Senior Audit Project Manager - Information Security
About the role
Job Description
Primary Responsibilities
- Independently lead and execute audit engagements, or supervise audit staff when applicable, ensuring timely delivery of high‑quality, well‑supported audit results.
- Review and assess audit work to confirm accuracy, completeness, relevance, and adherence to internal audit policies, procedures, and IIA Standards.
- Evaluate audit issues to ensure appropriate identification of risk exposures, root causes, and practical, effective management action plans.
- Plan audit engagements by: • Understanding and documenting business processes
- Identifying key risks and controls
- Assessing control design and operating effectiveness
- Developing audit programs that clearly support audit objectives
- Support audit reporting and wrap‑up activities, including issue disposition and contribution to clear, concise, and well‑supported audit reports.
- Monitor engagement progress against plan and schedule, proactively addressing risks to delivery and ensuring timely workpaper reviews.
- Provide on‑the‑job coaching and technical guidance to audit staff, with emphasis on audit execution quality and credit risk subject‑matter application.
- Collaborate across the three lines of defense and with other CAS audit teams to ensure coordinated, risk‑focused, and efficient audit coverage of credit‑related activities.
- Perform other duties as assigned by management.
Basic Qualifications
- Bachelor's Degree or equivalent work experience
- Typically more than 10 years of applicable experience
Preferred Skills
- Undergraduate degree in a Technology, Cybersecurity or Engineering related field of concentration or equivalent combination of training and experience. Professional certification (e.g., CISSP, CISM, CISA, CIA, AWS Cloud Practitioner, Microsoft Azure Administrator) or advanced degree (e.g., MS in Technology/Information Security, MBA) is a plus.
- Strong Project management and execution skills, including prioritizing tasks, balancing workload between multiple projects, anticipating next steps, adapting to changing situations and project scope.
- Agile/Continuous Deployment/Continuous Delivery/DevSecOps, Secure Software Development
- AI security, API and Cloud Migration experience
- Advanced data analytics and visualization acumen
- Strong knowledge of IT Frameworks (e.g., COBIT, ITIL, NIST, FEDRAMP, PCI-DSS, AGILE, AWS Well Architected Framework etc.
- Technical knowledge of at least two cybersecurity domains: API, Secure Cloud Architecture, Deployment models, data encryption/tokenization, cryptography, vulnerability and configuration management, Zero Trust, Network Segmentation, authentication/authorization protocols. Hands-on experience in at least one of the above.
- Critical thinking and intellectual curiosity
- Written and verbal communications - ability to create clear, concise, and engaging messaging across multiple formats.
- Ability to work well under deadline pressure.
*This role requires working from a U.S. Bank location three (3) or more days per week.
Benefits
Our approach to benefits and total rewards considers our team members' whole selves and what may be needed to thrive in and outside work. That's why our benefits are designed to help you and your family boost your health, protect your financial security and give you peace of mind. Our benefits include the following:
- Healthcare (medical, dental, vision)
- Basic term and optional term life insurance
- Short-term and long-term disability
- Pregnancy disability and parental leave
- 401(k) and employer-funded retirement plan
- Paid vacation (from two to five weeks depending on salary grade and tenure)
- Up to 11 paid holiday opportunities
- Adoption assistance
- Sick and Safe Leave accruals of one hour for every 30 worked, up to 80 hours per calendar year unless otherwise provided by law
Review our full benefits available by employment status here .
U.S. Bank is an equal opportunity employer. We consider all qualified applicants without regard to race, religion, color, sex, national origin, age, sexual orientation, gender identity, disability or veteran status, and other factors protected under applicable law.
E-Verify
Not included in the source posting: about the role.
Skills
Who can apply
The employer didn't state any visa, work authorization, citizenship or clearance requirements in this posting. Confirm with the employer before applying.
Read automatically from the employer's posting text. Always confirm with the employer — requirements can change after a job is published.