Lead API Security & Governance Architect

U.S. Bank; Irving (TX); On-site; USD 127,000 - 149,000; Full time

Benefits offered by this job

Healthcare

401(k) plan

Paid vacation

Parental leave

Job summary

U.S. Bank is seeking a Lead Information Security Consultant - API Security & Governance to strengthen and mature API security across the enterprise.

You will partner with Information Security, Technology Risk, Enterprise Architecture, business lines, and technology teams to define standards, establish governance, assess risk, and drive secure API adoption. You will lead architecture reviews, threat modeling, and security assessments for API-enabled apps and platforms, guiding secure-by-design

Qualifications

• 10+ years of information security, API security, or security architecture experience.
• Deep expertise in API security principles and best practices.
• Experience developing and enforcing security standards, governance models, and policies.
• Strong understanding of secure API design, authentication, authorization, and risk management.
• Experience performing threat modeling, security reviews, and architecture assessments.
• Proven ability to improve an organization’s API security posture.
• Experience collaborating with security, risk, architecture, business, and engineering teams.
• Knowledge of security frameworks, regulatory requirements, and compliance considerations.
• Hands-on technical experience with applications, APIs, or API technologies.
• Ability to influence decisions and drive security initiatives without direct authority.

Responsibilities

• Lead development and governance of enterprise API security standards and controls.
• Assess and improve API security posture through reviews, risk assessments, and evaluations.
• Provide guidance on secure API architecture, authentication, authorization, and encryption.
• Partner with security, risk, architecture, and engineering teams to mitigate API risks.
• Conduct architecture reviews and threat modeling for API-enabled applications.
• Define and promote API security best practices across the enterprise.
• Promote secure-by-design API development and implementation practices.
• Support regulatory, compliance, audit, and risk management activities related to API security.
• Serve as a trusted advisor for API security initiatives.
• Stay current on API threats and best practices to continuously improve security capabilities.
• Collaborate with platform teams on Apigee, GraphQL, AWS API Gateway, and other API technologies.

Skills

API Security

Information Security

Security Architecture

Threat Modeling

Governance

Risk Assessments

API Design

Stakeholder Mgmt

Regulatory Compliance

API Development

Job description

U.S. Bank is seeking a Lead Information Security Consultant - API Security & Governance to strengthen and mature API security across the enterprise.

You will partner with Information Security, Technology Risk, Enterprise Architecture, business lines, and technology teams to define standards, establish governance, assess risk, and drive secure API adoption. You will lead architecture reviews, threat modeling, and security assessments for API-enabled apps and platforms, guiding secure-by-design