IS Governance Risk & Compliance Specialist

U.S. Bank • Minneapolis, MN

19h • Hybrid

About The Position

The IS Governance Risk & Compliance Specialist supports the governance, development, maintenance, validation, and ongoing oversight of the Information Security Services (ISS) control environment. The role partners with Control Owners, Business Process Owners, risk partners, technology and cybersecurity teams, auditors, and other stakeholders to help ensure business processes and controls are appropriately designed, accurately documented, effectively maintained, and supported by sufficient evidence.

The specialist serves as a subject-matter resource throughout the control lifecycle, assisting with new and modified controls and business processes, ownership changes, control documentation, change-management activities, annual attestations, data-quality reviews, audit and regulatory requests, and control validation. The role uses independent judgment to evaluate control documentation, proposed changes, supporting evidence, and alignment between documented requirements and actual execution. It also works with Control Owners and Process Owners to identify documentation or control-environment gaps and facilitate corrective action.

The posting also describes responsibility for overseeing implementation of security controls and technologies that protect information assets, including data encryption, access controls, and intrusion detection and prevention systems. This role requires working from a U.S. Bank location three or more days per week.

Requirements

• Bachelor's degree or equivalent work experience.
• At least 2 years of relevant experience.
• Good understanding of Information Security Governance, Risk and Compliance.
• Experience within Governance, Risk & Compliance (GRC), cybersecurity controls, technology risk, internal controls, or a related discipline.
• Experience developing, reviewing, maintaining, and validating controls and supporting control documentation.
• Experience evaluating control design, execution, evidence, and alignment between documented requirements and operational practices.
• Experience with business-process governance and analyzing relationships among processes, risks, controls, systems, and accountable owners.
• Experience facilitating control walkthroughs, readiness reviews, quality reviews, or similar control-validation activities.
• Experience supporting internal audit, control testing, quality assurance, regulatory reviews, issue remediation, or corrective-action activities.
• Strong analytical and critical-thinking skills, including the ability to identify documentation, execution, ownership, data-quality, or control-environment gaps.

Nice To Haves

• Ability to be flexible and adapt to change.
• Excellent written and verbal communication skills.

Responsibilities

• Support governance, development, maintenance, validation, and ongoing oversight of the Information Security Services control environment.
• Partner with Control Owners, Business Process Owners, risk partners, technology and cybersecurity teams, auditors, and other stakeholders on control and process governance.
• Assist stakeholders with developing new controls and business processes and modifying existing controls.
• Support control ownership changes, control documentation, change-management activities, annual attestations, and data-quality reviews.
• Respond to or support audit and regulatory requests and control validation activities.
• Evaluate control documentation, proposed changes, and supporting evidence, including alignment between documented requirements and actual execution.
• Work with Control Owners and Process Owners to identify documentation and control-environment gaps and facilitate corrective action.
• Oversee implementation of security controls and technologies, including data encryption, access controls, and intrusion detection and prevention systems.

Benefits

• Healthcare, including medical, dental, and vision coverage.
• Basic term and optional term life insurance.
• Short-term and long-term disability coverage.
• Pregnancy disability and parental leave.
• 401(k) and employer-funded retirement plan.
• Paid vacation, from two to five weeks depending on salary grade and tenure.
• Up to 11 paid holiday opportunities.
• Adoption assistance.
• Sick and Safe Leave accruals of one hour for every 30 hours worked, up to 80 hours per calendar year unless otherwise provided by law.
• Incentive and recognition programs.
• Equity stock purchase.
• Pension.

What This Job Offers

• Job Type: Full-time
• Career Level: Mid Level