Leads and performs technology and information security audits, including SOX control testing, risk assessment, control design evaluation, issue drafting, audit reporting, and remediation recommendations. The role covers cloud, application, identity, data, and security operations risks, supports assurance for cloud migration, coaches auditors, and partners with business and risk teams. Requires independently managing complex and concurrent audits while applying technology, cybersecurity, regulatory, and internal audit expertise.
At U.S. Bancorp India, we’re on a journey to do our best. We believe it takes all of us to bring our shared ambition to life, and each person is unique in their potential. A career with U.S. Bancorp India gives you a wide, ever-growing range of opportunities to discover what makes you thrive at every stage of your career. Try new things, learn new skills and discover what you excel at—all from Day One.
Job DescriptionThe CAS Audit Project Manager is primarily responsible for completing audit engagement assignments with minimal supervision from audit team management. The Audit Project Manager is expected to understand information security risks, identify and analyze information security technology and business processes, and evaluate control design adequacy and effectiveness through control testing. The ISS Audit team is responsible for auditing Security Architecture and Engineering, Security Operations, Cloud and Application Security, Data Security and Insider Threat Strategy, Cyber Threat Intelligence, Vulnerability and Configuration Management, Identity & Access Management, and European Information Security. ISS protects information that is stored, transmitted, and processed across U.S. Bank computer networks. They also manage access to U.S. Bank systems and applications, define security policy, and collaborate with business line leaders across the enterprise to help them make more informed decisions regarding the security of their information.The primary focus of this role over the next 36 months includes completing annual key SOX financial statement control testing for internal audit and other audit support work specifically to Technology. Internal audit performs SOX testing on behalf of management to ensure strong reliance by external auditors. The role may directly or indirectly lead team members.Key accountabilities:
- Performing or supervising staff auditors in the testing of controls based on audit program directions. Includes using appropriate sampling and control testing techniques; identifying and assessing the relevancy of possible issues; and documenting work performed to support audit scope/conclusions, to facilitate an efficient review, and to meet internal audit policies and procedures.
- Drafting audit issues under the supervision of the audit team management. Includes drafting potential exposures and significance, identifying appropriate root causes, and developing recommendations that are operationally effective and cost-effective actions to address those causes.
- Assisting the audit team management in the reporting and wrap-up phases of audits. Includes assisting with drafting audit reports.
- Learning from and applying coaching received.
- Work as a subject matter expert in a particular topic, helping drive strategy, and may support multiple audit engagements covering the related topics
- Handle complex tasks autonomously and is able to influence business line understanding of risk mitigation
- Performing other duties as requested by audit team management.
- Assisting the audit team management in planning audit engagements. Includes understanding risk and risk management techniques; identifying and analyzing business processes, key risks, and critical controls; interviewing auditees; and evaluating control design adequacy.
- Provide coaching and on-the-job training for team members to ensure engagements are completed in conformance with internal audit policies and procedures
- Partner with their assigned Line of Business, other Risk/Compliance/Audit (RCA) professionals, and RCA Managers to, depending on their function, create, implement, maintain, review or oversee an effective risk management framework.
- Participate in projects and/or activities that ensure compliance with applicable federal, state and local laws and regulations.
- Identify gaps and inform solutions that minimize losses resulting from inadequate internal processes, systems or human errors.
- Identify, respond and/or escalate risks as appropriate
- Help support third line assurance efforts relating to a large-scale cloud migration and ongoing support subsequent to the migration.
- Bachelor's degree, or equivalent work experience
- Typically more than seven years of applicable experience
- Undergraduate degree in a Technology, Cybersecurity or Engineering related field of concentration or equivalent combination of training and experience.
- Professional certification (e.g., CISSP, CISM, CISA, CIA, AWS Cloud Practitioner, Microsoft Azure Administrator) or advanced degree (e.g., MS in Technology/Information Security, MBA) is a plus.
- Agile/Continuous Deployment/Continuous Delivery/DevSecOps, Secure Software Development
- API and Cloud Migration experience
- Advanced data analytics and visualization acumen
- Strong knowledge of IT Frameworks (e.g., COBIT, ITIL, NIST, FEDRAMP, PCI-DSS, AGILE, AWS Well Architected Framework etc.)
