USAA: Lead Sensitive Data Security Advisor

Company: USAA
Location: San Antonio
Posted on: August 3, 2020

Job Description:

The candidate selected for this position is going to get work with the Payment Card Industry (PCI) Merchant Team in USAA's Enterprise Data Office. They will work with Payment Card Industry (PCI) Data Security Standards (DSS), performing PCI Merchant Governance, and Facilitate Qualified Security Assessor (QSA) Assessments. Develops strategies and data security plans. Provides thought leadership while managing multiple large-scale initiatives. Collaborates with all levels of USAA management and internal partners to assess data security and align to support the organization goals with Enterprise goals. Leads data security risk by identifying, evaluating, assessing, designing, monitoring, administering, reporting and implementing systems, policies and processes. Advises various levels of senior management on data security risk management issues and serves as the primary resource for cross-functional team members on escalated issues of a unique nature. Works under minimal supervision on complex and unique work assignments and recommends appropriate solutions and problem resolution. Job Requirements * Leads technical thought leadership to guide the strategic direction to executive management focusing on data security risk of USAA development projects, departmental initiatives and other special projects. * Provides advanced advice and acts as a data security subject matter expert liaison between the company and staff agencies through formal and ad-hoc inquiries. * Provides governance and leads identifying, analyzing and initiating changes in the data security policies, guidelines and standards including advising company and staff agencies in support of developing and managing the data security awareness program. Provides peer review of work product and deliverables. * Develops, publishes, maintains and interprets highly complex data security governance (e.G. policies, principles, standards) that define Information Security requirements. Resolves conflicts with the governance. * Leads in the optimization, execution, and maintenance of a program of repeatable methods and measurements for data security risk management. * Collaborates on data security risk management strategies and approaches and educates and consults with senior executive risk owners on best practices. * Provides oversight on consulting (advice, guidance and assistance) to the enterprise, focusing on data security risk, to guide the strategic security direction of USAA. Reviews requirements, recommendations, and risk mitigation effectiveness assessments. * Responds both verbally and in writing to complex inquiries and new periodic exams from both internal control partners (e.G. legal, compliance, audit, risk) and external control partners (e.G. regulators, external auditors, third-parties). * Helps optimize and execute methods to improve future inquiry responses. Provides oversight and peer-review of responses. Minimum Education: * Bachelor's degree required. * 4 additional years of related experience beyond the minimum required may be substituted in lieu of a degree. Minimum Experience: * 8 or more years of related experience in Sensitive Data Security, Information Security, Information Assurance, Risk Management, Audit to include accountability for complex tasks and/or projects. * 6 or more years of related experience in conducting risk assessments, recommending risk treatment options and/or developing program governance (e.G. policies and standards). * Expert level of business acumen in the areas of business operations, risk management, industry practices and emerging trends. * Subject-matter-expert knowledge of risk, control, budgets, process and loss costing, and relevant industry data sources, standards, data analysis tools and techniques (e.G. Archer, MetricStream, BWise). *Qualifications may warrant placement in a different job level* When you apply for this position, you will be required to answer some initial questions. This will take approximately 5 minutes. Once you begin the questions you will not be able to finish them at a later time and you will not able to change your responses. Preferred Experience: * Preferred to have CISSP or CISM * Preferred to have PCI Professional (PCIP) Certification * Experience with PCI DSS * Experience with PCI Qualified Security Assessor (QSA) Assessments The above description reflects the details considered necessary to describe the principal functions of the job and should not be construed as a detailed description of all the work requirements that may be performed in the job. At USAA our employees enjoy one of the best benefits package in the business, including a flexible business casual or casual dress environment, comprehensive medical, dental and vision plans, along with wellness and wealth building programs. Additionally, our career path planning and continuing education will assist you with your professional goals. Relocation assistance is available for this position. For Internal Candidates: Must

Keywords: USAA, San Antonio , USAA: Lead Sensitive Data Security Advisor, Accounting, Auditing , San Antonio, Texas