Cloud Risk and Management Advisor - Mid Level

About the role

At USAA, we seek a Mid-Level Risk and Compliance professional with 6+ years of hands-on experience in Cloud Governance, Risk and Controls. This role requires collaboration with key stakeholders in the business to identify, assess, aggregate and document risk and compliance controls, communicate results to governance committees, and contribute to the implementation of new policies and practices.

Responsibilities

• Identify, assess, and document risks associated with new or modified products, services, distribution channels, regulations, and third-party operations.
• Communicate risk and compliance results to governance committees, business process owners, and various levels of leadership.
• Contribute to the implementation of new risk and compliance policies, practices, appetites, and solutions.
• Execute assigned risk or compliance activities in accordance with enterprise policies and procedures.
• Maintain and expand knowledge of the competitive/regulatory landscape and the company's key challenges.
• Review laws and regulations for business impact and make proposals for awareness and action.
• Coordinate and respond to regulatory requirements and requests, ensuring the execution of examinations.
• Apply knowledge to assess data and produce analytical insights to understand business objectives, drive business decisions, and influence solution strategies.
• Collaborate with cross-functional teams to identify, assess, aggregate, and mitigate current and emerging risk events.
• Contribute to stress test plans for a line of business or the enterprise, including the evaluation of results and framing of contingency plans in partnership with key business stakeholders.

Requirements

• Bachelor's degree; OR 4 years of relevant education and/or experience.
• Extensive exposure to Cloud Native Application Platforms (CNAPP), such as Prisma, Orca, and WizRisk, or compliance experience in a highly matrixed environment.
• Knowledge of compliance laws, regulations, and regulatory expectations.
• Demonstrated ability to apply regulatory risk and compliance knowledge to consult and provide guidance.
• Demonstrated ability to effectively challenge in business or team settings.
• Ability to effectively work with internal and external partners in a highly collaborative environment.
• Demonstrated critical thinking and knowledge of data analysis tools and techniques and decision-making abilities to effectively recommend data-driven solutions.
• Proactively identifies potential concerns and effectively recommends solutions.
• Advanced proficiency with Microsoft Office products including Word, Excel, and PowerPoint.

Qualifications

• Bachelor's degree; OR 4 years of relevant education and/or experience.
• 6+ years relevant experience in risk, compliance, legal or audit within the financial services or insurance industry or specialized technical fields directly related to the role.
• Extensive exposure to Cloud Native Application Platforms (CNAPP), such as Prisma, Orca, and WizRisk and/or compliance experience in a highly matrixed environment.
• Knowledge of compliance laws, regulations, and regulatory expectations.
• Demonstrated ability to apply regulatory risk and compliance knowledge to consult and provide guidance.
• Demonstrated ability to effectively challenge in business or team settings.
• Ability to effectively work with internal and external partners in a highly collaborative environment.
• Demonstrated critical thinking and knowledge of data analysis tools and techniques and decision-making abilities to effectively recommend data-driven solutions.
• Proactively identifies potential concerns and effectively recommends solutions.
• Advanced proficiency with Microsoft Office products including Word, Excel, and PowerPoint.

Skills

• Strong communication, documentation, stakeholder management, and analytical skills.
• Industry-recognized certifications, including PCCSP, CISSP, CISM, CRISC, CISA, Security+, or similar risk and security certifications.
• Experience with cloud security governance and risk management across platforms such as Microsoft Azure, Amazon Web Services (AWS), or Google Cloud Platform (GCP).
• Familiarity with DevSecOps methodologies, CI/CD security controls, secure code review practices, and vulnerability management processes.
• Experience implementing or supporting Secure Software Development Lifecycle (SSDLC) practices within enterprise technology environments.
• Knowledge of industry-standard frameworks and controls, including CSA CCM, NIST, ISO 27001, COBIT, OWASP, and SOC 2.
• Experience working in highly regulated industries, such as financial services, healthcare, insurance, government, or technology organizations.
• Strong ability to collaborate with cross-functional stakeholders, including engineering, security, audit, compliance, and business teams.

Benefits

• Comprehensive medical, dental, and vision plans.
• 401(k) plan.
• Pension plan.
• Life insurance.
• Parental benefits.
• Adoption assistance.
• Paid time off program with paid holidays plus 16 paid volunteer hours.
• Variety of wellness programs.
• Career path planning and continuing education.

Pay

The salary range for this position is: $85,440.00 - $162,550.00. USAA does not provide visa sponsorship for this role. Please do not apply for this role if at any time (now or in the future) you will need immigration support (i.e., H-1B, TN, STEM OPT Training Plans, etc.).

Schedule

This position can be based in one of the following locations: Charlotte, NC, or Tampa. Relocation assistance is not available for this position.