Senior API Security & Governance Leader

Usbank; Irving (TX); On-site; USD 127,000 - 149,000; Full time

Benefits offered by this job

Healthcare

Life insurance

Disability insurance

Parental leave

401(k)

Paid vacation

Paid holidays

Adoption assistance

Sick leave

Job summary

U.S. Bank in Irving, TX is seeking a Lead Information Security Consultant - API Security & Governance to strengthen API security across the enterprise.

You will define security standards, governance, and risk assessments for API programs, collaborating with Information Security, Technology Risk, Enterprise Architecture, and engineering teams. This role drives secure API development, advises on authentication, authorization, encryption, threat protection, monitoring, and lifecycle management, and

Qualifications

• 10+ years of experience in Information Security, Application Security, API Security, Security Architecture, or related field.
• Deep expertise in API Security and Application Security principles, frameworks, and best practices.
• Experience developing, implementing, and enforcing security standards, governance models, controls, and policies.
• Strong understanding of secure API design, architecture, authentication, authorization, and risk management.
• Experience performing threat modeling, security reviews, architecture assessments, and risk evaluations.
• Proven ability to assess and improve an organization’s API security posture.
• Experience partnering with security, risk, architecture, business, and engineering stakeholders across large enterprise environments.
• Strong understanding of security frameworks, regulatory requirements, and compliance considerations.

Responsibilities

• Lead the development, maintenance, and evolution of enterprise API security standards, controls, and governance practices.
• Assess and improve the bank's overall API security posture through security reviews, risk assessments, and control evaluations.
• Provide guidance on secure API architecture, authentication, authorization, encryption, threat protection, monitoring, and lifecycle management.
• Partner with Information Security, Technology Risk, Enterprise Architecture, and engineering teams to identify and mitigate API security risks.
• Conduct architecture reviews, threat modeling exercises, and security assessments for API-enabled applications and platforms.
• Define and promote API security best practices, reusable security patterns, and governance frameworks across the enterprise.
• Influence technology teams to adopt secure-by-design API development and implementation practices.
• Support regulatory, compliance, audit, and risk management activities related to API and Application Security.
• Serve as a trusted advisor and subject matter expert for API Security and Application Security initiatives.
• Stay current on emerging API threats, vulnerabilities, technologies, and industry best practices to continuously improve enterprise security capabilities.
• Collaborate with platform teams supporting Apigee, GraphQL, AI APIs, AWS API Gateway, and other API technologies to ensure security requirements are consistently applied.
• Drive alignment between business objectives, security requirements, and enterprise technology standards.

Skills

InfoSec experience

API security

Security architecture

Governance

Threat modeling

Risk assessments

Auth & encryption

Stakeholder collaboration

Regulatory compliance

Hands-on API dev

Tools

Apigee

AWS API Gateway

GraphQL gateways

Kong

MuleSoft

Job description

U.S. Bank in Irving, TX is seeking a Lead Information Security Consultant - API Security & Governance to strengthen API security across the enterprise.

You will define security standards, governance, and risk assessments for API programs, collaborating with Information Security, Technology Risk, Enterprise Architecture, and engineering teams. This role drives secure API development, advises on authentication, authorization, encryption, threat protection, monitoring, and lifecycle management, and