Cloud Technology Risk Manager

Overview The Technology Risk Manager will support the Technology Infrastructure organization within U.S. Bank’s Technology, Cybersecurity, and Digital, Data, and AI Risk team. The manager consults with technology leaders to assess, design, and improve control environments for technology products and services, ensuring risk is identified and mitigated before it impacts business objectives. Responsibilities Identify, monitor, and report on processes, risks, and controls within the defined risk appetite. Influence risk-based outcomes across Technology portfolio owners. Provide guidance to achieve and sustain compliance with regulatory, industry, contractual obligations and information security policies. Collaborate to drive strategic outcomes for the team. Consult on product area initiatives, ensuring risks are documented, reported, and escalated. Support advisory and implementation efforts to develop management responses that manage identified risks. Perform risk assessments to evaluate compliance, identify risks, and drive remediation. Use data analysis to help Program Leaders develop proactive risk management approaches. Support technology or business line teams in demonstrating control effectiveness, identifying and escalating gaps. Deliver targeted, actionable risk reporting to leadership. Act as a liaison between the Business Line and second and third lines of defense. Key Skills Technology Risk Management Cloud Risk Management & Governance (AWS, Azure, including platform-level control design, service enablement, and cloud migration oversight) Control Design, Testing, and Assessment for Infrastructure Platforms (NIST, FFIEC, CSA CCM frameworks, evidence review, control lifecycle management) Public cloud platform operations – service enablement, IAM, PaaS/IaaS patterns, cloud-native control tooling (CSPM, configuration management) Infrastructure and platform controls – backup, encryption, key management, secrets rotation, vaulting (HashiCorp Vault), privileged access Risk and control frameworks – NIST CSF, SP 800‑53, FFIEC IT Handbook, CSA CCM, PCI DSS, SOX ITGC, SOC 2, GDPR, IRS Pub 1075, GLBA Data classification and protection – PII, tokenization, classification frameworks GRC and workflow tooling – RSA Archer, ServiceNow IRM, JIRA for change/issue tracking IT Service Management and change/configuration management (ITIL v4) for cloud and hybrid infrastructure Risk assessment methodologies – RCSA, targeted risk assessments, control gap analyses Qualifications Basic: Bachelor’s degree or equivalent work experience; typically more than eight years of applicable experience. Preferred: Advanced knowledge of applicable laws, regulations, and financial services trends; deep understanding of line‑of‑business operations, products, and controls; strong analytical, problem‑solving, negotiation, and presentation skills; proficiency in Microsoft Office. Professional certifications such as CRISC, ITIL, CISSP, CGEIT are advantageous. Benefits Healthcare (medical, dental, vision) Basic and optional term life insurance Short‑term and long‑term disability, pregnancy disability and parental leave 401(k) and employer‑funded retirement plan Paid vacation (2–5 weeks depending on salary grade and tenure) Up to 11 paid holiday opportunities Adoption assistance Sick and Safe Leave accruals (one hour per 30 hours worked, up to 80 hours per calendar year) Equal Opportunity U.S. Bank is an equal‑opportunity employer. We consider all qualified applicants without regard to race, religion, color, sex, national origin, age, sexual orientation, gender identity, disability or veteran status, and other factors protected under applicable law. #J-18808-Ljbffr U.S. Bank