Senior API Security & Governance Leader

U.S. Bank; Atlanta (GA); On-site; USD 127,000 - 149,000; Full time

Benefits offered by this job

Healthcare (medical, dental, vision)

401(k) plan

Paid vacation & holidays

Job summary

U.S. Bank is seeking a Lead Information Security Consultant for API Security & Governance to strengthen API security across the enterprise. You will be a senior SME evaluating and maturing the organization’s API security posture while aligning practices with security standards and regulatory requirements.

You will collaborate with Information Security, Technology Risk, Enterprise Architecture, and engineering teams to drive secure API adoption and governance across the bank.

Qualifications

• 10+ years in Information Security, Application Security, API Security, or related field.
• Deep API Security and Application Security principles, frameworks and best practices.
• Experience developing and enforcing security standards, governance models, controls, and policies.
• Strong understanding of secure API design, authentication, authorization and risk management.
• Experience threat modeling, security reviews, architecture assessments, and risk evaluations.

Responsibilities

• Lead development, maintenance, and evolution of enterprise API security standards, controls, and governance practices.
• Assess and improve API security posture through reviews, risk assessments, and control evaluations.
• Provide guidance on secure API architecture, authentication, authorization, encryption, threat protection, monitoring, and lifecycle management.
• Partner with security, risk, architecture, business, and engineering teams to mitigate API security risks.
• Conduct architecture reviews, threat modeling exercises, and security assessments for API-enabled apps and platforms.
• Define and promote API security best practices and governance frameworks.

Skills

API Security

Information Security

Security Architecture

Governance & Controls

Threat Modeling

Stakeholder Engagement

Security Standards

Regulatory Compliance

Secure-by-Design

Influence without Authority

Tools

Apigee

AWS API Gateway

GraphQL

Job description

U.S. Bank is seeking a Lead Information Security Consultant for API Security & Governance to strengthen API security across the enterprise. You will be a senior SME evaluating and maturing the organization’s API security posture while aligning practices with security standards and regulatory requirements.

You will collaborate with Information Security, Technology Risk, Enterprise Architecture, and engineering teams to drive secure API adoption and governance across the bank.