AVP, Audit Services - Cybersecurity & Core Technology

Why USAA? At USAA, our mission is to empower our members to achieve financial security through highly competitive products, exceptional service and trusted advice. We seek to be the #1 choice for the military community and their families. Embrace a fulfilling career at USAA, where our core values – honesty, integrity, loyalty and service – define how we treat each other and our members. Be part of what truly makes us special and impactful. We are proud to support active-duty military spouses. USAA roles may offer remote or hybrid flexibility for active-duty military spouses consistent with applicable policy and business needs.

Reporting directly to the Head of I.T. Audit, the AVP, Audit Services - Cybersecurity & Core Technology will lead audit assurance and advisory services across the Cybersecurity and Core Technology Audit portfolios, including technology infrastructure, security operations, resiliency, cloud, artificial intelligence, identity and access management, data protection, third-party technology risk, and other enterprise technology domains. This executive will also develop, coordinate, and oversee a comprehensive, risk-based audit strategy that provides independent and objective assurance over the effectiveness of governance, risk management, compliance, and control processes. Moreover, this executive will be responsible for the long-term strategy, audit coverage model, talent strategy, and execution of the annual audit plan for assigned areas.  He or she will need to partner with senior executives, business leaders, risk and control partners, regulators, and governance committees to provide credible challenge, identify emerging risks, and ensure audit coverage remains aligned with enterprise strategy, regulatory expectations, and the evolving technology and cyber threat landscape.  He or she will also need to maintain strong knowledge of financial services regulations, technology risk management standards, internal audit professional practices, and heightened regulatory expectations. Location USAA offers a flexible work environment that requires an individual to be in the office 4 days per week. This position can be based in one of the following locations: Plano, TX (strong preference); Charlotte, NC. Relocation assistance is available for this position.

Lead the design and execution of the enterprise risk-based audit strategy, annual audit plan, and audit universe for Cyber Security and Core Technology, ensuring alignment with USAA’s business strategy, technology roadmap, regulatory expectations, and enterprise risk profile. Oversee all aspects of audit delivery for assigned portfolios, including risk assessment, audit scoping, execution, reporting, issue follow-up, continuous monitoring, quality, resource prioritization, and timely escalation of significant risks or control concerns. Provide independent, objective assurance and advisory insight on the effectiveness of technology and cyber governance, risk management, compliance, internal controls, operational resilience, third-party technology risk, and regulatory readiness. Serve as a senior Audit point of contact for technology, cyber security, infrastructure, and enterprise risk governance forums, ensuring insights from committee participation and continuous monitoring are communicated across Audit Services and incorporated into audit planning. Engage senior business, technology, cyber security, risk, compliance, and executive stakeholders to discuss risks and controls, provide credible challenge, influence risk-informed decisions, and promote appropriate balance between strategic objectives and control discipline. Monitor technology, cyber, regulatory, operational, and industry trends to identify emerging risks, adjust audit coverage, and ensure the audit approach remains responsive to changes in the business, threat environment, and regulatory landscape. Review and approve audit reports and key deliverables for