Sr Lead Information Security Analyst, Cloud Security Risk

$120,400 - $287,600/Yr

Wells Fargo - Charlotte, NC

Full-time - Senior

Onsite - Charlotte, NC

Credit Intermediation and Related Activities

About the position

Wells Fargo is seeking a Sr. Lead Information Security Analyst in the Cloud Security Risk organization, which is responsible for managing cybersecurity risks associated with cloud applications. This role involves evaluating cloud cybersecurity risks, ensuring adherence to security frameworks, and collaborating across various cybersecurity domains to enhance risk management processes.

Responsibilities

• Evaluate cloud cybersecurity risk and adherence to the cloud security control framework across all service and deployment models.
• Identify, analyze and escalate risk across cybersecurity related functions and controls.
• Monitor, measure and report control adherence and the risk profile.
• Implement and manage post-deployment quality assurance of cybersecurity related processes, technologies and controls.
• Develop and monitor cloud security metrics, key risk indicators, and key performance indicators to provide an aggregate risk view.
• Evaluate control environments across the enterprise, platform and application layer, through root cause analysis and solution advice.
• Oversee and provide cloud expertise for audit, testing and regulatory examinations.
• Create and present cloud specific risk details in relevant risk committees and governance routines.
• Support the continuous enhancement and adoption of the Cloud Security Control Framework.
• Develop requirements for automation capabilities in support of Cloud Security Risk & Control and support launch activities through testing, training and awareness.
• Engage with all levels of professionals and managers companywide and serve as an experienced advisor to leadership.
• Participate in external industry organizations related to cloud security risk and controls.

Requirements

• 7+ years of Information Security Analysis experience, or equivalent demonstrated through work experience, training, military experience, or education.
• 5+ years of cloud cybersecurity, cyber risk management and controls experience.
• In-depth, practical experience with related industry standards for cloud (i.e. NIST, CSA-CCM, FFIEC, CRI Institute, CIS Profile).

Nice-to-haves

• Cloud, Risk and Cybersecurity certification (e.g. CISA, CISM, CISSP, CRISC, CCSK).
• Understanding of cybersecurity threats, trends and industry best practices and security tools.
• Finance sector security experience or other regulated ‘critical infrastructure' industry (e.g. utilities, health care, government).
• Strong analytical skills and ability to solve complex problems with minimal direct oversight.
• Ability to handle multiple, high priority deliverables concurrently.

Benefits

• Health benefits
• 401(k) Plan
• Paid time off
• Disability benefits
• Life insurance, critical illness insurance, and accident insurance
• Parental leave
• Critical caregiving leave
• Discounts and savings
• Commuter benefits
• Tuition reimbursement
• Scholarships for dependent children
• Adoption reimbursement