Since the beginning, our mission has been to provide a range of financial services to the military community and their families. Along the way, we’ve also established ourselves as a destination employer for passionate people looking to serve those who are willing to give it their all. 

Our mission is to stand with our members and be there for them and their families by facilitating their financial security. It starts with offering a range of highly competitive products, exceptional service, and trusted advice. But to be the military community’s provider of choice also takes dedicated team members who share our core values of service, loyalty, honesty, and integrity.

Industry: Financial Services
Company Size: 10,001+ employees

USAA

Savvy Admin PROD

**Why USAA?**

At USAA, our mission is to empower our members to achieve financial security through highly competitive products, exceptional service and trusted advice. We seek to be the #1 choice for the military community and their families.

Embrace a fulfilling career at USAA, where our core values – honesty, integrity, loyalty and service – define how we treat each other and our members. Be part of what truly makes us special and impactful.

We are proud to support active-duty military spouses. USAA roles may offer remote or hybrid flexibility for active-duty military spouses consistent with applicable policy and business needs.

**The Opportunity**

We are seeking a **Risk and Compliance Advisor Lead – Information Security ** to provide second-line independent oversight and effective challenge across business products, services, and processes. This role is responsible for ensuring alignment with regulatory requirements and USAA policies and procedures while strengthening the organization’s overall risk and compliance framework. The individual will partner closely with business leaders to deliver thoughtful risk guidance, supporting the identification, assessment, and mitigation of operational, information security, fraud, and data-related risks. This position requires strong business acumen across banking and insurance operations, along with a deep understanding of industry practices, regulatory expectations, and emerging risk trends. The ideal candidate will demonstrate the ability to evaluate processes, risks, and controls; identify and escalate emerging issues; analyze large and complex data sets; and translate insights into clear, actionable recommendations for diverse stakeholders.

In addition to technical expertise, this role requires a strong commitment to leadership and talent development, including at least three years of experience leading and mentoring information security or risk professionals. The successful candidate will foster a culture of accountability, continuous improvement, and professional growth while influencing partners across all levels of the organization. With 6+ years of experience in a large financial institution supporting or executing enterprise-wide operational risk programs, the candidate should possess exceptional communication skills and the ability to simplify complex risk concepts into practical business guidance. Professional certifications such as CISSP, CISM, CRISC, or similar information security or risk management credentials are preferred and demonstrate the advanced level of expertise expected for success in this role.

We offer a flexible work environment that requires an individual to be **in the office 4 days per week. ** This position can be based in one of the following locations: San Antonio, TX, Plano, TX, Phoenix, AZ, Charlotte, NC, or Tampa, FL.

Relocation assistance is **not ** available for this position.

**What You'll Do**

- Routinely communicates results of risk assessments to governance committees, business process owners and various levels of leadership and influences decision making.

- Develops processes and procedures for successful implementation of new risk policies, practices, appetites, and solutions to ensure holistic understanding and management of risks according to industry best practice.

- Identifies and seeks key stakeholders across the enterprise to support the identification, assessment, aggregation and the overall management of risks and controls.

- Crafts key communications related to risk and compliance insights to be delivered to executives and board members.

- Executes compliance risk management activities in accordance with enterprise compliance standards.

- Maintains and expands expert knowledge of the competitive/regulatory landscape and the company's key challenges. Keeps abreast of the competitive/regulatory landscape and shares expert knowledge w/team members.

- Coordinates and responds to regulatory requirements and requests and ensures the execution of examinations.

- Applies expert knowledge to utilize or produce analytical material for discussions with cross functional teams to understand business objectives and influence solution strategies.

- Leads, assembles, and facilitates cross-functional teams to identify, assess, aggregate, and mitigate current and emerging risk events.

- Serves as the point of contact for senior risk leadership on projects and special management requests that often impact the enterprise or core operating area.

- Formulates and reviews stress test plans for a line of business or the enterprise.

**What You Have**

- Bachelor's degree; OR 4 years of relevant education and/or experience.

**Experiences That Will Support Your Success**

- 8 or more years relevant experience in risk, compliance, legal or audit within the financial services or insurance industry or specialized technical fields directly related to the role.

- Risk and compliance management experience in a complex institution and/or highly matrixed environment.

- Expert knowledge of compliance laws, regulations, and regulatory expectations.

- Demonstrated ability to apply expert knowledge of regulatory risk and compliance to consult and provide insights and guidance.

