Fraud Threat Intelligence Lead – Financial Crime Disruption / Fraud Fusion Strategy

The Fraud Threat Intelligence (FTI) Lead is a senior individual contributor responsible for the design, build, implementation, and management of a new U.S. Bank Fraud Threat Intelligence (FTI) framework and capability positioned within Enterprise Fraud Strategy. This role establishes a net new intelligence capability informed by proven, world class cyber threat intelligence (CTI) practices and tailored to fraud and scam threats targeting U.S. Bank and its customers.

Operating with a high degree of independence, this role owns the architecture, operating model, and execution of the fraud threat intelligence function, including bi directional intelligence exchange with internal stakeholders, industry partners, federal law enforcement, vendors, and intelligence sharing communities. The role serves as a core integration point for fraud fusion, internally and externally, and works in close partnership with the Financial Crime Disruption Fraud Threat Hunting capability to enable proactive detection and disruption.

This role is also accountable for shepherding the enterprise adoption and operationalization of the FS ISAC Cyber Fraud Prevention Framework as a fraud “kill chain,” embedding it into fraud intelligence, prevention, and disruption workflows.

Key Responsibilities

Fraud Threat Intelligence Framework Ownership
• Design, build, and operationalize the U.S. Bank Fraud Threat Intelligence (FTI) framework using lifecycle based intelligence models and adversary behavior analysis adapted to fraud and scams.
• Define and document the FTI operating model, including intelligence requirements, collection strategies, analytic methodologies, and dissemination standards.
• Own execution of the FTI capability from initial design through operational maturity.
 

Bi Directional Intelligence Exchange & External Engagement
• Build and maintain bi directional intelligence exchange with internal stakeholders across fraud operations, fraud strategy, scam prevention, risk, compliance, and technology teams.
• Coordinate intelligence sharing with industry partners, vendors, FS ISAC, and federal law enforcement, ensuring appropriate governance, handling, and use of shared intelligence.
• Serve as a key contributor to external intelligence sharing forums, representing U.S. Bank’s fraud intelligence interests.
 

Fraud Fusion (Internal & External)
• Enable fraud fusion by synthesizing intelligence across internal fraud, cyber, scam, and financial crime sources, and external intelligence feeds.
• Translate intelligence into actionable insights that inform fraud prevention strategies, detection enhancements, and investigative priorities.
• Support convergence between fraud and cyber intelligence disciplines through shared language, frameworks, and analytic methods.
• Drive structured collaboration rather than ad hoc information sharing.

Fraud Threat Hunting Integration and Collaboration
• Partner closely with the Financial Crime Disruption Fraud Threat Hunting function to provide intelligence driven hypotheses, indicators, and contextual insights.
• Ensure intelligence outputs directly inform proactive hunting, detection tuning, and disruption activities.

FS ISAC Cyber Fraud Prevention Framework Implementation
• Lead the operational adoption of the FS ISAC Cyber Fraud Prevention Framework, applying its lifecycle based model as a fraud “kill chain” across fraud and scam use cases.
• Align fraud intelligence outputs to the framework’s phases to support earlier detection, improved coordination, and more effective disruption of fraud schemes.
• Partner with internal teams to integrate the framework into fraud detection, investigation, and response workflows.

Intelligence Production & Stakeholder Communication
• Produce strategic, operational, and tactical intelligence products (e.g., threat assessments, trend reports, tactical alerts) tailored to senior and operational audiences.
• Communicate intelligence clearly and concisely to technical, operational, and non technical audiences.
• Continuously evaluate and refine intelligence processes to improve timeliness, relevance, and impact.

Basic Qualifications
- Bachelor’s degree, or equivalent work experience
- Typically more than eight years of applicable experience

Preferred Skills/Experience

• 7+ years experience in fraud intelligence, cyber threat intelligence, fusion centers, financial crime, or related disciplines
• Demonstrated experience building or standing up new intelligence capabilities
• Strong analytic, written, and verbal communication skills

• Experience applying cyber threat intelligence concepts (e.g., kill chains, TTP analysis, lifecycle models) to fraud or financial crime.
• Familiarity with FS‑ISAC intelligence sharing and the Cyber Fraud Prevention Framework.
• Experience supporting or partnering with threat hunting or investigative teams.
• Knowledge of intelligence sharing standards, information handling, and governance practices.

LOCATION EXPECTATIONS:  This role requires working from a U.S. Bank Location three (3) or more days per week.

NOTE: This position is not eligible for current or future visa sponsorship.