Senior Information Security Analyst, Cyber Resiliency COE

Wells Fargo - Chandler, AZ

Full-time - Senior

Onsite - Chandler, AZ

Credit Intermediation and Related Activities

About the position

Wells Fargo is seeking a Senior Information Security Analyst to lead program initiatives within the Cyber Resiliency Center of Excellence (COE). The Cyber and Data Resiliency Governance, Risk and Control team provides governance oversight and partners with Strategy Leads to ensure procedures, processes, and controls are executed and evidenced to ensure compliance and preparedness for cyber and data corruption incidents. This role is critical in ensuring alignment and connectivity with key strategies such as Enterprise Resiliency, Technology Resiliency, Disaster Recovery, and Enterprise Learning. In this position, you will provide input to a team of individual contributors and managers in roles with moderate complexity and risk. You will maintain a broad awareness of the state of information security companywide and identify and recommend complex and innovative solutions addressing functions including vulnerability detection, threat data, network intrusion, and the development and implementation of vulnerability mitigation strategies. Additionally, you will identify security risks and solutions for networks and virtual private network applications, security tools, public key infrastructures, authentication and directory services, and access management services. Your responsibilities will also include determining appropriate strategies for information security policy, standards, and procedures for systems, applications, and tools. You will set guidelines for compliance and risk management requirements for the supported area and work with other stakeholders to implement key risk initiatives. Advising more experienced management on issues with high, critical impact will be part of your role, as well as collaborating and influencing all levels of professionals, including more experienced managers. You will lead your team to achieve objectives and interface with Information Security Industry Leaders, Financial industry Leaders, Analysts, and Regulators. Furthermore, you will manage the allocation of people and financial resources for Information Security Analysis and develop a culture of talent development to meet business objectives and strategy.

Responsibilities

• Provide input to a team of individual contributors and managers in roles with moderate complexity and risk
• Maintain a broad awareness of the state of information security companywide
• Identify and recommend complex and innovative solutions addressing functions including vulnerability detection, threat data, network intrusion, and development and implementation of vulnerability mitigation strategies
• Identify security risks and solutions for networks and virtual private network applications, security tools, public key infrastructures, authentication and directory services, and access management services
• Determine appropriate strategy for information security policy, standards and procedures for systems, applications and tools
• Set guidelines for compliance and risk management requirements for supported area and work with other stakeholders to implement key risk initiatives
• Advise more experienced management on issues with high, critical impact
• Collaborate and influence all levels of professionals including more experienced managers
• Lead team to achieve objectives
• Interface with Information Security Industry Leaders, Financial industry Leaders, Analysts and Regulators
• Manage allocation of people and financial resources for Information Security Analysis
• Develop and guide a culture of talent development to meet business objectives and strategy

Requirements

• 4+ years of Information Security Analysis experience, or equivalent demonstrated through one or a combination of the following: work experience, training, military experience, education
• Experience working in a highly regulated environment, i.e. Financial Services, Healthcare
• Proven experience in applying Agile framework (e.g., Scrum, Kanban)
• Strong ability to analyze, design, and optimize business processes using various process mapping tools and techniques
• Demonstrated success in managing complex programs or projects, including planning, execution, and delivery with strong understanding of project management best practices and tools (e.g., PMP)
• Experience in collaborating with internal and external audit functions, as well as engaging with various lines of defense to ensure compliance and risk mitigation
• Highly motivated, proactive, and capable of working independently with minimal supervision to drive initiatives and achieve objectives
• Ability to adapt to changing priorities and environments, demonstrating flexibility and resilience in the face of challenges and evolving requirements
• Excellent verbal and written communication skills, with a strong ability to work collaboratively across different teams and stakeholders
• Strong analytical and problem-solving skills, with the ability to think critically and make sound decisions
• Familiarity with project management and process mapping software (e.g., JIRA, VISIO)
• Control creation, execution, and sustainability expertise
• Exceptional attention to detail with the ability to identify, analyze and resolve intricate issues effectively
• Expert knowledge and understanding of information security practices and policies, including Information Security Frameworks, Standards, and best practices
• Cyber security experience
• Technology resiliency experience