Info Security Advisor - Mid Level

$99,160 - $189,530/Yr

USAA - Charlotte, NC

Full-time - Mid Level

Charlotte, NC

10,001+ employees

Credit Intermediation and Related Activities

About the position

The Info Security Advisor - Mid Level at USAA plays a crucial role in the Workforce Identity and Access Management (IAM) Application Onboarding Team. This position involves working closely with various application teams to ensure compliance with Enterprise IAM platforms and processes. The advisor will conduct in-depth analyses of application IAM architecture, assess information security risks, and provide technical consultation to enhance risk management strategies across the organization.

Responsibilities

• Creates and contributes to Information Security governance.
• Publishes, maintains, and/or interprets moderately complex Information Security governance requirements (e.g. policies and standards).
• Implements repeatable methods and measurements to resolve Information Security risk and recommends improvements to the process.
• Performs security risk assessments of moderately complex projects, new technologies, business partners, and third parties.
• Consults with individuals and teams (advice, guidance and assistance) on Information Security risk; guides the security direction of USAA technical projects and initiatives.
• Recommends risk treatment options for technical projects and initiatives.
• Responds both verbally and in writing to routine inquiries and periodic exams from internal control partners (e.g. legal, compliance, audit, risk).
• Guides and assists process owners in the identification, development, and testing of Information Security controls for risk mitigation effectiveness.
• Ensures risks associated with business activities are effectively identified, measured, monitored, and controlled in accordance with risk and compliance policies and procedures.

Requirements

• Bachelor's degree; OR 4 years of related experience may be substituted in lieu of degree.
• 4 years of work experience in one or more of the eight areas: Security and Risk Management, Asset Security, Security Architecture and Engineering, Communication and Network Security, Identity and Access Management (IAM), Security Assessment and Testing, Security Operations, and/or Software Development Security.
• 2 years of related experience in conducting risk assessments, recommending risk treatment options and/or developing program governance (e.g. policies and standards).
• Proficient level of business insight in the areas of business operations, risk management, industry practices and emerging trends.
• Solid grasp of security protocols, application security, cryptography, authentication, authorization, and security.
• Knowledge of applicable information security frameworks, standards, regulatory requirements, and controls.
• Knowledge and application of security controls/mechanisms and threat/risk assessment techniques pertaining to complex data, application, and networking environments.

Nice-to-haves

• Experience in Identity and Access Management capabilities including Authentication methods and tools, Access Reviews, Role Based Access Frameworks, User Provisioning, Privileged Access Management.
• Experience with IAM Risks and Controls.
• Excellent written and verbal communication skills.
• Demonstrate initiatives and ability to coordinate across functional lines.

Benefits

• Comprehensive medical, dental and vision plans
• 401(k)
• Pension
• Life insurance
• Parental benefits
• Adoption assistance
• Paid time off program with paid holidays plus 16 paid volunteer hours
• Various wellness programs
• Career path planning and continuing education assistance