Senior Information Security Risk Oversight Professional

Usbank; Irving (TX); On-site; USD 120,000 - 141,000; Full time

Benefits offered by this job

Healthcare

401(k) plan

Paid vacation

Sick leave

Job summary

U.S. Bank is seeking an experienced Information Security Risk Oversight Professional to lead independent risk oversight across the enterprise information security program. You will test assumptions, challenge first-line conclusions, and translate technical risk into clear, actionable guidance for senior leaders.

With 8+ years in information security, risk, or audit, you will manage an oversight portfolio, and engage stakeholders to improve risk outcomes while maintaining independence.

Qualifications

• Bachelor's degree or equivalent work experience.
• Typically, more than eight years of applicable experience in information security, technology risk, audit, engineering, architecture, or risk management.

Responsibilities

• Provide independent oversight across Information Security pillars including governance, risk assessments, controls, metrics, and issue management.
• Analyze designs, security processes, control environments, risk assessments to identify gaps and emerging risks.
• Formulate independent risk opinions supported by evidence, regulatory expectations, and professional judgment.
• Challenge inefficient or misaligned practices and escalate material risks through governance channels.
• Ensure alignment of first line activities with laws, regulations, standards, and internal policies.
• Monitor risk indicators, metrics, incidents, and trends to identify material risk and escalation needs.
• Translate technical risk into executive-ready statements and practical recommendations.

Skills

Vulnerability management

Identity and access mgmt

Application security

Cloud security

Data protection

Security governance

Incident management

Security architecture

Education

Bachelor's degree

Job description

U.S. Bank is seeking an experienced Information Security Risk Oversight Professional to lead independent risk oversight across the enterprise information security program. You will test assumptions, challenge first-line conclusions, and translate technical risk into clear, actionable guidance for senior leaders.

With 8+ years in information security, risk, or audit, you will manage an oversight portfolio, and engage stakeholders to improve risk outcomes while maintaining independence.