations (e.g., Office of the Comptroller of Currency’s Heightened Standards and Federal Reserve Board’s Large Financial Institution Rating System).

• Working knowledge of IT general controls.

• Knowledge of Technology infrastructure management and platforms (e.g., mainframe, midrange, distributed), Network architecture and security (e.g., network segmentation, firewalls, proxies, encryption protocols, endpoint protection).

What sets you apart:

• Internal Audit experience

• Cybersecurity Audit experience

• Relevant audit certification(s): CISM, CISSP, CIA

• Audit In-Charge experience