Control Management Director- Cybersecurity

Why Wells Fargo

Are you looking for more? Find it here. At Wells Fargo, we're more than a financial services leader – we’re a global trailblazer committed to driving innovation, empowering communities, and helping our customers succeed.

We believe that a meaningful career is much more than just a job – it’s about finding all of the elements to help you thrive, in one place.

Living the Well Life means you’re supported in life, not just work. It means having robust benefits, competitive compensation, and programs designed to help you find work-life balance and well-being. You’ll be rewarded for investing in your community, celebrated for being your authentic self, and empowered to grow. Join us!

About this role:

Wells Fargo is seeking a Control Management Director. The Cybersecurity, Control Management Director will serve as an important member of the Technology, SDI, GTM Control Management organization. Responsibilities include:

• Deep technical knowledge in common attack frameworks such as Mitre Attack

• Understanding of vulnerability, patch, infrastructure and application security

• Identify and assess risks, in coordination with the Cybersecurity Organization

• Provide input into the Cybersecurity Control Management strategic plan

• Implements policies

• Coordinates and supports control effectiveness

• Monitors the remediation of risk

• Provides inputs and ensures proper execution of procedures

• Responsible for governance/reporting in the their areas

In this role, you will:

• Manage and develop a team of multiple levels of directors and managers with focus on delivering service of moderate to high complexity for cross functional stakeholders and internal partners associated with the function or affected by its outcomes

• Identify opportunities for process improvement and risk control development by overseeing strategy and execution of all activities

• Lead Business Controls team by making strategic decisions to resolve highly complex issues by ensuring all process weaknesses or gaps are identified and remediation plans are supported and acted upon

• Interpret and develop range of policies and procedures for business functions with moderate to high complexity and risk

• Collaborate with and influence corporate heads, business heads, legal, audit, regulators, industry partners, elected officials, and trade groups including more experienced leadership

• Manage allocation of people and financial resources to ensure commitments are met and aligned with strategic objectives in Business Controls functional area

• Develop and guide a culture of Business Controls talent development to meet business objectives and strategies

Required Qualifications:

• 8+ years of Risk Management or Business Controls experience, or equivalent demonstrated through one or a combination of the following: work experience, training, military experience, education

• 4+ years of Management experience

Desired Qualifications:

• Effective understanding and execution of risk management programs, including Risk and Control Self-Assessment (RCSA), Enterprise Risk Identification & Assessment (ERIA) and Issues Management.

• Compliance experience

• Cybersecurity engineering experience

• Cybersecurity control and framework knowledge

• A strong track record and deep business knowledge in the financial services sector with subject-matter expertise as it pertains to Cybersecurity.

• Demonstrates the ability to make subjective and informed decisions based upon output, influence stakeholders and justify decision making.

• Understands the respective businesses they are supporting and understanding of related laws/rules/regulations.

• Strong analytical ability used to identify risks and confidently raise issues and through proper statue and authority will counsel and escalate early and when necessary.

• Design a control and ways to measure effectiveness.

• Meaningful knowledge across the enterprise risk management framework, including: risk identification, risk appetite and strategy, risk-related decisions, processes and controls, risk analytics and governance.

• Strong interpersonal, influencing, and communications skills with an ability to interact effectively with stakeholders and regulators, to include virtual, matrixed leadership experience and the ability to e