Lead Information Security Analyst - Data Analytics and Vulnerabilities

Wells Fargo is seeking a Lead Information Security Analyst to join an exciting and fast-paced team driving the effort to protect our customers and companies most critical data. In this critical role, you will explore advanced technology to implement modernized ways of working that drive down risk and increase efficiency.

This is a hybrid role at Wells Fargo.

There is no Visa sponsorship or Visa Transfers.

The req is seated in the location posted on the req.

About this role:

This role will provide technical leadership and be an individual contributor to teams that obtain and analyze data, develop reporting for senior leadership, and conduct governance of critical vulnerabilities and deficiencies across the enterprise. The ideal candidate will have demonstrated experience in the design and implementation of vulnerability management or governance, risk and compliance programs. The ideal candidate will also have demonstrated experience in automated processes including advanced data analytics, visualization, dashboards and remediation monitoring. This role is one part data analytics, one part vulnerability management and one part risk management.

In this role, you will:

Provide advanced information security consultation for all aspects of information security compliance policy, risk management, and remediation

Direct information security risk assessment and research, and recommend remediation plans and strategies

Perform Governance, Risk and Compliance to identify and prioritize key risk areas, monitor remediation and escalation critical risks to senior management

Conduct user engagement on identified areas of policy non-adherence, report and advise on moderately complex remediation or mitigation plans

Design, document, test, maintain, and provide issue resolution recommendations for moderately complex security solutions related to networking, cryptography, cloud, authentication and directory services, email, internet, applications, and endpoint security

Review and correlate technical data to include scanning reports, key and certificate management reports, security logs

Analyze identified vulnerabilities, assess their potential impact, and prioritize remediation efforts based on risk levels

Contribute to the development and maintenance of security policies and procedures related to information protection, information classification, encryption and digital certificates

Develop detailed process documentation and BAU artifact generation for security controls and metrics, governance routines, escalation events, and consequence model

Required Qualifications:

5+ years of Information Security Analysis experience, or equivalent demonstrated through one or a combination of the following: work experience, training, military experience, education

4+ years in a vulnerability management or governance, risk and compliance role, identifying and prioritizing areas of policy non-adherence, report development, remediation monitoring and escalation to senior management

Strong skills in analysis of information security monitoring data from industry leading tools (e.g. Qualys, Tanium, etc.)

Strong skills in data Extract, Transform, Load (ETL) to include automation of data ingestion, data reduction, data processing, data visualization.

Knowledge of data automation through industry leading tools (MS Power Apps, Tableau, Alteryx, etc.)

Desired Qualifications:

IT Security certification (CISSP, CRISC, GIAC, Cloud, etc)

Demonstrated expertise of Governance, Risk and Compliance principles for monitoring adherence to Information Security policies

Experience with or strong conceptual understanding of data protection principles, frameworks and technologies

Knowledge of Cloud service providers such as Amazon Web Services (AWS), Google Cloud Platform (GCP) or MS Azure

Documentation skills including design diagrams, process flows and content writing

Ability to plan & manage work well, high quality assurance and meet required standards & guidelines.

Should be familiar with financial institution security procedures and policies especially with data handling & protection.

Experience with Agile methodology of project delivery

Ability to communicate confidently and professionally

Ability to negotiate, influence, and collaborate to build successful relationships

Strong time management skills including the ability to handle multiple deliverables concurrently

Ability to influence across all organizational levels

Advanced knowledge of cybersecurity topics and organizations

Job Expectations:

Work independently to conduct governance routines on a weekly, monthly or quarterly frequency

Proactively retrieve data, conduct accuracy