U.S. Bank Senior Information Security Cyber Event Planner in Omaha, Nebraska

U.S. Bank is seeking a Senior Information Security Cyber Exercise Planner who will execute the full life-cycle of cybersecurity exercise activities, which includes the design, development, conduct and evaluation. These activities will focus on strengthening cybersecurity incident response and coordination processes within U.S. Bank, as well as with public and private sector partners. Additionally, candidate will coordinate with all areas of the bank to communicate lessons learned from exercises in order to improve U.S. Bank’s cybersecurity resilience. The successful candidate will be distinguished by excellent communications skills, a passion for delivering excellent exercise events, and a commitment to enterprise-wide continuous improvement and collaborative incident response.

Responsibilities:

Perform planning, facilitation, documentation development, and coordinate follow-up activities for the ISS Cyber Exercise Program.

Coordinate exercise planning teams comprised of U.S. Bank employees with varied technical and non-technical backgrounds to plan and execute cybersecurity exercises.

Help represent U.S Bank in external financial sector exercises, such as those lead by the Financial Services Sector Coordinating Council (FSSCC) and the Federal Government.

Contribute to training and coordination efforts between ISS and the Bank's lines of business.

Work with the Enterprise Crisis Management Team, ISS Threat Intelligence Team, Business Line Information Security Officers (BISOs), Privacy, Legal, and other stakeholders to identify cyber risks, design threat scenarios, identify key stakeholders and participants, and execute the exercise against the planned scenarios and objectives.

Partner with other resilience activities, such as the business continuity management team, anti-phishing, and information security education and awareness.

Possesses strong communication skills and an ability to develop interpersonal relationships, as coordination with internal cybersecurity and risk management groups is exceptionally important.

Leads enterprise-wide definition, establishment, and maintenance of data, security-related infrastructure, applications, and processes.

Provides technical support to clients, management, security administrators, and network operations. Reviews, develops, tests, and implements security plans, products, and control techniques.

Reviews circumstances surrounding data security incidents and designs corrective actions. Documents security policies and procedures.

Provides implementation support for risk assessment and data security procedures and products. Evaluates new and proposed security systems and technologies.

Successful applicants will exemplify US Bank's ethical principles of uncompromising integrity, respect for others, accountability for decisions and actions, and good citizenship.

Qualifications:

Basic Qualifications

• Bachelor's degree or equivalent work experience

• At least 7 years of experience with processes, tools, techniques and practices for assuring adherence to standards associated with accessing, altering and protecting organizational data.

Preferred Qualifications

• Exercise or training experience as it relates to security, business continuity/continuity of operations, or disaster recovery, and a foundational understanding of information technology and/or security concepts

• 1 year of experience utilizing or employing the Homeland Security Exercise and Evaluation Program (HSEEP) Methodology

• Knowledge of the National Institute of Standards and Technology (NIST) Cybersecurity Framework

Job: Information Technology

Primary Location: District of Columbia-DC-Washington

Shift: 1st - Daytime

Average Hours Per Week: 40

Requisition ID: 180017156

Other Locations: Minnesota-MN-Richfield, United States

U.S. Bank is an Equal Opportunity Employer committed to creating a diverse workforce.

U.S. Bank is an equal opportunity employer committed to creating a diverse workforce. We consider all qualified applicants without regard to race, religion, color, sex, national origin, age, sexual orientation, gender identity, disability or veteran status, among other factors.