Secure Business Enablement Executive

At U.S. Bank, we’re on a journey to do our best. Helping the customers and businesses we serve to make better and smarter financial decisions and enabling the communities we support to grow and succeed. We believe it takes all of us to bring our shared ambition to life, and each person is unique in their potential. A career with U.S. Bank gives you a wide, ever-growing range of opportunities to discover what makes you thrive at every stage of your career. Try new things, learn new skills and discover what you excel at—all from Day One.

Job Description

The Secure Business Enablement Executive leads how Information Security Services partners with Technology and the businesses to securely enable modernization, artificial intelligence, cloud adoption and enterprise transformation. The role brings together application security, cloud security, security architecture, third-party security integration and business information security engagement under one accountable executive, reducing handoffs and creating a more consistent experience for Technology and business partners.

This leader is responsible for translating cybersecurity strategy into scalable engineering capabilities, standards and reusable patterns that allow Technology teams to move faster while reducing material exposure, technology complexity and attack surface. The role shifts security from primarily downstream review toward security engineered into platforms, architecture and delivery, with clear shared outcomes across ISS and Technology.

This is an enterprise executive role with direct accountability for multiple critical security engineering and enablement functions, an organization of approximately 100 FTEs, and material influence over the bank’s technology, AI, cloud, software, SaaS and third-party strategies. The leader operates directly with the CISO, CIOs and other senior executives; makes decisions affecting enterprise technology delivery and cyber risk; and is accountable for integrating strategy, architecture, engineering, risk and business outcomes across organizational boundaries. The breadth, complexity, executive influence and enterprise impact materially exceed a single-function security leadership role.

Strategic Mandate

• •Operationalize the enterprise cybersecurity strategy and Technology partnership by embedding security earlier in technology decisions, architecture and software delivery.
• •Create one integrated secure-delivery organization spanning application security, cloud security, security architecture, third-party security integration and BISO engagement.
• •Enable the bank’s AI, cloud and modernization agenda through secure patterns, paved paths, automation and risk-informed decision-making.
• •Reduce technology complexity and attack surface through enterprise standards, lifecycle discipline, software and SaaS rationalization, and stronger technology and third-party architecture decisions.
• •Establish shared ISS and Technology measures that demonstrate whether secure engineering is reducing material exposure, improving resilience and accelerating safe delivery.

Key Accountabilities

• •Enterprise secure delivery : Lead application security, cloud security and security architecture capabilities; integrate security into software development, cloud platforms, major transformations and technology modernization.
• •Technology and business partnership : Serve as the senior ISS partner to CIOs, Technology executives and business leaders. Translate business and technology priorities into clear security engineering actions, decisions and investments.
• •AI and emerging technology enablement : Establish scalable patterns for secure AI and agentic technology adoption, including architecture, model and software supply-chain considerations, data protection, identity, runtime controls, payments and ongoing assurance.
• •Architecture, standards and simplification : Drive adoption of enterprise security architecture, reusable controls, paved paths and technology standards. Partner on software and SaaS rationalization, lifecycle management and platform consolidation to reduce cost, complexity and risk.
• •Application and cloud security modernization : Advance secure-by-design, continuous assurance and automated testing across applications, dependencies, cloud environments and delivery pipelines. Ensure findings translate into prioritized engineering action rather than additional activity or volume.
• •Third-party security integration : Integrate security earlier into third-party, SaaS, acquisition and strategic technology decisions. Evaluate technology currency, architecture, concentration, software supply chain, control maturity and compensating controls to inform business decisions.
• •BISO model evolution : Evolve business information security engagement toward deeper technical partnership, connecting business priorities and material cyber risk to architecture, engineering, product and portfolio decisions.
• •Operating model and experience : Reduce organizational handoffs and fragmented intake. Create a consistent, transparent and accountable experience for teams consuming ISS services, including SEP V2 and future secure-enablement capabilities.
• •Outcome measurement : Define and report shared measures across ISS and Technology, including adoption of secure patterns, reduction of material exposures, technology currency, delivery friction, remediation progress and portfolio-level risk reduction.
• •Executive leadership : Lead a multidisciplinary organization of approximately 100 FTEs. Set strategy, develop senior talent, manage succession and workforce plans, oversee budget and investment priorities, and create an inclusive, high-accountability culture.

Critical Relationships

The role routinely advises and partners with the CISO, CIOs, senior Technology and business executives, enterprise architecture, engineering and product leaders, procurement and third-party management, risk and compliance, legal, audit, and external partners. The executive must influence decisions across organizational boundaries where accountability is shared and direct authority may be limited.

Decision Rights and Scope

• •Sets the strategy and operating model for secure business enablement capabilities within ISS.
• •Approves security architecture, engineering patterns and service priorities within delegated authority and escalates material risk decisions where appropriate.
• •Influences enterprise technology standards, platform choices, third-party decisions and modernization sequencing through partnership with Technology and business leadership.
• •Owns workforce, budget and vendor priorities for the organization and ensures investments are linked to measurable outcomes.
• •Represents ISS in senior governance forums and major technology, AI, cloud, third-party and transformation decisions.

Leadership Qualifications

• •Extensive executive leadership experience in cybersecurity, software engineering, cloud, enterprise architecture or technology risk within a large, complex and highly regulated organization.
• •Track record of leading multiple technical disciplines at enterprise scale and translating strategy into durable engineering and operating-model change.
• •Deep understanding of modern software delivery, cloud platforms, application security, security architecture, AI-enabled technology, third-party technology risk and cyber resilience.
• •Proven success influencing CIOs, business executives and senior engineering leaders, including navigating competing priorities and shared accountability.
• •Skilled at balancing secure enablement, risk, speed, customer experience, resilience and economics without defaulting to either control-only or delivery-only outcomes.
• •Strong talent leadership, organizational design, financial management and change leadership capabilities.
• •Polished executive presence and clear, credible communication suited to senior management, board, regulator, audit and external-industry engage