Data Security Posture, Access Governance, and Lifecycle Management Lead

At U.S. Bank, we’re on a journey to do our best. Helping the customers and businesses we serve to make better and smarter financial decisions and enabling the communities we support to grow and succeed. We believe it takes all of us to bring our shared ambition to life, and each person is unique in their potential. A career with U.S. Bank gives you a wide, ever-growing range of opportunities to discover what makes you thrive at every stage of your career.

Try new things, learn new skills and discover what you excel at—all from Day One.

U.S. Bank is seeking a Data Security Posture, Access Governance, and Lifecycle Management Lead to drive enterprise-wide strategies for safeguarding sensitive data throughout its lifecycle—from creation to secure disposal—while managing identity and access controls. This role will act as a program integrator, combining multiple security pillars into a cohesive, value-driven program, with accountability for vision, execution, and stakeholder alignment. The ideal candidate will combine deep technical expertise in data security and lifecycle governance with strong leadership capabilities to enable secure business innovation.

• Strategic Leadership: Define and execute the vision for Data Security Posture, Access Governance, and Lifecycle Management across the enterprise.
• Governance & Risk Oversight: Establish policies, standards, and controls for identity, access, and data lifecycle governance, ensuring alignment with GRC frameworks.
• Technology Enablement: Deploy and optimize tools for data classification, retention, archival, encryption, and posture monitoring. Improve visibility into data risk through enhanced data sets via data security tool integration.
• Operational Excellence: Develop KPIs and reporting frameworks to measure security posture and lifecycle maturity. Drive remediation plans for posture gaps, access control weaknesses, and lifecycle compliance issues.
• Collaboration: Partner with cloud, infrastructure, and application teams to ensure secure design and implementation across all data lifecycle stages.
• Innovation: Monitor emerging technologies and trends to enhance data lifecycle automation, security capabilities, and reduce manual compliance overhead.

• Bachelor’s degree in Computer Science, Information Security, Engineering, or a related field; or equivalent industry experience.
• 7 years in information security, with a focus on data protection, lifecycle governance, access management, and posture management.

• Proven experience implementing security controls across cloud and on-premises environments.
• Familiarity with data lifecycle management principles, including data discovery, classification, retention, archival, and secure disposal.
• Proficiency with data security technologies and tools (e.g., Microsoft Purview, DSPM tools such as BigID, and DLP solutions).
• Knowledge of cloud security architectures (AWS, Azure) and posture management tools (e.g., CSPM, DSPM).
• Experience in identity and access management (IAM), privileged access management (PAM), and role-based access control (RBAC).
• Understanding of regulatory frameworks such as GLBA, SOX, PCI, GDPR, and CCPA, with emphasis on data retention and disposal mandates and the ability to partner with responsible parties.
• Experience onboarding data sources and managing database access.
• Strong communication, stakeholder engagement, and ability to influence across technical and business teams.
• Strategic vision and deep engineering acumen—able to architect solutions, not just configure tools.
• Familiarity with AI security and guardrails (nice to have).
• Experience developing and operating SOP-driven processes for data security and lifecycle management is highly valued.

This role offers a hybrid/flexible schedule, with an expectation of working in-office at least 3 days per week.

• Healthcare (medical, dental, vision)
• Basic term and optional term life insurance
• Short-term and long-term disability
• Pregnancy disability and parental leave
• 401(k) and employer-funded retirement plan
• Paid vacation (from two to five weeks depending…