- Demonstrated experience in conflict resolution management and ability to effectively challenge at all levels of management and influence business outcomes.

- Experience leading and directing work with internal and external partners in a highly collaborative environment.

- Demonstrated critical thinking and knowledge of data analysis tools and techniques and decision-making abilities, to include demonstrated ability to effectively make data-driven decisions.

- Proactively identifies potential concerns and resolve issues.

- Advanced proficiency with Microsoft Office products including Word, Excel, and PowerPoint.

**What Sets You Apart**

- US military experience through military service or a military spouse/domestic partner

-  6+ years of experience within a large financial institution supporting or executing an enterprise-wide operational risk management program in alignment with regulatory expectations

- Strong business acumen across operational risk, banking and insurance operations, and awareness of industry practices and emerging trends

-  In-depth knowledge of cybersecurity, information security (across multiple domains), fraud risk management, and data risk management

- Proven ability to assess processes, risks, and controls; identify emerging risks; analyze large volumes of data; and deliver clear, actionable insights to diverse stakeholders

-  Excellent written and verbal communication skills, with the ability to convey complex topics in a concise and effective manner

- Professional certifications such as CISSP, CISM, CRISC, or similar information security or risk management credentials

**Compensation range: **The salary range for this position is: $143,320 - $273,930**.**

**USAA does not provide visa sponsorship for this role. Please do not apply for this role if at any time (now or in the future) you will need immigration support (i.e., H-1B, TN, STEM OPT Training Plans, etc.).**

**Compensation: ** USAA has an effective process for assessing market data and establishing ranges to ensure we remain competitive. You are paid within the salary range based on your experience and market data of the position. The actual salary for this role may vary by location.

Employees may be eligible for pay incentives based on overall corporate and individual performance and at the discretion of the USAA Board of Directors.

The above description reflects the details considered necessary to describe the principal functions of the job and should not be construed as a detailed description of all the work requirements that may be performed in the job.

**Benefits: ** At USAA our employees enjoy best-in-class benefits to support their physical, financial, and emotional wellness. These benefits include comprehensive medical, dental and vision plans, 401(k), pension, life insurance, parental benefits, adoption assistance, paid time off program with paid holidays plus 16 paid volunteer hours, and various wellness programs. Additionally, our career path planning and continuing education assists employees with their professional goals.

For more details on our outstanding benefits, visit our benefits page on USAAjobs.com.

~~Applications for this position are accepted on an ongoing basis, this posting will remain open until the position is filled. Thus, interested candidates are encouraged to apply the same day they view this posting.~~

~~USAA is an Equal Opportunity Employer. All qualified applicants will receive consideration for employment without regard to race, color, religion, sex, sexual orientation, gender identity, national origin, disability, or status as a protected veteran. ~~

Risk and Compliance Advisor Lead - Information Security

Melwood is a family of companies with a shared vision of a world where people with disabilities are fully included. Melwood comprises three primary companies—Melwood Enterprises, Melwood Community Services, and Melwood Inc.—together serving as one of the nation’s leading advocates, service providers, and employers of people with disabilities and their caregivers. We offer employment, job placement, job training, life skills for independence, support services, and youth and community recreational services to more than 3,000 people each year in D.C., Maryland, and Virginia. For more information, visit www.melwood.org.   

Melwood Inc. is defined by an innovative and flexible mindset willing to challenge norms, and is set to continue leading as an innovator, educator, and advocate in removing the barriers from individuals with disabilities, as well as a source of critical services for those looking to grow and learn from our best practices. Read more at www.melwood.org.  

Melwood Enterprises will continue to deliver top-tier business solutions to public and private sector clients across more than 60 locations in Maryland, Virginia, and Washington, D.C. Visit www.melwoodenterprises.org for more.  

Melwood Community Services will continue to offer impactful programming that empowers children, youth, and adults with disabilities to live, work, and thrive in their communities. For more, visit www.melwoodcommunity.org.

Industry: Individual and Family Services
Company Size: 1,001-5,000 employees

Melwood

The Cybersecurity and Compliance Specialist is responsible for protecting Melwood's information systems, data, and technology infrastructure through the ongoing implementation, monitoring, and management of enterprise cybersecurity controls and regulatory compliance programs. This role serves as the organization's primary internal subject matter expert on cybersecurity frameworks applicable to federal contractors and regulated nonprofit environments, working in close coordination with IT leadership and external compliance advisors to build and sustain a compliant, resilient, and continuously improving security posture. The Cybersecurity and Compliance Specialist supports the preparation and maintenance of required compliance documentation, manages the organization's security operations practices, and ensures that Melwood's technology environment meets its obligations to employees, program participants, funders, and government partners. This position requires an individual with both the technical hands-on capability to implement and monitor security controls and the analytical discipline to manage compliance programs, track remediation commitments, and communicate risk clearly and accurately to leadership.

