Lead Information Security Analyst-Cloud Security Risk

About this role:The Cloud Security Risk organization leads the strategy, planning and execution of Cybersecurity risk management of WF applications in the cloud. To achieve its goals, Cloud Security Risk works horizontally and collaboratively across the Cybersecurity domains, Independent Risk Management, Internal Audit, Tech Controls, Applications & Cloud Technology (ACT) and Regulatory Relations through the Risk Management Framework processes designed to identify, assess, disposition, monitor, measure and report risk and control maturity.The Cloud Security Risk Lead Analyst role will be responsible for the execution of Cloud Security risk and controls identification, assessment, monitoring, measurement and governance activities ensuring cloud workloads meet risk tolerance and adhere to the cloud security requirements across all cloud service and deployment models. In addition, they will support the continuous enhancement of the cloud control framework, ensuring its alignment to Wells Fargo policy and threat vectors. Candidates for this role should be knowledgeable of industry standard frameworks for cybersecurity, cloud and artificial intelligence (AI), risk management principles, controls and analytics, and be able to deliver cloud security risk insights for executive decision making.Responsibilities of this position include:• Oversee and challenge cloud workload/services functions for all cloud service types (public, private, hybrid, multi-cloud) and deployment models (SaaS, PaaS. IaaS) including AI and Generative AI models to understand residual risk and ensure adherence to the cloud security control framework• Identify, analyze and monitor risk to ensure cloud workloads, including AI/GenAI models are secure prior to deployment and maintain control framework adherence post-deployment.• Evaluate control environments across the enterprise, platform and application layer, conduct risk assessments, root cause analysis and ensure sustainable remediation.• Support audit, independent risk testing and regulatory examinations• Engage with relevant governance and control management bodies and routines in support of control monitoring and adherence• Develop and monitor metrics and key risk indicators of the threat and risk environment, and Wells Fargo policy and control frameworks to understand the aggregate impact and ensure coverage of the control framework.• Support the continuous enhancement and adoption of the Cloud Security Control Framework• Develop requirements for automation in support of Cloud Security Risk and support adoptionRequired Qualifications, US:• 5+ years of Information Security Analysis experience, or equivalent demonstrated through one or a combination of the following: work experience, training, military experience, education• 3+ years of information security risk and controls management experienceDesired Qualifications:• Knowledge of Cybersecurity, Cloud Computing, Cloud Security, Artificial Intelligence/Machine Learning• Demonstrated experience with industry standards (i.e. NIST, CSA, FFIEC, CIS, CRI Profile)• Cloud, Risk and Cybersecurity certification (e.g. CISA, CISM, CISSP, CRISC, CCSK)• Understanding of information security threats, trends and industry best practices and security tools• Ability to communicate effectively, with peers, stakeholders, partners, senior management, auditors and regulators• Strong analytical skills and ability to solve complex problems with minimal direct oversight, and the ability to handle multiple, high priority deliverables simultaneously• Experience with standard Microsoft Office tools (i.e Advanced Excel, Powerpoint, Word)• Finance sector security experience or other regulated industry (e.g. utilities, health care, government)Job Expectations:• Ability to travel up to 20% of the time• Wells Fargo offers a hybrid work environment. Candidates will be expected to work three (3) days per week at the designated location.• No relocation assistance• Wells Fargo can only hire those individuals who will not require immigration assistance either now or in the future.Pay RangeReflected is the base pay range offered for this position. Pay may vary depending on factors including but not limited to achievements, skills, experience, or work location. The range listed is just one component of the compensation package offered to candidates.$111,100.00 - $237,100.00BenefitsWells Fargo provides all eligible full- and part-time employees with a comprehensive set of benefits designed to protect their physical and financial health and to help them make the most of their financial future. Visit Benefits - Wells Fargo Careers for an overview of the following benefit plans and programs offered to employees.• 401(k) Plan• Paid Time Off• Parental Leave• Critical Caregiving Leave• Discounts and Savings• Health Benefits• Commuter Benefits• Tuition Reimbursement• Scholarships for dependent children• Adoption ReimbursementPosting End Date:18 Aug 2024• Job posting may come down early due to volume of applicants.We Value DiversityAt Wells Fargo, we believe in diversity, equity and inclusion in the workplace; accordingly, we welcome applications for employment from all qualified candidates, regardless of race, color, gender, national origin, religion, age, sexual orientation, gender identity, gender expression, genetic information, individuals with disabilities, pregnancy, marital status, status as a protected veteran or any other status protected by applicable law.Employees support our focus on building strong customer relationships balanced with a strong risk mitigating and compliance-driven culture which firmly establishes those disciplines as critical to the success of our customers and company. They are accountable for execution of all applicable risk programs (Credit, Market, Financial Crimes, Operational, Regulatory Compliance), which includes effectively following and adhering to applicable Wells Fargo policies and procedures, appropriately fulfilling risk and compliance obligations, timely and effective escalation and remediation of issues, and making sound risk decisions. There is emphasis on proactive monitoring, governance, risk identification and escalation, as well as making sound risk decisions commensurate with the business unit's risk appetite and all risk and compliance program requirements.Candidates applying to job openings posted in US: All qualified applicants will receive consideration for employment without regard to race, color, religion, sex, sexual orientation, gender identity, national origin, disability, status as a protected veteran, or any other legally protected characteristic.Applicants with DisabilitiesTo request a medical accommodation during the application or interview process, visit Disability Inclusion at Wells Fargo .Drug and Alcohol PolicyWells Fargo maintains a drug free workplace. Please see our Drug and Alcohol Policy to learn more.Wells Fargo Recruitment and Hiring Requirements:a. Third-Party recordings are prohibited unless authorized by Wells Fargo.b. Wells Fargo requires you to directly represent your own experiences during the recruiting and hiring process.