Director, Information Security – Privileged Access Management

USAA

USAA financial security director leading enterprise privileged access management. Owning CyberArk controls, regulatory compliance, vendors, and security teams for military-community members.

Posted 8/19/2026full-timeSan Antonio • Texas • 🇺🇸 United StatesLead💰 $164,780 - $314,960 per yearWebsite

Core Competencies

Role fit

Core Competencies

Use this summary to align your resume positioning with the role.

Demonstrates expertise in Privileged Access Management (PAM) strategy, governance, and implementation, with a strong focus on risk management and compliance within the information security domain. Proven ability to lead teams, manage vendor relationships, and communicate effectively with stakeholders at all levels.

Highest-signal resume keywords

Privileged Access Management (PAM)CyberArk PAM SolutionsInformation Security Risk ManagementRegulatory Compliance ManagementTeam Leadership and Development

ATS Keywords

Tailor your resume

Applicant Tracking System Keywords

Tip: use these terms in your resume and cover letter to boost ATS matches.

Hard Skills

Privileged Account GovernanceCredential ManagementSession ManagementLeast-Privilege CapabilitiesCryptographyAuthenticationAuthorizationSecurity ControlsRisk ManagementCybersecurity Solutions

Soft Skills

Strong Written CommunicationStrong Verbal Communication

Tools & Technologies

CyberArkFFIEC Cybersecurity Assessment ToolNIST Cybersecurity FrameworkPCI DSS

Industry Keywords

Information SecurityCybersecurityFinancial InstitutionAudit CommitmentsBusiness Operations

Tech Stack

Tools & technologies

Cyber Security

About the role

Key responsibilities & impact

Lead USAA’s enterprise Privileged Access Management program
Own the PAM strategy and roadmap
Drive implementation and ongoing effectiveness of privileged account governance, credential management, session management, and least-privilege capabilities
Serve as senior product owner and PAM subject matter expert
Partner with cybersecurity, engineering, audit, risk, compliance, legal, and business stakeholders
Prioritize investments, deliver security solutions, and meet regulatory commitments
Provide strategic and operational leadership
Oversee vendor relationships and manage remediation efforts
Report program performance and risk to senior leadership
Own strategic direction, roadmaps, policies, standards, procedures, governance, and metrics for the information security domain
Direct effective operation of the enterprise information security domain, including capacity, resilience, and dependability
Develop and communicate information security risk management policies and procedures with the CISO and senior leaders
Represent USAA in discussions with external regulators
Oversee continuous monitoring of cybersecurity activities and alert senior management to risks, compliance issues, and inefficiencies
Develop and deliver governance and assurance models across multiple domains and the enterprise
Identify and evaluate operational solutions to reduce risk and meet compliance requirements
Promote information security awareness
Manage organizational manpower and budgets as financial steward
Build and oversee a team through recruiting, development, retention, coaching, performance management, and managerial activities
Ensure business risks are identified, measured, monitored, and controlled

Requirements

What you’ll need

Bachelor's degree in Information Security, Information Technology, Computer Science, Business Administration, Information Systems/Management, or related field; OR 4 years of relevant education and/or experience
8 years of related information security experience in one or more domains
3 years of direct team lead, supervisor, or management experience in an Information Security or Information Technology domain
4 years of researching, designing or implementing technology, information security or cybersecurity solutions in a large financial institution or large enterprise information security program
Experience driving delivery of PAM capabilities and controls, including privileged account governance, credential management, session management, and least-privilege initiatives
Experience partnering with engineering, security, audit, risk, and business stakeholders to define requirements, prioritize work, and implement PAM solutions
Experience administering and supporting CyberArk PAM solutions, including Safes, Platforms, CPM, PSM, and PVWA
Strong knowledge of cryptography, authentication, authorization, and security controls
Knowledge of IT risks and experience implementing security solutions
Experience managing regulatory and audit commitments related to privileged access
Experience acting as primary PAM product owner and subject matter expert
Expert business acumen in business operations, risk management, industry practices, and emerging trends
Expert knowledge of FFIEC, Gramm-Leach-Bliley, FFIEC Cybersecurity Assessment Tool, NIST Cybersecurity Framework, and PCI DSS
Strong written and verbal communication skills
Must not require immigration support or visa sponsorship now or in the future

Benefits

Comp & perks

Comprehensive medical, dental and vision plans
401(k)
Pension
Life insurance
Parental benefits
Adoption assistance
Paid time off program with paid holidays
16 paid volunteer hours
Various wellness programs
Career path planning
Continuing education
Relocation assistance is not available for this position