Director of Information Security - Posture Risk Management

At U.S. Bank, we’re on a journey to do our best. Helping the customers and businesses we serve to make better and smarter financial decisions and enabling the communities we support to grow and succeed.  We believe it takes all of us to bring our shared ambition to life, and each person is unique in their potential. A career with U.S. Bank gives you a wide, ever-growing range of opportunities to discover what makes you thrive at every stage of your career. Try new things, learn new skills and discover what you excel at—all from Day One.

Job Description

We are seeking a leader with experience in cloud security transformation to help us implement a Posture Risk Management function within Information Security Services. This role will be accountable for the vision and execution plans for a strategic Information Security function intended to define and communicate clear, measurable, and prioritized security enhancement opportunities to key Enterprise stakeholders. The ideal candidate will have a deep knowledge base of security principles (inclusive of cloud), awareness of & insight into key security risks & compliance considerations unique to the financial services industry, strategic vision to support the development of a new Enterprise-aligned security function, and the ability to work with a wide range of stakeholders to execute against the program's vision.

The role offers a hybrid/flexible schedule, which means there’s an in-office expectation of 3 or more days per week and the flexibility to work outside the office location for the other days at one of the following locations:

• Minneapolis, MN
• Cincinnati, OH

Responsibilities:

• Set the direction & establish an execution plan for Posture Risk Management as a governance function at U.S. Bank
• Build a team to execute key aspects of the strategic plan, keeping in mind the resourcing needs for both short-term and long-term aspects of the function
• Lead with vision to ensure execution of key dependencies in support of overall CSPM objectives
• Oversee and opine on analysis of risk and compliance objectives for cloud-based applications and services
• Provide leadership and decisioning regarding prioritization of security risks, vulnerabilities, and threats
• Identify risks across the organization, and be able to drive key remediation planning efforts
• Ensure alignment on, and execution of, risk mitigation strategies for enterprise business partners
• Communicate security risks and recommendations to Enterprise leadership in a clear and concise manner
• Provide leadership to a team in support of program effectiveness enhancements
• Ensure shared business outcomes include security needs

Basic Qualifications:

• Bachelor's degree or equivalent work experience
• 10+ years' experience with information security execution roles
• 5+ years' experience with cloud security risk and/or architecture roles
• 5+ years' experience with risk management and/or audit in the technology space
• 2+ years' leadership in the technology space
• Strong internal initiative, desire to collaborate
• Experience implementing new Enterprise technologies and processes
• Experience defining, organizing and executing toward leadership objectives within a large-scale organization

Experience Should Include:

• Strong decision-making and problem-solving skills
• Detailed knowledge of cloud security concepts and architecture
• Strong soft skills & people management experience
• Confidence in communicating technical information to both technical and non-technical audiences and stakeholders at every level of the organization
• Strong writing skills with experience in documenting gap analyses and team documentation
• The ability to build and maintain relationships across diverse technical and non-technical teams
• A diverse technical background, including experience with enterprise operations/metrics reporting, regulatory compliance, technologies and controls that mitigate information security risks
• Experience using reporting with advanced business analytics tools such as Tableau and/or Power BI
• Knowledge of IT industry trends and direction and environment

Top Skills:

• Cloud Security Expertise to include AWS, Azure
• Understanding of SaaS/PaaS architectures, shared r