Senior Audit Project Manager - Information Security

US Bank; Charlotte (NC); On-site; USD 120,000 - 160,000; Full time

Benefits offered by this job

Healthcare (medical, dental, vision)

Life insurance

Disability insurance

Parental leave

401(k) retirement plan

Paid vacation

Paid holidays

Adoption assistance

Sick leave

Job summary

U.S. Bank is seeking a Corporate Audit Services Senior Audit Project Manager (SAPM) to lead audit engagements with minimal supervision, ensuring high-quality results and compliance with internal policies and II A Standards.

The role emphasizes risk assessment, program development, and staff coaching across multiple projects. You will collaborate across defense lines, oversee progress against plans, and provide on-the-job guidance on credit risk and IT security controls.

Qualifications

• Bachelor's Degree or equivalent work experience.
• Typically more than 10 years of applicable experience.
• Professional certifications (e.g., CISSP, CISM, CISA, CIA, AWS Cloud Practitioner, Microsoft Azure Administrator) or advanced degree is a plus.
• Strong project management and execution skills, including prioritizing tasks and managing multiple projects.
• Experience in Agile/Continuous Deployment/Delivery/DevSecOps and Secure Software Development.
• AI security, API and Cloud Migration experience.
• Advanced data analytics and visualization acumen.
• Knowledge of IT Frameworks (COBIT, ITIL, NIST, FEDRAMP, PCI-DSS, AGILE, AWS Well Architected).
• Technical knowledge in at least two cybersecurity domains (e.g., API, Secure Cloud Architecture, deployment models, encryption/tokenization, cryptography).
• Strong written and verbal communications; ability to work under deadline pressure.

Responsibilities

• Independently lead and execute audit engagements, or supervise staff when applicable, ensuring timely delivery of high-quality audit results.
• Review and assess audit work for accuracy and adherence to policies and standards.
• Identify risk exposures and develop action plans with root-cause analysis.
• Plan engagements by documenting processes, risks, and controls; develop audit programs.
• Support reporting and wrap-up activities, including issue disposition and clear audit reports.
• Monitor engagement progress and ensure timely workpaper reviews; address delivery risks.
• Provide coaching and technical guidance on audit execution and credit risk topics.
• Collaborate across defense lines to ensure coordinated audit coverage of credit-related activities.

Skills

Project management

Agile

Cybersecurity

Data analytics

Communication

Problem solving

Cloud security

Risk assessment

Education

Bachelor's degree

Cybersecurity certification (preferred)

Job description

At U.S. Bank, we're on a journey to do our best. Helping the customers and businesses we serve to make better and smarter financial decisions and enabling the communities we support to grow and succeed. We believe it takes all of us to bring our shared ambition to life, and each person is unique in their potential. A career with U.S. Bank gives you a wide, ever-growing range of opportunities to discover what makes you thrive at every stage of your career. Try new things, learn new skills and discover what you excel at-all from Day One.

Job Description

The Corporate Audit Services Senior Audit Project Manager (SAPM) is primarily responsible for leading staff in the completion of audit engagements with minimal supervision from managers, however there are no direct reports. The Senior Audit Project Manager is expected to monitor progress of audit engagements against plan and schedule, assess work performed by the audit engagement team, and provide coaching and on-the-job training for team members to ensure engagements are completed in conformance with internal audit policies and procedures.

Primary Responsibilities

• Independently lead and execute audit engagements, or supervise audit staff when applicable, ensuring timely delivery of high‑quality, well‑supported audit results.
• Review and assess audit work to confirm accuracy, completeness, relevance, and adherence to internal audit policies, procedures, and IIA Standards.
• Evaluate audit issues to ensure appropriate identification of risk exposures, root causes, and practical, effective management action plans.
• Plan audit engagements by: Understanding and documenting business processes
• Identifying key risks and controls
• Assessing control design and operating effectiveness
• Developing audit programs that clearly support audit objectives
• Support audit reporting and wrap‑up activities, including issue disposition and contribution to clear, concise, and well‑supported audit reports.
• Monitor engagement progress against plan and schedule, proactively addressing risks to delivery and ensuring timely workpaper reviews.
• Provide on‑the‑job coaching and technical guidance to audit staff, with emphasis on audit execution quality and credit risk subject‑matter application.
• Collaborate across the three lines of defense and with other CAS audit teams to ensure coordinated, risk‑focused, and efficient audit coverage of credit‑related activities.
• Perform other duties as assigned by management.

Basic Qualifications

• Bachelor's Degree or equivalent work experience
• Typically more than 10 years of applicable experience

Preferred Skills

• Undergraduate degree in a Technology, Cybersecurity or Engineering related field of concentration or equivalent combination of training and experience. Professional certification (e.g., CISSP, CISM, CISA, CIA, AWS Cloud Practitioner, Microsoft Azure Administrator) or advanced degree (e.g., MS in Technology/Information Security, MBA) is a plus.
• Strong Project management and execution skills, including prioritizing tasks, balancing workload between multiple projects, anticipating next steps, adapting to changing situations and project scope.
• Agile/Continuous Deployment/Continuous Delivery/DevSecOps, Secure Software Development
• AI security, API and Cloud Migration experience
• Advanced data analytics and visualization acumen
• Strong knowledge of IT Frameworks (e.g., COBIT, ITIL, NIST, FEDRAMP, PCI-DSS, AGILE, AWS Well Architected Framework etc.
• Technical knowledge of at least two cybersecurity domains: API, Secure Cloud Architecture, Deployment models, data encryption/tokenization, cryptography, vulnerability and configuration management, Zero Trust, Network Segmentation, authentication/authorization protocols. Hands‑on experience in at least one of the above.
• Critical thinking and intellectual curiosity
• Written and verbal communications - ability to create clear, concise, and engaging messaging across multiple formats.
• Ability to work well under deadline pressure.

*This role requires working from a U.S. Bank location three (3) or more days per week.

If there's anything we can do to accommodate a disability during any portion of the application or hiring process, please refer to our disability accommodations for applicants .

Benefits:

• Healthcare (medical, dental, vision)
• Basic term and optional term life insurance
• Short‑term and long‑term disability
• Pregnancy disability and parental leave
• 401(k) and employer‑funded retirement plan
• Paid vacation (from two to five weeks depending on salary grade and tenure)
• Up to 11 paid holiday opportunities
• Adoption assistance
• Sick and Safe Leave accruals of one hour for every 30 worked, up to 80 h