AVP, Audit Services - Cybersecurity & Core Technology

About this role

Why USAA? At USAA, our mission is to empower our members to achieve financial security through highly competitive products, exceptional service and trusted advice. We seek to be the #1 choice for the military community and their families.

Embrace a fulfilling career at USAA, where our core values – honesty, integrity, loyalty and service – define how we treat each other and our members. Be part of what truly makes us special and impactful.

We are proud to support active-duty military spouses. USAA roles may offer remote or hybrid flexibility for active-duty military spouses consistent with applicable policy and business needs.

The Opportunity

Reporting directly to the Head of I.T. Audit, the AVP, Audit Services - Cybersecurity & Core Technology will lead audit assurance and advisory services across the Cybersecurity and Core Technology Audit portfolios, including technology infrastructure, security operations, resiliency, cloud, artificial intelligence, identity and access management, data protection, third-party technology risk, and other enterprise technology domains. This executive will also develop, coordinate, and oversee a comprehensive, risk-based audit strategy that provides independent and objective assurance over the effectiveness of governance, risk management, compliance, and control processes.

Moreover, this executive will be responsible for the long-term strategy, audit coverage model, talent strategy, and execution of the annual audit plan for assigned areas.  He or she will need to partner with senior executives, business leaders, risk and control partners, regulators, and governance committees to provide credible challenge, identify emerging risks, and ensure audit coverage remains aligned with enterprise strategy, regulatory expectations, and the evolving technology and cyber threat landscape.  He or she will also need to maintain strong knowledge of financial services regulations, technology risk management standards, internal audit professional practices, and heightened regulatory expectations.

Location • USAA offers a flexible work environment that requires an individual to be in the office 4 days per week. This position can be based in one of the following locations: Plano, TX (strong preference); Charlotte, NC. Relocation assistance is available for this position.

What You'll Do • Lead the design and execution of the enterprise risk-based audit strategy, annual audit plan, and audit universe for Cybersecurity and Core Technology, ensuring alignment with USAA’s business strategy, technology roadmap, regulatory expectations, and enterprise risk profile.

• Oversee all aspects of audit delivery for assigned portfolios, including risk assessment, audit scoping, execution, reporting, issue follow-up, continuous monitoring, quality, resource prioritization, and timely escalation of significant risks or control concerns.

• Provide independent, objective assurance and advisory insight on the effectiveness of technology and cyber governance, risk management, compliance, internal controls, operational resilience, third-party technology risk, and regulatory readiness.

• Serve as a senior Audit point of contact for technology, cyber security, infrastructure, and enterprise risk governance forums, ensuring insights from committee participation and continuous monitoring are communicated across Audit Services and incorporated into audit planning.

• Engage senior business, technology, cyber security, risk, compliance, and executive stakeholders to discuss risks and controls, provide credible challenge, influence risk-informed decisions, and promote appropriate balance between strategic objectives and control discipline.

• Monitor technology, cyber, regulatory, operational, and industry trends to identify emerging risks, adjust audit coverage, and ensure the audit approach remains responsive to changes in the business, threat environment, and regulatory landscape.

• Review and approve audit reports and key deliverables for assigned areas, ensuring conclusions are well supported, issues are clearly articulated, work complies with audit methodology, regulatory expectations, and IIA standards, and recommendations drive meaningful risk reduction.

• Build, develop, and retain a high-performing team of employees and third-party resources with deep technology, cyber security, infrastructure, risk management, and internal audit capabilities, including succession planning, skills assessment, coaching, and performance management.

• Support the Head of Technology Audit, Audit Executive leadership, CAE, and applicable Board or management committees through briefings, reporting, regulatory engagement support, special audits, strategic initiatives, and enterprise-wide audit practice evolution.

• Coordinate across Audit Services, other assurance leaders, external auditors, regulators, and the Insights and Delivery team to promote integrated coverage, consistent quality, effective use of data and analytics, and efficient sharing of risk intelligence across the enterprise.

What You Have • Bachelors degree, or 4 additional years of related experience beyond the minimum required may be substituted in lieu of a degree.

• 10+ years of experience in internal audit, risk management, compliance, technology risk, cybersecurity, technology operations, or other control partner experience within a complex, matrixed environment.

• 6+ years of people leadership experience building, managing, and developing high-performing teams.

• 4+ years of experience accountable for developing and overseeing technology, cyber security, infrastructure, or related audit plans and execution.

• Experience interacting with regulators regarding audits, controls, regulatory readiness, supervisory matters, or examination activities.

• Expert knowledge of internal auditing standards, audit methodologies, risk assessment practices, and techniques required to perform complex audits.

• Strong understanding of techn

Similar jobs

• SVP - Cyber Security Ops Center & Assurance — SECU · Operations - Raleigh - Creedmoor Rd
• AVP, Internal Audit — Axos · HQ - San Diego, CA
• IT Audit Director – Cyber, AI and Cloud — Fanniemae · Reston, VA | Washington, DC
• Cybersecurity Product & Service Delivery Specialist, AVP — MUFG · Tempe, AZ | Jersey City, NJ | Brea, CA
• AVP, Physical Security Technology Administrator — Citi · New Castle Delaware United States | Irving Texas United States
• IT Audit, Cybersecurity & Risk Senior Consultant — Baker Tilly · USA MA Tewksbury
• Cyber Security Technical Advisor (GRC), AVP — MUFG · Tampa, FL | Jersey City, NJ
• Cybersecurity & Technology Audit Leader — Openai · San Francisco