Sr Lead Information Security Analyst, Cloud Security Risk

$120,400 - $287,600/Yr

Wells Fargo - Woodbridge Township, NJ

Full-time - Senior

Onsite - Woodbridge Township, NJ

Credit Intermediation and Related Activities

About the position

Wells Fargo is seeking a Sr. Lead Information Security Analyst to lead the strategy, planning, and execution of Cybersecurity risk management for applications in the cloud. This role involves collaborating across various cybersecurity domains and managing risks associated with cloud services to ensure secure deployments and adherence to security controls.

Responsibilities

• Evaluate cloud cybersecurity risk and adherence to the cloud security control framework across all service and deployment models.
• Identify, analyze, and escalate risk across cybersecurity related functions and controls.
• Monitor, measure, and report control adherence and the risk profile.
• Implement and manage post-deployment quality assurance of cybersecurity related processes, technologies, and controls.
• Develop and monitor cloud security metrics, key risk indicators, and key performance indicators to inform decision-making.
• Evaluate control environments across the enterprise, platform, and application layer through root cause analysis and solution advice.
• Oversee and provide cloud expertise for audit, testing, and regulatory examinations.
• Create and present cloud specific risk details in relevant risk committees and governance routines.
• Support the continuous enhancement and adoption of the Cloud Security Control Framework.
• Develop requirements for automation capabilities in support of Cloud Security Risk & Control and support launch activities through testing, training, and awareness.
• Engage with all levels of professionals and managers companywide and serve as an experienced advisor to leadership.
• Participate in external industry organizations related to cloud security risk and controls.

Requirements

• 7+ years of Information Security Analysis experience, or equivalent demonstrated through work experience, training, military experience, or education.
• 5+ years of cloud cybersecurity, cyber risk management, and controls experience.
• In-depth, practical experience with related industry standards for cloud (i.e. NIST, CSA-CCM, FFIEC, CRI Institute, CIS Profile).

Nice-to-haves

• Cloud, Risk and Cybersecurity certification (e.g. CISA, CISM, CISSP, CRISC, CCSK).
• Understanding of cybersecurity threats, trends, and industry best practices and security tools.
• Finance sector security experience or other regulated 'critical infrastructure' industry (e.g. utilities, health care, government).
• Strong analytical skills and ability to solve complex problems with minimal direct oversight.
• Ability to handle multiple, high priority deliverables concurrently.

Benefits

• Health insurance
• Dental insurance
• Vision insurance
• 401(k) plan
• Paid holidays
• Paid time off
• Employee discounts
• Tuition reimbursement
• Professional development opportunities