Information Security Director - Cyber Threat Intelligence

At U.S. Bank, we’re on a journey to do our best. Helping the customers and businesses we serve to make better and smarter financial decisions and enabling the communities we support to grow and succeed.  We believe it takes all of us to bring our shared ambition to life, and each person is unique in their potential. A career with U.S. Bank gives you a wide, ever-growing range of opportunities to discover what makes you thrive at every stage of your career. Try new things, learn new skills and discover what you excel at—all from Day One.

Job Description

This position is a leadership role within the Information Security Service (ISS) organization at U.S. Bank. Leads a group of security engineers, analysts, or specialists in the threat intelligence domain.  The successful candidate demonstrates a wealth of knowledge around cyber threat intelligence processes, vendors, dissemination, and action of key intelligence indicators.  This position is a highly visible role and has a history of building programs and delivering impactful results.  Responsibilities include providing coaching and support to the growth of the team, evaluating capacity within the team, increasing skills and training, and playing a stakeholder role on prioritization of work with the appropriate product manager as needed. As a people manager, participating in strategic initiatives that impact the overall bank strategy will be tasked as necessary.

Responsibilities:

• Manage, empower, and lead a team of cyber threat analysts.
• Mature our threat intelligence strategy and framework and oversee the collection, analysis, and dissemination of actionable threat intelligence.
• The manager will maintain policy and set the strategic priorities within the team for securing the Bank's systems and information.
• Directs and leads development, implementation, and enforcement of organization-wide threat intelligence policies and procedures.
• Monitors regulatory environment for emerging requirements that will affect the Bank's information security program and initiatives. Updates the policy and the program to support compliance.
• Evaluates security requirements in context with other business requirements and recommends measures to manage risk and adequately secure information systems.
• Monitors changes in business, technology, and threat environments to identify and develop strategies for addressing new risks to Bank systems and information.
• Establishes security monitoring practices for all platforms across the enterprise.
• Directs and oversees maintenance of programs to manage risks to the Bank's network, systems, and data from malware, network intrusion, and other threats.
• Assesses the risk associated with newly discovered vulnerabilities and directs the application of vendor-supplied patches to manage risk.
• Assesses cost of potential threats relative to cost of solutions required to eliminate or minimize threats.
• Hands-on experience applying artificial intelligence and machine learning techniques to cyber threat intelligence operations, including developing or deploying models for anomaly detection, threat actor profiling, and predictive analytics to proactively identify and mitigate emerging risks.
• Serves as liaison to internal and external auditors, regulators, and customers in examinations of the Bank's threat intelligence program. Monitors all phases of audits to ensure progress according to audit plan, monitors status of ongoing reviews.
• Will manage staff of up to 10 employees. Recommends: hires, transfers, terminations, salary adjustments, performance standards and reviews.

Basic Qualifications

• Bachelor’s degree in computer science or similar field.
• 10 years relevant experience.
• 3 years management experience.

Preferred Skills/Experience

• At least 10 years’ experience with management approaches, tools, and techniques for leading teams and working collaboratively with leadership.
• At least 10 years’ experience with processes, tools, techniques and practices for assuring adherence to standards associated with accessing and disseminating cyber threat intelligence information throughout an organization.
• Exceptional writing, public speaking, and executive collaboration.
• Strong communicator with executive presence. 
• Able to translate technical insights into strategic action.
• Demonstrated experience leveraging artificial intelligence and machine