Information Security Director - Cloud Security Engineering

About the position At U.S. Bank, we’re on a journey to do our best. Helping the customers and businesses we serve to make better and smarter financial decisions and enabling the communities we support to grow and succeed. We believe it takes all of us to bring our shared ambition to life, and each person is unique in their potential. A career with U.S. Bank gives you a wide, ever-growing range of opportunities to discover what makes you thrive at every stage of your career. Try new things, learn new skills and discover what you excel at—all from Day One.

Job Description

Role Overview The Information Security Director – Cloud Security Engineering & Operations is responsible for the engineering, operation, and continuous improvement of cloud security technologies that protect enterprise cloud platforms, workloads, and data. Cloud Security is a distinct security discipline within the organization. Each cloud environment (AWS, Azure, GCP) operates as its own ecosystem, combining native provider security controls with integrated third-party technologies. This role owns the end-to-end cloud security control platforms, translating enterprise security strategy into effective, scalable, and compliant solutions. The Director partners closely with technology, risk, and business leaders to manage cyber risk, support cloud, AI, and AI/ML workload adoption, and ensure regulatory alignment, while leading and developing a high-performing Cloud Security Engineering & Operations team. While the broader security organization includes Network, Endpoint, and Data Security teams, this role’s direct accountability is Cloud Security.

Responsibilities

• Lead the Cloud Security Engineering & Operations team, managing senior engineers responsible for enterprise cloud security platforms.
• Direct the engineering and operational management of cloud security technologies across AWS, Azure, and GCP.
• Own the security posture of cloud platforms, services, and workloads, including AI/ML workloads operating in cloud environments.
• Build, run, and remediate core cloud security control platforms, including Cloud Security Posture Management (CSPM), cloud workload protection, and native cloud provider security services.
• Enable secure adoption of cloud-native and AI capabilities by partnering early with architecture and engineering teams.
• Partner with Incident Response teams to enhance detection, investigation, and recovery capabilities for cloud-based threats.
• Establish and track operational, risk, and performance metrics for cloud security technologies.
• Collaborate with technology, risk, and business partners to align cloud security controls with enterprise objectives.
• Ensure alignment with regulatory, compliance, and enterprise risk management requirements.
• Attract, develop, and retain senior cloud security engineering and operations talent.

Requirements

• 10+ years of experience in information security, cloud security, or technology risk.
• 5+ years of people leadership experience in technical engineering or operations environments.
• Experience securing enterprise-scale cloud environments, including AI/ML workloads.
• Hands-on technical experience with networks, operating systems, applications, and broader information technology architectures.
• Experience with DevSecOps, automation, and infrastructure as code.
• Strong communication and stakeholder management skills.
• Bachelor’s degree in a related field or equivalent practical experience.

Nice-to-haves

• Advanced degree and/or relevant security certifications (CISSP, CISM, CISA, CCSP).
• Experience with AWS, Azure, and GCP security platforms.
• Knowledge of industry security frameworks and models, including NIST, MITRE ATT&CK®, and MITRE ATLAS™.
• Familiarity with regulatory requirements in regulated industries; financial services experience is a plus.

Benefits

• Healthcare (medical, dental, vision)
• Basic term and optional term life insurance
• Short-term and long-term disability
• Pregnancy disability and parental leave
• 401(k) and employer-funded retirement plan
• Paid vacation (from two to five weeks depending on salary grade and tenure)
• Up to 11 paid holiday opportunities
• Adoption assistance
• Sick and Safe Leave accruals of one hour for every 30 worked, up to 80 hours per calendar year unless otherwise provided by law

Apply tot his job Apply To this Job