Information Security Senior Manager - Cyber Defense Management

About this role:

Wells Fargo is seeking an Information Security Senior Manager in Technology as part of Cybersecurity. Learn more about the career areas and lines of business at wellsfargojobs.com

Wells Fargo is seeking a Information Security Senior Manager to lead the Domain and Risk Management team within Cyber Defense Management (CDM). This position is essential to maintaining consistent execution and governance for highly visible Cyber Defense Management functions. The role leads a team responsible for areas including policy, risk treatment, metrics, and the Cyber Defense RAU. It ensures timely and effective execution of regulatory and internal assessments across all three lines of defense, while providing direct operation of multiple cross CDM controls.

In this role, you will:

• Manage and develop a team of individual contributors and managers in roles with moderate complexity and risk
• Maintain a broad awareness of the state of information security companywide
• Identify and recommend complex and innovative solutions addressing functions including vulnerability detection, threat data, network intrusion and development, and implementation of vulnerability mitigation strategies
• Identify security risks and solutions for networks and virtual private network applications, security tools, public key infrastructures, authentication and directory services, and access management services
• Identify, formulate, implement information security and Line of Business management
• Determine appropriate strategy for information security policy, standards and procedures for systems, applications and tools
• Set guidelines for compliance and risk management requirements for supported area and work with other stakeholders to implement key risk initiatives
• Advise more experienced management on issues with high, critical impact
• Collaborate and influence all levels of professionals including more experienced managers
• Lead team to achieve objectives
• Interface with Information Security Industry Leaders, Financial industry Leaders, Analysts and Regulators
• Manage allocation of people and financial resources for Information Security Analysis
• Develop and guide a culture of talent development to meet business objectives and strategy
• Lead and develop a team of Information Security professionals delivering risk based cybersecurity outcomes aligned to Cyber Defense policies and Enterprise Risk requirements.
• Own consistent execution and governance of highly visible, mandatory cyber risk and control functions across the Cyber Defense domain.
• Drive effective execution of risk assessments, control testing, and challenge activities across all three lines of defense.
• Manage CDM issue management coordination, and control maturity progression.
• Oversee control operation for processes which span CDM teams.
• Produce recurring executive level reporting and leadership updates translating cyber risk, control health, metrics, and trends into clear business context.
• Coordinate and implement assigned projects and initiatives.
• Play key role in executing Risk and Control Self-Assessment activities in partnership with Risk Assessable Unit (RAU) owner and Control management teams.
• Ensure Cyber Defense compliance with enterprise policies, standards, metrics, risk treatments, and issue remediation expectations
• Build and sustain a culture of accountability, talent development, and continuous improvement across the team.
• Establish and track performance goals and operational metrics for self and team.
• Monitor team deliverables to ensure timeliness, quality, and alignment with expectations.
• Oversee resource allocations to ensure commitments align with strategic objectives.
• Maintain a broad awareness of the state of information security across the enterprise and industry.
• Influence and oversee changes to information security policies, standards, and procedures, ensuring alignment with Enterprise Risk Management and required functions including Business Continuity Planning (BCP).
• Advise leadership or executive management on issues with high impact on the company.
• Recommend mitigation strategies for identified security risks.
• Support internal and external audits, regulatory reviews, and third-party assessments.

​

Required Qualifications:

• 7+ years of Information Security Analysis experience, or equivalent demonstrated through one or a combination of the following: work experience, training, military experience, education
• 3+ years of management or leadership experience

Desired Qualifications:

• Expertise across core Cyber defense domains including Incident Response, Data Loss Preven