Senior API Security & Governance Lead

U.S. Bank; Chicago (IL); Presencial; USD 127.000 - 149.000; Jornada completa

Ventajas ofrecidas por este puesto de trabajo

Healthcare (medical)

401(k) plan

Paid time off

Disability & life insurance

Descripción de la vacante

U.S. Bank is seeking a Lead Information Security Consultant focused on API Security and Governance to elevate our API program. You will partner with Information Security, Technology Risk, and engineering teams to define standards, perform risk assessments, and drive secure API adoption enterprise-wide.

You will influence secure-by-design practices and spearhead threat modeling, architecture reviews, and governance efforts while aligning with regulatory requirements and industry best practices.

Formación

• 10+ years in information security, application security, API security, or related field.
• Deep expertise in API security principles, frameworks, and best practices.
• Experience developing and enforcing security standards, governance models, controls, and policies.
• Strong understanding of API design, authentication, authorization, and risk management.

Responsabilidades

• Lead development, maintenance, and governance of enterprise API security standards.
• Assess and improve API security posture through reviews and risk evaluations.
• Provide guidance on secure API architecture, authentication, and encryption.
• Partner with security, risk, architecture, business, and engineering teams to mitigate API risks.
• Conduct architecture reviews, threat modeling, and security assessments for API-enabled apps.
• Define and promote API security best practices and reusable patterns.
• Drive secure-by-design practices and alignment with regulatory requirements.
• Support regulatory, compliance, audit, and risk management activities related to API security.
• Serve as a trusted advisor for API security initiatives.
• Stay current on API threats and technologies to improve security capabilities.
• Collaborate with platform teams supporting Apigee, GraphQL, AWS API Gateway, and other API tech.

Conocimientos

API Security

Security Architecture

Threat Modeling

Security Governance

Cross-Functional Collaboration

Regulatory Compliance

Hands-on Application Security

Herramientas

Apigee

AWS API Gateway

GraphQL

Descripción del empleo

U.S. Bank is seeking a Lead Information Security Consultant focused on API Security and Governance to elevate our API program. You will partner with Information Security, Technology Risk, and engineering teams to define standards, perform risk assessments, and drive secure API adoption enterprise-wide.

You will influence secure-by-design practices and spearhead threat modeling, architecture reviews, and governance efforts while aligning with regulatory requirements and industry best practices.