Senior Information Security Risk Oversight Specialist

U.S. Bank; Minneapolis (MN); On-site; USD 120,000 - 141,000; Full time

Benefits offered by this job

Healthcare (medical, dental, vision)

Life insurance

Disability insurance

Paid vacation

Paid holidays

401(k)

Adoption assistance

Parental leave

Job summary

U.S. Bank seeks an Information Security Risk Oversight Professional to provide independent risk oversight across the enterprise Information Security program, including governance, risk assessments, controls, security metrics, and issue management.

You will translate complex technical issues into concise risk insights for senior leaders. The role requires 8+ years in information security or related fields, strong critical thinking, and the ability to champion risk-based decisions with evidence

Qualifications

• Bachelor's degree, or equivalent work experience.
• Typically, more than eight years of applicable experience in information security, technology risk, audit, engineering, architecture, or risk management.

Responsibilities

• Provide independent oversight across Information Security pillars including governance, risk assessments, controls, and issue management.
• Analyze designs, processes, and evidence to identify gaps and emerging risks.
• Articulate independent risk opinions with evidence, regulatory expectations, and judgment.
• Challenge ineffective practices and misaligned controls.
• Ensure first line activities align with laws, standards, and internal policy.

Skills

Technical knowledge across security

Independent risk assessment

Critical thinking

Executive communication

Risk governance & oversight

Education

Bachelor's degree or equivalent

Job description

U.S. Bank seeks an Information Security Risk Oversight Professional to provide independent risk oversight across the enterprise Information Security program, including governance, risk assessments, controls, security metrics, and issue management.

You will translate complex technical issues into concise risk insights for senior leaders. The role requires 8+ years in information security or related fields, strong critical thinking, and the ability to champion risk-based decisions with evidence