Senior API Security & Governance Lead

U.S. Bank; Atlanta (GA); On-site; USD 127,000 - 149,000; Full time

Benefits offered by this job

Healthcare

401(k)

Paid vacation

Sick leave

Job summary

U.S. Bank is seeking a Lead Information Security Consultant specializing in API Security & Governance to strengthen API security enterprise-wide.

The role partners with Information Security, Technology Risk, Enterprise Architecture, and engineering teams to implement and enforce security standards across API platforms and programs. The candidate will lead threat modeling, risk assessments, and architecture reviews, ensuring secure API adoption and regulatory compliance while staying current with

Qualifications

• 10+ years in Information Security, App Security, API Security, or related field.
• Deep expertise in API Security principles, frameworks, and best practices.
• Experience developing and enforcing security standards, governance models and policies.
• Strong understanding of secure API design, authentication, authorization, and risk management.
• Experience threat modeling, security reviews, architecture assessments, and risk evaluations.
• Ability to influence security initiatives across large enterprise without direct authority.

Responsibilities

• Lead development and governance of enterprise API security standards and controls.
• Assess and improve API security posture via reviews, risk assessments, and control evaluations.
• Provide guidance on secure API architecture, authentication, authorization, encryption, and threat protection.
• Collaborate with IS, Technology Risk, Enterprise Architecture, business lines, and engineering teams.
• Conduct architecture reviews, threat modeling, and security assessments for API-enabled apps and platforms.
• Promote secure-by-design API development practices and governance frameworks.

Skills

API Security

Information Security

Security Architecture

Threat Modeling

Governance & Compliance

Security Reviews

Risk Assessments

Authentication & Authorization

Regulatory Knowledge

Influence without authority

Job description

U.S. Bank is seeking a Lead Information Security Consultant specializing in API Security & Governance to strengthen API security enterprise-wide.

The role partners with Information Security, Technology Risk, Enterprise Architecture, and engineering teams to implement and enforce security standards across API platforms and programs. The candidate will lead threat modeling, risk assessments, and architecture reviews, ensuring secure API adoption and regulatory compliance while staying current with