Senior API Security & Governance Lead

U.S. Bank; Hopkins (MN); Hybrid; USD 127,000 - 149,000; Full time

Benefits offered by this job

Healthcare (medical, dental, vision)

Life insurance

Disability insurance

Parental leave

401(k) retirement plan

Paid vacation

11 paid holidays

Adoption assistance

Sick leave

Job summary

U.S. Bank is seeking a Lead Information Security Consultant - API Security & Governance to elevate API security across the enterprise.

You will define standards, establish governance, assess risk, and drive secure API adoption in collaboration with security, risk, and technology teams. You will oversee threat modeling, architecture reviews, and ongoing security evaluations, partnering with platform teams on Apigee, GraphQL, AWS API Gateway, and other API technologies to ensure

Qualifications

• 10+ years in information security or related fields.
• Deep expertise in API Security and Application Security principles.
• Experience creating and enforcing security standards and governance.
• Strong understanding of API design, auth, and risk management.
• Threat modeling, security reviews, and architecture assessments experience.
• Ability to improve an organization’s API security posture.
• Experience partnering with security, risk, architecture and engineering teams.
• Familiarity with regulatory and compliance considerations.
• Hands-on experience with APIs or API technologies.
• Influence security initiatives across large enterprises without direct authority.

Responsibilities

• Lead development and governance of enterprise API security standards.
• Assess and improve API security posture via reviews and risk assessments.
• Provide guidance on secure API architecture, authentication, and encryption.
• Collaborate with security, risk, architecture and engineering teams to mitigate risks.
• Conduct architecture reviews, threat modeling, and security assessments for API-enabled apps.

Skills

10+ years in Information Security

API Security

Security architecture

Governance and policy implementation

Threat modeling

Risk assessment

Stakeholder collaboration

Regulatory compliance

Hands-on app/API development

Influencing without authority

Tools

API gateways (Apigee, AWS API Gateway)

Security frameworks knowledge

Job description

U.S. Bank is seeking a Lead Information Security Consultant - API Security & Governance to elevate API security across the enterprise.

You will define standards, establish governance, assess risk, and drive secure API adoption in collaboration with security, risk, and technology teams. You will oversee threat modeling, architecture reviews, and ongoing security evaluations, partnering with platform teams on Apigee, GraphQL, AWS API Gateway, and other API technologies to ensure