Secure Business Enablement Executive

At U.S. Bank, we’re on a journey to do our best. Helping the customers and businesses we serve to make better and smarter financial decisions and enabling the communities we support to grow and succeed.  We believe it takes all of us to bring our shared ambition to life, and each person is unique in their potential. A career with U.S. Bank gives you a wide, ever-growing range of opportunities to discover what makes you thrive at every stage of your career. Try new things, learn new skills and discover what you excel at—all from Day One.

The Secure Business Enablement Executive leads how Information Security Services partners with Technology and the businesses to securely enable modernization, artificial intelligence, cloud adoption and enterprise transformation. The role brings together application security, cloud security, security architecture, third-party security integration and business information security engagement under one accountable executive, reducing handoffs and creating a more consistent experience for Technology and business partners.
This leader is responsible for translating cybersecurity strategy into scalable engineering capabilities, standards and reusable patterns that allow Technology teams to move faster while reducing material exposure, technology complexity and attack surface. The role shifts security from primarily downstream review toward security engineered into platforms, architecture and delivery, with clear shared outcomes across ISS and Technology.

This is an enterprise executive role with direct accountability for multiple critical security engineering and enablement functions, an organization of approximately 100 FTEs, and material influence over the bank’s technology, AI, cloud, software, SaaS and third-party strategies. The leader operates directly with the CISO, CIOs and other senior executives; makes decisions affecting enterprise technology delivery and cyber risk; and is accountable for integrating strategy, architecture, engineering, risk and business outcomes across organizational boundaries. The breadth, complexity, executive influence and enterprise impact materially exceed a single-function security leadership role.

Strategic Mandate

• Operationalize the enterprise cybersecurity strategy and Technology partnership by embedding security earlier in technology decisions, architecture and software delivery.
• Create one integrated secure-delivery organization spanning application security, cloud security, security architecture, third-party security integration and BISO engagement.
• Enable the bank’s AI, cloud and modernization agenda through secure patterns, paved paths, automation and risk-informed decision-making.
• Reduce technology complexity and attack surface through enterprise standards, lifecycle discipline, software and SaaS rationalization, and stronger technology and third-party architecture decisions.
• Establish shared ISS and Technology measures that demonstrate whether secure engineering is reducing material exposure, improving resilience and accelerating safe delivery.

Key Accountabilities

• Enterprise secure delivery: Lead application security, cloud security and security architecture capabilities; integrate security into software development, cloud platforms, major transformations and technology modernization.
• Technology and business partnership: Serve as the senior ISS partner to CIOs, Technology executives and business leaders. Translate business and technology priorities into clear security engineering actions, decisions and investments.
• AI and emerging technology enablement: Establish scalable patterns for secure AI and agentic technology adoption, including architecture, model and software supply-chain considerations, data protection, identity, runtime controls, payments and ongoing assurance.
• Architecture, standards and simplification: Drive adoption of enterprise security architecture, reusable controls, paved paths and technology standards. Partner on software and SaaS rationalization, lifecycle management and platform consolidation to reduce cost, complexity and risk.
• Application and cloud security modernization: Advance secure-by-design, continuous assurance and automated testing across applications, dependencies, cloud environments and delivery pipelines. Ensure findings translate into prioritized engineering action rather than additional activity or volume.
• Third-party security integration: Integrate security earlier into third-party, SaaS, acquisition and strategic technology decisions. Evaluate technology currency, architecture, concentration, software supply chain, control maturity and compensating controls to inform business decisions.
• BISO model evolution: Evolve business information security engagement toward deeper technical partnership, connecting business priorities and material cyber risk to architecture, engineering, product and portfolio decisions.
• Operating model and experience: Reduce organizational handoffs and fragmented intake. Create a consistent, transparent and accountable experience for teams consuming ISS services, including SEP V2 and future secure-enablement capabilities.
• Outcome measurement: Define and report shared measures across ISS and Technology, including adoption of secure patterns, reduction of material exposures, technology currency, delivery friction, remediation progress and portfolio-level risk reduction.
• Executive leadership: Lead a multidisciplinary organization of approximately 100 FTEs. Set strategy, develop senior talent, manage succession and workforce plans, oversee budget and investment priorities, and create an inclusive, high-accountability culture.

Critical Relationships

The role routinely advises and partners with the CISO, CIOs, senior Technology and business executives, enterprise architecture, engineering and product leaders, procurement and third-party management, risk and compliance, legal, audit, and external partners. The executive must influence decisions across organizational boundaries where accountability is shared and direct authority may be limited.

