Director, Information Security – Privileged Access Management

Jobtailor; San Antonio, Northern (TX, KY); Hybrid; USD 150,000 - 210,000; Full time

Job summary

USAA is seeking a senior leader to own the Privileged Access Management program, shaping strategy, roadmaps, and governance across the enterprise. You will drive implementation of privileged account governance, credential and session management, and least-privilege controls while partnering with security, risk, audit, and engineering teams.

You will act as the PAM subject matter expert, oversee vendor relationships, manage budgets, and communicate risk and progress to senior leadership.

Qualifications

• Bachelor's degree or equivalent in information security, IT, CS or related field, or 4 years of relevant education/experience.
• 8+ years of information security experience in one or more domains.
• 3+ years of direct team lead or management experience in information security or IT.
• Experience delivering PAM capabilities and controls, including least-privilege.
• Experience partnering with stakeholders to define requirements and implement PAM solutions.
• Experience administering CyberArk PAM solutions (Safes, CPM, PSM, PVWA).
• Strong knowledge of cryptography, authentication, authorization, and security controls.
• Experience with regulatory and audit commitments in privileged access.

Responsibilities

• Lead or oversee enterprise PAM program strategy, roadmaps, policies, standards, and governance.
• Drive implementation and ongoing effectiveness of privileged account governance and credential management.
• Own the PAM product direction and subject matter expertise across the organization.
• Partner with cybersecurity, engineering, audit, risk, compliance, legal, and business stakeholders.
• Prioritize investments, deliver security solutions, and meet regulatory commitments.
• Provide strategic and operational leadership and manage vendor relationships.
• Report program performance and risk to senior leadership.

Skills

Privileged Access Management (PAM)

Team Leadership

Risk Management

Regulatory Compliance

Security Architecture

Stakeholder Communication

Education

Bachelor's degree in Information Security/IT/CS or related

4 years relevant education or experience

Tools

CyberArk PAM

FFIEC Cybersecurity Assessment Tool

NIST Cybersecurity Framework

PCI DSS

Job description

• Lead USAA’s enterprise Privileged Access Management program
• Own the PAM strategy and roadmap
• Drive implementation and ongoing effectiveness of privileged account governance, credential management, session management, and least-privilege capabilities
• Serve as senior product owner and PAM subject matter expert
• Partner with cybersecurity, engineering, audit, risk, compliance, legal, and business stakeholders
• Prioritize investments, deliver security solutions, and meet regulatory commitments
• Provide strategic and operational leadership
• Oversee vendor relationships and manage remediation efforts
• Report program performance and risk to senior leadership
• Own strategic direction, roadmaps, policies, standards, procedures, governance, and metrics for the information security domain
• Direct effective operation of the enterprise information security domain, including capacity, resilience, and dependability
• Develop and communicate information security risk management policies and procedures with the CISO and senior leaders
• Represent USAA in discussions with external regulators
• Oversee continuous monitoring of cybersecurity activities and alert senior management to risks, compliance issues, and inefficiencies
• Develop and deliver governance and assurance models across multiple domains and the enterprise
• Identify and evaluate operational solutions to reduce risk and meet compliance requirements
• Promote information security awareness
• Manage organizational manpower and budgets as financial steward
• Build and oversee a team through recruiting, development, retention, coaching, performance management, and managerial activities
• Ensure business risks are identified, measured, monitored, and controlled

Requirements

• Bachelor's degree in Information Security, Information Technology, Computer Science, Business Administration, Information Systems/Management, or related field; OR 4 years of relevant education and/or experience
• 8 years of related information security experience in one or more domains
• 3 years of direct team lead, supervisor, or management experience in an Information Security or Information Technology domain
• 4 years of researching, designing or implementing technology, information security or cybersecurity solutions in a large financial institution or large enterprise information security program
• Experience driving delivery of PAM capabilities and controls, including privileged account governance, credential management, session management, and least-privilege initiatives
• Experience partnering with engineering, security, audit, risk, and business stakeholders to define requirements, prioritize work, and implement PAM solutions
• Experience administering and supporting CyberArk PAM solutions, including Safes, Platforms, CPM, PSM, and PVWA
• Strong knowledge of cryptography, authentication, authorization, and security controls
• Knowledge of IT risks and experience implementing security solutions
• Experience managing regulatory and audit commitments related to privileged access
• Experience acting as primary PAM product owner and subject matter expert
• Expert business acumen in business operations, risk management, industry practices, and emerging trends
• Expert knowledge of FFIEC, Gramm-Leach-Bliley, FFIEC Cybersecurity Assessment Tool, NIST Cybersecurity Framework, and PCI DSS
• Strong written and verbal communication skills
• Must not require immigration support or visa sponsorship now or in the future

Core Competencies

Demonstrates expertise in Privileged Access Management (PAM) strategy, governance, and implementation, with a strong focus on risk management and compliance within the information security domain. Proven ability to lead teams, manage vendor relationships, and communicate effectively with stakeholders at all levels.

Highest-signal resume keywords

• Privileged Access Management (PAM)
• CyberArk PAM Solutions
• Information Security Risk Management
• Regulatory Compliance Management
• Team Leadership and Development

ATS Optimization Keywords

Hard Skills

• Privileged Account Governance
• Credential Management
• Session Management
• Least-Privilege Capabilities
• Cryptography
• Authentication
• Authorization
• Security Controls
• Risk Management
• Cybersecurity Solutions

Soft Skills

• Strong Written Communication
• Strong Verbal Communication

Industry Keywords

• Information Security
• Cybersecurity
• Financial Institution
• Audit Commitments
• Business Operations

Tools & Technologies

• CyberArk
• FFIEC Cybersecurity Assessment Tool
• NIST Cybersecurity Framework
• PCI DSS