Executive Director, Technology Business Risk and Controls - Data and AI

usaa; United States; Hybrid; USD 180,000 - 240,000; Full time

Job summary

USAA is seeking an Executive Director, Technology Business Risk & Controls - Data & AI, to lead a high-impact risk program across critical technology functions. You will partner with executive leaders to strengthen governance, drive proactive risk mitigation, and enable responsible innovation.

This role reports to senior leadership and requires a strategic, collaborative approach to governance, risk, and control design, including managing regulatory examinations and audits.

Qualifications

• Bachelor's degree in Business, Information Technology, Information Security, Information Management, Risk Management, Finance, or a related field.

Responsibilities

• Leads the implementation and advancement of Technology Business Risk and Controls programs, operating models, and roadmaps across assigned technology organizations, ensuring alignment with enterprise objectives, risk appetite, and regulatory expectations.
• Serves as a trusted advisor to senior technology leaders on information technology, cyber, data, AI, resiliency, and operational risk matters, influencing business decisions and risk mitigation strategies.
• Oversees association-scale risk identification, assessment, measurement, monitoring, and control activities related to technology infrastructure, software development, cloud environments, information security, data governance, third-party technology services, and emerging technologies.
• Accountable for the design, implementation, and continuous improvement of first-line technology risk and control programs, including risk and control self-assessments, issue management, control monitoring, risk indicators, loss event management, and governance processes.
• Partners with senior leaders and key control partners, including Risk Management, Compliance, Audit, Legal, to address complex risk matters, drive remediation efforts, and ensure sustainable control effectiveness.
• Leads first-line engagement activities for regulatory examinations, internal audits, external audits, and risk reviews, ensuring timely responses, effective remediation plans, and sustainable issue resolution.
• Drives identification of emerging technology, cyber, data, and operational risk themes and systemic control weaknesses through analytics, trend analysis, and industry intelligence, driving proactive mitigation strategies.
• Oversees the development, monitoring, and reporting of technology risk metrics and key risk indicators for senior leadership and governance committees to support informed decision-making and risk transparency.
• Builds and oversees a high performing team through ongoing execution of recruiting, development, retention, coaching and support, performance management, and managerial activities.
• Ensures risks associated with business activities are effectively identified, measured, monitored, and controlled in accordance with risk and compliance policies and procedures.

Education

Bachelor's degree in Business, Information Technology, Information Security, Information Management, Risk Management, Finance, or a related field

Job description

Why USAA?

At USAA, our mission is to empower our members to achieve financial security through highly competitive products, exceptional service and trusted advice. We seek to be the #1 choice for the military community and their families.

Embrace a fulfilling career at USAA, where our core values - honesty, integrity, loyalty and service - define how we treat each other and our members. Be part of what truly makes us special and impactful.

We are proud to support active-duty military spouses. USAA roles may offer remote or hybrid flexibility for active-duty military spouses consistent with applicable policy and business needs.

The Opportunity

As the Executive Director, Technology Business Risk & Controls - Data & AI , you will serve as a senior leader within the First Line of Defense, providing strategic direction and oversight of the technology risk and control environment across critical technology functions. In this highly visible role, you will partner with executive technology leaders, business stakeholders, and risk partners to strengthen governance frameworks, enhance control effectiveness, and ensure alignment with risk management objectives and regulatory expectations.

You will lead a high-performing team of Business Risk & Controls professionals responsible for identifying, assessing, monitoring, and mitigating risks associated with data, analytics, artificial intelligence, and emerging technologies. This role is accountable for driving association-wide risk and control programs, strengthening regulatory and audit readiness, overseeing issue management and remediation efforts, and advancing governance processes that foster a strong risk culture while enabling innovation, operational excellence, and business growth.

As a trusted advisor to senior executives, you will influence strategic decision-making by providing expert guidance on technology risk, control design, regulatory compliance, and the evolving risk landscape surrounding data and AI. Success in this role requires a visionary leader who can effectively balance risk management with business priorities, embedding sustainable and scalable controls that protect the organization while accelerating responsible innovation, resilience, and long-term value creation.

We offer a flexible work environment that requires an individual to be in the office 4 days per week. This position can be based in one of the following locations: San Antonio, TX, Plano, TX, Phoenix, AZ, Colorado Springs, CO, Charlotte, NC, or Tampa, FL Relocation assistance is available for this position.

What you'll do:

• Leads the implementation and advancement of Technology Business Risk and Controls programs, operating models, and roadmaps across assigned technology organizations, ensuring alignment with enterprise objectives, risk appetite, and regulatory expectations.
• Serves as a trusted advisor to senior technology leaders on information technology, cyber, data, AI, resiliency, and operational risk matters, influencing business decisions and risk mitigation strategies.
• Oversees association-scale risk identification, assessment, measurement, monitoring, and control activities related to technology infrastructure, software development, cloud environments, information security, data governance, third-party technology services, and emerging technologies.
• Accountable for the design, implementation, and continuous improvement of first-line technology risk and control programs, including risk and control self-assessments, issue management, control monitoring, risk indicators, loss event management, and governance processes.
• Partners with senior leaders and key control partners, including Risk Management, Compliance, Audit, Legal, to address complex risk matters, drive remediation efforts, and ensure sustainable control effectiveness.
• Leads first-line engagement activities for regulatory examinations, internal audits, external audits, and risk reviews, ensuring timely responses, effective remediation plans, and sustainable issue resolution.
• Drives identification of emerging technology, cyber, data, and operational risk themes and systemic control weaknesses through analytics, trend analysis, and industry intelligence, driving proactive mitigation strategies.
• Oversees the development, monitoring, and reporting of technology risk metrics and key risk indicators for senior leadership and governance committees to support informed decision-making and risk transparency.
• Builds and oversees a high performing team through ongoing execution of recruiting, development, retention, coaching and support, performance management, and managerial activities.
• Ensures risks associated with business activities are effectively identified, measured, monitored, and controlled in accordance with risk and compliance policies and procedures.

What you have:

Bachelor's degree in Business, Information Technology, Information Security, Information Management, Risk Management, Finance, or a related f