Senior System-Level Security Risk Lead

U.S. Bank; Chicago (IL); On-site; USD 110,000 - 155,000; Full time

Benefits offered by this job

Healthcare

401(k) retirement plan

Paid vacation

Job summary

U.S. Bank is seeking a Senior Information Security System-Level Risk Analyst to lead risk assessments across applications and technology environments within the System Level Risk Assessment program.

You will partner with owners, security teams, and business stakeholders to evaluate controls and guide mitigation strategies. You will mentor analysts, help mature the SLRA program, and drive risk-informed decisions with senior leadership while ensuring governance and compliance across critical

Qualifications

• Minimum 7 years in information technology and/or information security and compliance.
• Experience in conducting complex risk assessments in technology, cybersecurity, or enterprise settings.
• Strong knowledge of governance, policies, standards, and risk management frameworks.
• Excellent communication to influence engineers to executives.
• Ability to mentor and lead within a team environment.

Responsibilities

• Lead complex system-level and residual risk assessments for high-risk apps and tech environments.
• Evaluate controls design and effectiveness to determine overall risk exposure.
• Identify gaps and provide actionable risk-based recommendations.
• Partner with owners and teams to discuss outcomes and remediation.
• Mentor analysts and support program maturation.

Skills

InfoSec risk mgmt

Risk assessments

Security controls

Residual risk

Governance & standards

Communication skills

Mentoring

Education

Bachelor's degree or equivalent

Job description

U.S. Bank is seeking a Senior Information Security System-Level Risk Analyst to lead risk assessments across applications and technology environments within the System Level Risk Assessment program.

You will partner with owners, security teams, and business stakeholders to evaluate controls and guide mitigation strategies. You will mentor analysts, help mature the SLRA program, and drive risk-informed decisions with senior leadership while ensuring governance and compliance across critical