Director Cloud Security
LOCATIONS: Richfield, MN, United States; and Remote, United States
At U.S. Bank, we’re passionate about helping customers and the communities where we live and work. The fifth-largest bank in the United States, we’re one of the country’s most respected, innovative and successful financial institutions. U.S. Bank is an equal opportunity employer committed to creating a diverse workforce. We consider all qualified applicants without regard to race, religion, color, sex, national origin, age, sexual orientation, gender identity, disability or veteran status, among other factors.
Job DescriptionU.S. Bank is seeking a Cloud Information Security Director with demonstrated competence and visionary leadership experience to contribute toward the success of our cloud technology initiatives. Directs and oversees the development and maintenance of cloud information security architecture patterns that enable the enterprise information security program. Well-developed leadership abilities and a strong familiarity and continued growing experience in cutting-edge cloud security practices are essential. Responsible for creating and leading a large team of dynamic cloud security professionals that enable our product teams.
Working independently, guides security engineering teams overseeing Application Security, Container and Microservices security, API Security and Infrastructure Vulnerability Management products. This role will be the people leader for teams supporting cloud security engineers responsible for the most complex and technologically driven digital transformation products with the largest market demand; deemed as vital to the organization. Operates at a highly independent level, consulting with and advising executive management on the potential implications of various actions. Oversees the development of short- and long-term goals to meet product objectives measured through key results and the implementation of appropriate long term strategic plans and presents them to management. Requires an expert knowledge of the assigned business line and technical skills.
Directs and oversees day-to-day operation and effectiveness of cloud security-related programs and initiatives with a hyper focus on Azure and AWS footprints.Sets guidance and direction for securing the Bank’s custom code, containers, APIs, and constructs.Works with development and infrastructure support management to drive security by design into security product backlogs.Monitors regulatory environment for emerging requirements that will affect the Bank’s information security program and initiatives.Evaluates security requirements in context with other business requirements and recommends measures to manage risk and adequately secure information systems.Monitors changes in business, technology, and threat environments to identify and develop strategies for addressing new risks to Bank systems and information.Directs and oversees maintenance of programs to manage risks to the Bank’s network, systems, and data from malware, network intrusion, and other threats. Assesses the risk associated with newly discovered vulnerabilities and directs the application of vendor-supplied patches to manage risk.Assesses cost of potential threats relative to cost of solutions required to eliminate or minimize threats.
Bachelor’s degree or equivalent work experienceDemonstrated previous experience managing a team of peopleFamiliarity with Cyber Security and NIST 800-53 FrameworksPreferred Skills and Competencies
Demonstrated experience participating in due diligence process for mergers and acquisitionsAbility to work in agile/scrum environmentsKnowledge of threat management in security practicesFamiliarity with architectural frameworksProviding guidance for directional decisions required in complex technologiesExperience with the managing and provisioning of infrastructure through code via machine readable files instead of through manual processes (IaC) Experience with the use of code to define and manage rules and conditions (using Python, YAML, etc) to assure enforcements based on specific tool sets (PaC and OPA in AWS CDK)Experience and familiarity planning and deploying constructs that scale and provide full lifecycle security for containerized environments from pipeline to perimeterExperience implementing and managing operational responsibilities for detection/management of vulnerabilities across cloud infrastructure, cloud application lifecycle, container images and serverless functions to prevent security and compliance issues from progressing through the development pipelineAbility to strategically position machine-learning driven runtime defense to protect bank applications and environments from threatsExposure to leveraging behavioral learning to automate the creation and enforcement of security models/ profiles for API protection, Container security, Cloud infrastructure vulnerability scanning and Application Security
Employee Value Proposition (EVP)
Features of the role and the benefits available to those employed at The U.S. Bank. (Common EVP elements include):
Rewards: Competitive compensation, full employee benefits, paid time off and well-deserved recognition are some of the considerations in our rewards offerings.Opportunity: We offer excellent development and career opportunities, future growth, career pathing and personal upskillingOrganization: The U.S. Bank is recognized in various categories and has won awards for best leadership teams (2019), Best Company Outlook (2019), Best Company Culture (2018), Best Company for Women (2018) enjoying industry desirability, while continuously working to promote environmental, and social responsibility along with diversity and inclusion.People: Our teams are empowered to challenge the status quo through a collaborative culture with camaraderie, innovation, and supportive leadershipWork: Our team members are challenged with opportunities to work on innovative and impactful assignments with cutting-edge technology. They enjoy flexible work arrangements to promote work-life balance and psychological safety.#LI-REMOTE
If there’s anything we can do to accommodate a disability during any portion of the application or hiring process, please refer to our disability accommodations for applicants.
Learn how the way we work at U.S. Bank drives meaningful relationships with our customers and collaboration across the company.
Benefits: Take care of yourself and your family with U.S. Bank employee benefits. We know that healthy employees are happy employees, and we believe that work/life balance should be easy to achieve. That’s why we share the cost of benefits and offer a variety of programs, resources and support you need to bring your full self to work and stay present and committed to the people who matter most – your family.
Learn all about U.S. Bank employee benefits, including tuition reimbursement, retirement plans and more, by visiting careers.usbank.com.
EEO is the LawApplicants can learn more about the company’s status as an equal opportunity employer by viewing the federal EEO is the Law poster.
U.S. Bank participates in the U.S. Department of Homeland Security E-Verify program in all facilities located in the United States and certain U.S. territories. The E-Verify program is an Internet-based employment eligibility verification system operated by the U.S. Citizenship and Immigration Services. Learn more about the E-Verify program.
The salary range reflects figures based on the primary location, which is listed first. The actual range for the role may differ based on the location of the role. In addition to salary, US Bank offers a comprehensive benefits package, including incentive and recognition programs, equity stock purchase 401k contribution and pension (all benefits are subject to eligibility requirements). Pay Range: $140,930.00 – $165,800.00 – $182,380.00
Due to legal requirements, U.S. Bank requires that the successful candidate hired for some positions be fully-vaccinated for COVID-19, absent being granted an accommodation due to a medical condition, pregnancy, or sincerely held religious belief or other legally required exemption. For these positions, as part of the conditional offer of employment, the successful candidate will be asked to provide proof of vaccination or approval for an accommodation or exemption upon hire.
U.S. Bank will consider qualified applicants with criminal histories in a manner consistent with the San Francisco Fair Chance Ordinance.