Sr Lead Information Security Analyst, Cloud Security Risk

$120,400 - $287,600/Yr

Wells Fargo - Charlotte, NC

Full-time - Senior

Onsite - Charlotte, NC

Credit Intermediation and Related Activities

About the position

Wells Fargo is seeking a Sr. Lead Information Security Analyst to lead the strategy, planning, and execution of Cybersecurity risk management for applications in the cloud. This role involves evaluating cloud cybersecurity risks, ensuring adherence to security control frameworks, and collaborating across various cybersecurity domains to manage and report on risk and control maturity effectively.

Responsibilities

• Evaluate cloud cybersecurity risk and adherence to the cloud security control framework across all service and deployment models.
• Identify, analyze, and escalate risk across cybersecurity related functions and controls.
• Monitor, measure, and report control adherence and the risk profile.
• Implement and manage post-deployment quality assurance of cybersecurity related processes, technologies, and controls.
• Develop and monitor cloud security metrics, key risk indicators, and key performance indicators to provide an aggregate risk view.
• Evaluate control environments across the enterprise, platform, and application layer through root cause analysis and solution advice.
• Oversee and provide cloud expertise for audit, testing, and regulatory examinations.
• Create and present cloud specific risk details in relevant risk committees and governance routines.
• Support the continuous enhancement and adoption of the Cloud Security Control Framework.
• Develop requirements for automation capabilities in support of Cloud Security Risk & Control and support launch activities through testing, training, and awareness.
• Engage with all levels of professionals and managers companywide and serve as an experienced advisor to leadership.
• Participate in external industry organizations related to cloud security risk and controls.

Requirements

• 7+ years of Information Security Analysis experience, or equivalent demonstrated through work experience, training, military experience, or education.
• 5+ years of cloud cybersecurity, cyber risk management, and controls experience.
• In-depth, practical experience with related industry standards for cloud (i.e. NIST, CSA-CCM, FFIEC, CRI Institute, CIS Profile).

Nice-to-haves

• Cloud, Risk and Cybersecurity certification (e.g. CISA, CISM, CISSP, CRISC, CCSK).
• Understanding of cybersecurity threats, trends, and industry best practices and security tools.
• Finance sector security experience or other regulated 'critical infrastructure' industry (e.g. utilities, health care, government).
• Strong analytical skills and ability to solve complex problems with minimal direct oversight.
• Ability to handle multiple, high priority deliverables concurrently.

Benefits

• Health benefits
• 401(k) Plan
• Paid time off
• Disability benefits
• Life insurance, critical illness insurance, and accident insurance
• Parental leave
• Critical caregiving leave
• Discounts and savings
• Commuter benefits
• Tuition reimbursement
• Scholarships for dependent children
• Adoption reimbursement