Decision Rights and Scope

• Sets the strategy and operating model for secure business enablement capabilities within ISS.
• Approves security architecture, engineering patterns and service priorities within delegated authority and escalates material risk decisions where appropriate.
• Influences enterprise technology standards, platform choices, third-party decisions and modernization sequencing through partnership with Technology and business leadership.
• Owns workforce, budget and vendor priorities for the organization and ensures investments are linked to measurable outcomes.
• Represents ISS in senior governance forums and major technology, AI, cloud, third-party and transformation decisions.

Leadership Qualifications

• Extensive executive leadership experience in cybersecurity, software engineering, cloud, enterprise architecture or technology risk within a large, complex and highly regulated organization.
• Track record of leading multiple technical disciplines at enterprise scale and translating strategy into durable engineering and operating-model change.
• Deep understanding of modern software delivery, cloud platforms, application security, security architecture, AI-enabled technology, third-party technology risk and cyber resilience.
• Proven success influencing CIOs, business executives and senior engineering leaders, including navigating competing priorities and shared accountability.
• Skilled at balancing secure enablement, risk, speed, customer experience, resilience and economics without defaulting to either control-only or delivery-only outcomes.
• Strong talent leadership, organizational design, financial management and change leadership capabilities.
• Polished executive presence and clear, credible communication suited to senior management, board, regulator, audit and external-industry engagement.

Measures of Success

• Technology and business partners experience a simpler, more consistent and more accountable path to secure delivery.
• Security is embedded earlier in priority technology, AI, cloud, acquisition and third-party decisions, reducing late-stage redesign and exception volume.
• Adoption of reusable secure patterns, platforms and automated controls increases across Technology portfolios.
• Material exposure and recurring defects decline, with clearer accountability and faster risk reduction across ISS and Technology.
• Technology complexity and attack surface decrease through stronger standards, rationalization, lifecycle management and architecture decisions.
• The organization develops strong executive and technical talent, clear succession and an operating model capable of scaling with enterprise demand.

Basic Qualifications

• Bachelor's degree, or equivalent work experience
• 15 or more years of combined relevant leadership experience in organizational goal setting, with strategic and technical expertise.

Location Requirement

This role requires working from a U.S. Bank location three (3) or more days per week.

If there’s anything we can do to accommodate a disability during any portion of the application or hiring process, please refer to our disability accommodations for applicants.

Benefits: 

Our approach to benefits and total rewards considers our team members’ whole selves and what may be needed to thrive in and outside work. That's why our benefits are designed to help you and your family boost your health, protect your financial security and give you peace of mind. Our benefits include the following:

• Healthcare (medical, dental, vision)

• Basic term and optional term life insurance

• Short-term and long-term disability

• Pregnancy disability and parental leave

• 401(k) and employer-funded retirement plan

• Paid vacation (from two to five weeks depending on salary grade and tenure)

• Up to 11 paid holiday opportunities

• Adoption assistance

• Sick and Safe Leave accruals of one hour for every 30 worked, up to 80 hours per calendar year unless otherwise provided by law

Review our full benefits available by employment status here.

U.S. Bank is an equal opportunity employer. We consider all qualified applicants without regard to race, religion, color, sex, national origin, age, sexual orientation, gender identity, disability or veteran status, and other factors protected under applicable law.

E-Verify

U.S. Bank participates in the U.S. Department of Homeland Security E-Verify program in all facilities located in the United States and certain U.S. territories. The E-Verify program is an Internet-based employment eligibility verification system operated by the U.S. Citizenship and Immigration Services. Learn more about the E-Verify program.

U.S. Bank will consider qualified applicants with arrest or conviction records for employment. U.S. Bank conducts background checks consistent with applicable local laws, including the Los Angeles County Fair Chance Ordinance and the California Fair Chance Act as well as the San Francisco Fair Chance Ordinance. U.S. Bank is subject to, and conducts background checks consistent with the requirements of Section 19 of the Federal Deposit Insurance Act (FDIA). In addition, certain positions may also be subject to the requirements of FINRA, NMLS registration, Reg Z, Reg G, OFAC, the NFA, the FCPA, the Bank Secrecy Act, the SAFE Act, and/or federal guidelines applicable to an agreement, such as those related to ethics, safety, or operational procedures.

Applicants must be able to comply with U.S. Bank policies and procedures including the Code of Ethics and Business Conduct and related workplace conduct and safety policies.

Posting may be closed earlier due to high volume of applicants.