Senior Audit Manager - Information Security

U.S. Bank•Minneapolis, MN

3d•$143,905 - $169,300•Hybrid

About The Position

The Corporate Audit Services Senior Audit Manager (SAM) is primarily responsible for leading staff in the completion of audit engagements and managing the assigned Information Security audit portfolio. The SAM is responsible for providing oversight of audit engagements to ensure the engagements meet timelines, quality and budgetary requirements. This role is responsible for providing thought leadership and strategic directions on the coverage of information security risks at the Bank, developing audit plan, serving as co-risk owner, as well as coaching and developing team members. Partners with Senior to Executive Leaders in their assigned Line of Business, Risk/Compliance/Audit (RCA) Consultants, RCA Managers and other Senior RCA Managers to, depending on the function, oversee the successful creation, implementation, and maintenance of an effective risk management framework. Accountable for projects and/or activities that ensure compliance with applicable federal, state, and local laws and regulations. Identifies gaps and drives solutions that minimize losses resulting from inadequate internal processes, systems or human errors. Accountable for the active identification, response and/or escalation of risks as appropriate. Influences policies and procedures to maximize profit potential and minimize regulatory exposure. Accountable for an effective partnership between the Line of Business and the Lines of Defense. Manages a team of RCA Professionals with responsibility for staffing, performance management, prioritizing, guidance and training.

Requirements

Undergraduate degree in a Technology, Cybersecurity or Engineering related field of concentration or equivalent combination of training and experience
Expert in Project management and execution skills, including prioritizing tasks, balancing workload between multiple projects, anticipating next steps, adapting to changing situations and project scope
Agile/Continuous Deployment/Continuous Delivery/DevSecOps, Secure Software Development
API and Cloud Migration experience
Advanced data analytics, AI and visualization acumen
Strong knowledge of IT Frameworks (e.g., COBIT, ITIL, NIST, FEDRAMP, PCI-DSS, CRI Cyber Risk Profile, AGILE, AWS Well Architected Framework etc.) and experience in implementing, operationalizing or leveraging these frameworks in leading audit and risk management practices
Technical knowledge of at least two of: API, secure cloud architecture, data encryption, deployment models, Zero Trust, network segmentation, authentication/authorization protocols, or cryptography
Hands-on experience in at least one of the above
Critical thinking and intellectual curiosity
Written and verbal communications – ability to create clear, concise, and engaging messaging across multiple formats
Ability to work well under deadline pressure
Track record in developing team members
Bachelor's or advanced degree, or equivalent work experience
Typically more than 12 years of applicable experience
Considerable understanding of applicable laws, regulations, financial services, and regulatory trends that impact their assigned line of business
Considerable understanding of the business line’s operations, products/services, systems, and associated risks/controls
Thorough knowledge of Risk/Compliance/Audit competencies
Strong leadership and management skills of processes, projects and people
Effective skills at managing stressful situations
Effective written and verbal communication skills
Strong analytical, problem-solving and negotiation skills
Proficient computer skills, especially Microsoft Office applications

Nice To Haves

Professional certification (e.g., CISSP, CISM, CISA, CIA, AWS Cloud Practitioner, Microsoft Azure Administrator, AI related certification)
Advanced degree (e.g., MS in Technology/Information Security, MBA)

Responsibilities

Leading staff in the completion of audit engagements
Managing the assigned Information Security audit portfolio
Providing oversight of audit engagements to ensure they meet timelines, quality, and budgetary requirements
Providing thought leadership and strategic directions on the coverage of information security risks
Developing audit plans
Serving as co-risk owner
Coaching and developing team members
Overseeing the successful creation, implementation, and maintenance of an effective risk management framework
Ensuring compliance with applicable federal, state, and local laws and regulations
Identifying gaps and driving solutions that minimize losses resulting from inadequate internal processes, systems, or human errors
Active identification, response, and/or escalation of risks as appropriate
Influencing policies and procedures to maximize profit potential and minimize regulatory exposure
Ensuring an effective partnership between the Line of Business and the Lines of Defense
Managing a team of RCA Professionals including staffing, performance management, prioritizing, guidance, and training

Benefits

Healthcare (medical, dental, vision)
Basic term and optional term life insurance
Short-term and long-term disability
Pregnancy disability and parental leave
401(k) and employer-funded retirement plan
Paid vacation (from two to five weeks depending on salary grade and tenure)
Up to 11 paid holiday opportunities
Adoption assistance
Sick and Safe Leave accruals of one hour for every 30 worked, up to 80 hours per calendar year unless otherwise provided by law
Incentive and recognition programs
Equity stock purchase
401(k) contribution and pension