Secure Business Enablement Executive

US Bank; Minneapolis (MN); On-site; USD 200,000 - 320,000; Full time

Job summary

U.S. Bank is seeking the Secure Business Enablement Executive to lead Information Security Services, partnering with Technology and the businesses to securely enable modernization, artificial intelligence, cloud adoption and enterprise transformation.

The role translates cybersecurity strategy into scalable engineering capabilities, with accountability for an organization of approximately 100 FTEs and direct collaboration with the CISO, CIOs and other senior executives to drive secure delivery

Job description

At U.S. Bank, we're on a journey to do our best. Helping the customers and businesses we serve to make better and smarter financial decisions and enabling the communities we support to grow and succeed. We believe it takes all of us to bring our shared ambition to life, and each person is unique in their potential. A career with U.S. Bank gives you a wide, ever-growing range of opportunities to discover what makes you thrive at every stage of your career. Try new things, learn new skills and discover what you excel at-all from Day One.

Job Description

The Secure Business Enablement Executive leads how Information Security Services partners with Technology and the businesses to securely enable modernization, artificial intelligence, cloud adoption and enterprise transformation. The role brings together application security, cloud security, security architecture, third-party security integration and business information security engagement under one accountable executive, reducing handoffs and creating a more consistent experience for Technology and business partners.

This leader is responsible for translating cybersecurity strategy into scalable engineering capabilities, standards and reusable patterns that allow Technology teams to move faster while reducing material exposure, technology complexity and attack surface. The role shifts security from primarily downstream review toward security engineered into platforms, architecture and delivery, with clear shared outcomes across ISS and Technology.

This is an enterprise executive role with direct accountability for multiple critical security engineering and enablement functions, an organization of approximately 100 FTEs, and material influence over the bank's technology, AI, cloud, software, SaaS and third-party strategies. The leader operates directly with the CISO, CIOs and other senior executives; makes decisions affecting enterprise technology delivery and cyber risk; and is accountable for integrating strategy, architecture, engineering, risk and business outcomes across organizational boundaries. The breadth, complexity, executive influence and enterprise impact materially exceed a single-function security leadership role.

Strategic Mandate

• Operationalize the enterprise cybersecurity strategy and Technology partnership by embedding security earlier in technology decisions, architecture and software delivery.
• Create one integrated secure-delivery organization spanning application security, cloud security, security architecture, third-party security integration and BISO engagement.
• Enable the bank's AI, cloud and modernization agenda through secure patterns, paved paths, automation and risk-informed decision-making.
• Reduce technology complexity and attack surface through enterprise standards, lifecycle discipline, software and SaaS rationalization, and stronger technology and third-party architecture decisions.
• Establish shared ISS and Technology measures that demonstrate whether secure engineering is reducing material exposure, improving resilience and accelerating safe delivery.

Key Accountabilities

• Enterprise secure delivery : Lead application security, cloud security and security architecture capabilities; integrate security into software development, cloud platforms, major transformations and technology modernization.
• Technology and business partnership : Serve as the senior ISS partner to CIOs, Technology executives and business leaders. Translate business and technology priorities into clear security engineering actions, decisions and investments.
• AI and emerging technology enablement : Establish scalable patterns for secure AI and agentic technology adoption, including architecture, model and software supply-chain considerations, data protection, identity, runtime controls, payments and ongoing assurance.
• Architecture, standards and simplification : Drive adoption of enterprise security architecture, reusable controls, paved paths and technology standards. Partner on software and SaaS rationalization, lifecycle management and platform consolidation to reduce cost, complexity and risk.
• Application and cloud security modernization : Advance secure-by-design, continuous assurance and automated testing across applications, dependencies, cloud environments and delivery pipelines. Ensure findings translate into prioritized engineering action rather than additional activity or volume.
• Third-party security integration : Integrate security earlier into third-party, SaaS, acquisition and strategic technology decisions. Evaluate technology currency, architecture, concentration, software supply chain, control maturity and compensating controls to inform business decisions.
• BISO model evolution : Evolve business information security engagement toward deeper technical partnership, connecting business priorities and material cyber risk to architecture, engineering, product and portfolio decisions.
• Operating model and experience : Reduce organizational hando