Responsibilities:

- Manage the Cybersecurity Compliance Program: Develop, implement, and maintain the organization's cybersecurity compliance program across all applicable regulatory, contractual, and industry standards frameworks. Current primary obligations include federal contractor cybersecurity requirements, healthcare privacy and security standards, federal grants management requirements, and commercial assurance standards. Maintain required compliance documentation including the System Security Plan (SSP) and Plan of Action and Milestones (POA&M). Track remediation commitments, coordinate with IT staff and technology partners on control implementation, and prepare the organization for third-party assessments and audits across all applicable compliance domains.

- Conduct Security Assessments and Gap Analysis: Perform ongoing assessments of the organization's security posture against all applicable regulatory, contractual, and standards frameworks. Identify control gaps, document findings, assign remediation ownership, and track closure through to completion. Support external assessors, auditors, and certification bodies with documentation, evidence, and technical response regardless of which framework or standard is driving the review

- Manage Vulnerability and Patch Programs: Administer the organization's vulnerability management program including scheduled scanning, findings triage, remediation coordination, and reporting. Work with IT infrastructure and application teams to ensure security patches are applied within required timeframes consistent with applicable framework obligations and organizational risk tolerance. Ensure that exceptions are documented, justified, and approved by appropriate authority

- Support Continuous Security Monitoring and Incident Response: Support continuous security monitoring through the organization's security platforms and endpoint protection tools. Investigate alerts, analyze anomalies, and coordinate incident response activities. Maintain the organizational incident response plan and ensure it reflects current regulatory reporting obligations. Prepare and submit required incident reports in accordance with all applicable federal, state, contractual, and regulatory requirements, which may include healthcare privacy laws, federal contractor obligations, and grants management standards.

- Manage Data Classification and Regulated Data Protection: Support the identification, classification, and protection of all regulated information categories across organizational systems. Current regulated categories include Controlled Unclassified Information, Protected Health Information, and Personally Identifiable Information subject to federal and state privacy requirements. Implement and maintain appropriate data classification controls, access restrictions, and monitoring in coordination with IT and business stakeholders. Monitor applicable state and federal privacy regulations for changes that affect organizational obligations and bring material changes to the attention of IT leadership

- Manage Third-Party and Vendor Risk: Evaluate technology vendors and third-party service providers for cybersecurity compliance and risk posture across all applicable frameworks. Review vendor agreements for appropriate security, data handling, and regulatory flow-down obligations including Business Associate Agreements for vendors handling Protected Health Information. Assess software configurations and embedded technology features for compliance with organizational data classification policies and all applicable regulatory requirements, not limited to federal contractor standards.

- Deliver Security Training and Awareness: Develop and deliver cybersecurity awareness training for all staff covering responsible technology use, data protection obligations across all applicable regulatory categories, threat recognition, and incident reporting procedures. Ensure training content reflects the full scope of the organization's regulatory environment and is accessible to staff across all roles and technical literacy levels. Maintain documented training completion records and coordinate role-specific training for IT staff and employees with access to regulated data.

- Maintain Security Documentation and Reporting: Produce accurate and timely security documentation and reporting for internal leadership and external reviewers across all applicable compliance domains. Documentation may include compliance status reports, risk registers, audit evidence packages, remediation tracking, and regulatory submissions. Communicate security, risk and compliance status clearly and concisely to non-technical audiences including organizational leadership, legal counsel, and program leadership. Ensure that reporting reflects the full scope of the organization's compliance obligations and does not treat any single framework as the exclusive measure of the organization's security posture

Qualifications:

- Bachelors degree in information Technology, Information technology, computer science or a related field is required.

- 5+ years in a cyber security or related position is required

- Certified information systems security professional and 5 years of experience will be considered if the candidate does not have a degree.

- Experience in a federal contracting environment is preferred.

Cyber Security & Compliance Specialist

Find Compliance Advisor jobs with Savvy's AI Recruiter. Browse thousands of opportunities from top companies including remote positions. Our AI-powered system matches you with roles that fit your skills and experience.