Senior Audit Project Manager - Information Security

U.S. Bank • Charlotte, NC

3d • Hybrid

About The Position

The Corporate Audit Services Senior Audit Project Manager (SAPM) leads audit engagements with minimal manager supervision. The role monitors engagement progress against plans and schedules, assesses audit work, and coaches team members to help ensure engagements follow internal audit policies and procedures. There are no direct reports. The position focuses on information security and requires working from a U.S. Bank location three or more days per week.

The SAPM independently leads and executes audit engagements or supervises audit staff when applicable. The role plans engagements by understanding and documenting business processes, identifying risks and controls, evaluating control design and operating effectiveness, and developing audit programs. It also reviews work and issues, supports reporting and wrap-up, manages delivery risks, and provides technical guidance to audit staff. The position collaborates across the three lines of defense and with other Corporate Audit Services teams to coordinate risk-focused coverage.

Requirements

• Bachelor’s degree or equivalent work experience.
• Typically more than 10 years of applicable experience.
• Strong project management and execution skills, including prioritizing tasks, balancing workload across multiple projects, anticipating next steps, and adapting to changing situations and project scope.
• Strong knowledge of IT frameworks, such as COBIT, ITIL, NIST, FEDRAMP, PCI-DSS, Agile, and the AWS Well-Architected Framework.
• Technical knowledge of at least two cybersecurity domains, such as API, secure cloud architecture, deployment models, data encryption/tokenization, cryptography, vulnerability and configuration management, Zero Trust, network segmentation, and authentication/authorization protocols.
• Hands-on experience in at least one cybersecurity domain listed in the posting.
• Critical thinking and intellectual curiosity.
• Written and verbal communication skills, including the ability to create clear, concise, engaging messaging across multiple formats.
• Ability to work well under deadline pressure.
• Ability to work from a U.S. Bank location three or more days per week.

Nice To Haves

• Undergraduate degree in a technology, cybersecurity, or engineering-related field, or an equivalent combination of training and experience.
• Professional certification such as CISSP, CISM, CISA, CIA, AWS Cloud Practitioner, or Microsoft Azure Administrator, or an advanced degree such as an MS in Technology/Information Security or an MBA.
• Experience with Agile, continuous deployment/continuous delivery, or DevSecOps.
• Experience with AI security, APIs, or cloud migration.
• Advanced data analytics and visualization acumen.

Responsibilities

• Independently lead and execute audit engagements, or supervise audit staff when applicable, to deliver timely, high-quality, well-supported results.
• Review and assess audit work for accuracy, completeness, relevance, and adherence to internal audit policies, procedures, and IIA Standards.
• Evaluate audit issues to ensure appropriate identification of risk exposures and root causes, along with practical and effective management action plans.
• Plan audit engagements by understanding and documenting business processes, identifying key risks and controls, assessing control design and operating effectiveness, and developing audit programs that support audit objectives.
• Support audit reporting and wrap-up, including issue disposition and contributions to clear, concise, well-supported audit reports.
• Monitor engagement progress against plans and schedules, proactively address delivery risks, and ensure timely workpaper reviews.
• Coach and provide technical guidance to audit staff, emphasizing audit execution quality and credit risk subject-matter application.
• Collaborate across the three lines of defense and with other Corporate Audit Services audit teams to coordinate efficient, risk-focused coverage of credit-related activities.
• Perform other duties as assigned by management.

Benefits

• Healthcare, including medical, dental, and vision coverage.
• Basic term and optional term life insurance.
• Short-term and long-term disability coverage.
• Pregnancy disability and parental leave.
• 401(k) and employer-funded retirement plan.
• Paid vacation of two to five weeks depending on salary grade and tenure.
• Up to 11 paid holiday opportunities.
• Adoption assistance.
• Sick and Safe Leave accruals of one hour for every 30 hours worked, up to 80 hours per calendar year unless otherwise provided by law.
• Incentive and recognition programs.
• Equity stock purchase.

What This Job Offers

• Job Type: Full-time
• Career Level: Senior