- Technical knowledge of at least two of: API, Secure Cloud Architecture, Deployment models, Zero Trust, Network Segmentation, authentication/authorization protocols, or cryptography. Hands-on experience in at least one of the above.
- Experience leading multiple audits concurrently and executing all stages of audit successfully
- Experience validating audit and regulatory issues within agreed-upon timeframes
- Proven track record of adapting to a fast-paced environment and effective multi-tasking, being able to manage multiple projects simultaneously
- Critical thinking and problem-solving skills
- Participate in engagement team for assurance engagements involving platforms (AWS Cloud, etc.) and critical software assets across the technology space, as well as advisory engagements consulting on critical technology initiatives
- Advanced understanding of the business line's operations, products/services, systems, and associated risks/controls
- Assess the adequacy of the control environment, identify control gaps and opportunities for continuous improvement based on relevant knowledge and experience
- Ensure delivery of the highest quality reports and value-add recommendations and insights
- Advanced knowledge of applicable laws, regulations, financial services, and regulatory trends that impact their assigned line of business
- Advanced knowledge of Risk/Compliance/Audit competencies and ability to execute an assignment entirely independently
- Strong process facilitation, project management, and analytical skills
- Must possess business acumen and credibility to help business line(s) proactively identify and address changing workforce needs
- Motivated individual with excellent presentation, interpersonal, written, and verbal communication skills
- Proficient computer navigation skills using a variety of software packages, including Microsoft Office applications and word processing, spreadsheets, databases, and presentations
If there’s anything we can do to accommodate a disability during any portion of the application or hiring process, please refer to our disability accommodations for applicants.
Posting may be closed earlier due to high volume of applicants.
This is an U.S. Bancorp India posting. U.S. Bancorp India is a part of the U.S. Bank family.
Similar Jobs
Digital Media • Information Technology • News + Entertainment
Designs, develops, and optimizes scalable data pipelines and structures for analytics and downstream apps. Implements SQL transformations, ingestion frameworks, cloud data solutions (Snowflake, Databricks), ensures data quality, lineage, and governance, and mentors junior engineers while improving internal tools and automation.
Top Skills:
AirflowSparkAWSAws S3AzureCi/CdDatabricksDbtGCPIcebergPythonSnowflakeSQL
Digital Media • Information Technology • News + Entertainment
Implements, refines, validates, trains, and deploys machine learning models for company products. Designs and monitors data pipelines, evaluates internal and external ML solutions, documents technical requirements, and develops proof-of-concept strategies. Conducts case studies, contributes to research, patents, APIs, and intellectual property, and provides recommendations to support future product development. Requires independent judgment and availability for variable schedules, including nights and weekends.
Top Skills:
APIsData PipelinesMachine Learning
Digital Media • Information Technology • News + Entertainment
Provides senior technical leadership for engineering operations, including troubleshooting complex Linux, Kubernetes, Docker, and cloud environments. Leads outage response, performs maintenance and validation, monitors operational workflows, analyzes distributed-system issues, and develops automation. Ensures adherence to engineering standards, supports product implementation, collaborates with vendors and engineering teams, and mentors junior engineers. Requires flexible scheduling, strong communication, independent judgment, and expertise in observability, CI/CD, scripting, and systems optimization.
Top Skills:
AgileConfluenceDistributed TracingDockerElastic StackGithub ActionsGoGrafanaJenkinsJIRAKubernetesLinuxPrivate CloudPrometheusPublic CloudPythonShell Scripting
What you need to know about the Chennai Tech Scene
To locals, it's no secret that South India is leading the charge in big data infrastructure. While the environmental impact of data centers has long been a concern, emerging hubs like Chennai are favored by companies seeking ready access to renewable energy resources, which provide more sustainable and cost-effective solutions. As a result, Chennai, along with neighboring Bengaluru and Hyderabad, is poised for significant growth, with a projected 65 percent increase in data center capacity over the next decade.
