Cybersecurity AI Risk & Governance SME

About this role:

Wells Fargo is seeking a Cybersecurity AI Risk & Governance SME.  In this critical role, you will define and document a dynamic Cybersecurity for AI governance framework; including governance routines such as adherence monitoring, controls, metrics, reporting, key performance indicators, and escalation.

You will also establish a process for sustaining this dynamic Cybersecurity for AI governance framework, including review and ingestion of regulatory changes to AI; maintenance of mapping to AI instances across the firm to ensure visibility of full scope of AI activity; and defined plans on how to pivot the program as regulatory and firm environmental changes necessitate.

In defining a dynamic Cybersecurity for AI governance framework, you will partner across Cybersecurity to establish AI requirements to secure AI across the firm; drive the incorporation of AI requirements into the appropriate documentation, including policy, baselines, developer design requirements; and work with engineers, cloud SMEs, data scientists, among others, to translate requirements into patterns and/or security assessments controls.

In this role, you will:

• Provide oversight to the Information Security program for a major line of business
• Consult with line of business on the consistent implementation of the enterprise information security model and solutions to remediate information security risks
• Ensure that risks to all information assets are being managed in a timely and effective manner to meet the Information Security Program requirements and the current threat landscape
• Ensure information security capabilities are included in all aspects of the company's technology architecture
• Proactively manage the information security risk profile of line of business information assets throughout the lifecycle of the asset
• Provide vision, direction, and expertise to more experienced leadership on implementing innovative and significant business solutions that are large-scale, cross-functional, or companywide strategies
• Ensure the team has the necessary training and is keeping abreast of regulatory and compliance issues
• Engage with all levels of professionals and managers companywide and serve as an experienced advisor to leadership

Required Qualifications:

• 7+ years of Information Security Analysis experience, or equivalent demonstrated through one or a combination of the following: work experience, training, military experience, education
• 5+ years of cross-functional, Cybersecurity domain experience (e.g., demonstrated ability to understand and mitigate Cybersecurity risk across multiple domains (IAM, AppSec, DLP, Encryption, Infrastructure, Third-Party, etc.))
• 4+ years of experience in Cybersecurity or Technology risk management, audit, or legal functions
• AI/ML implementation/operation experience
• Proven ability to lead risk validation and remediation processes

Desired Qualifications:

• 3+ years in AI/ML governance, including:
  • understanding key AI/ML laws, rules, regulations and frameworks
  • establishing guardrails/governance for defensible security around AI instances utilized across a firm via policy, procedures, and associated adherence monitoring mechanisms (e.g., controls, metrics, reporting, paths for escalation)
  • Scaling changes at pace across a large, matrixed environment to meet regulatory and firm environmental obligations, while remaining secure and defensible
• Ability to anticipate and mitigate AI/ML challenges by understanding risk frameworks and evolving regulatory/legal landscape
• Finesse in bridging the gap between AI/ML and internal customers by distilling complex concepts and making consumable to any audience
• Ability to develop and deliver message of secure AI/ML as an enabler of business and make it real for stakeholders at all levels across the enterprise
• Ability to work independently, confidently challenge assumptions, and lead by example in ensuring risks are effectively mitigated
• Excellent communication with the ability to drive initiatives and engage with stakeholders at all levels
• Exceptional attention to detail and analytical skills, particularly in evaluating technical and risk-related information
• Prior experience working with regulators or within a highly regulated industry such as banking and financial services
• Keen and crisp presentation skills with prior experience presenting to leadership

Job Expectations:

• This is a hybrid position.

  There is no Visa Transfers or Visa sponsorships for this role.

  Position is posted in the city where the role will be seated.