Cybersecurity Policy and AI Governance Program Lead Information Security Analyst

About this role:

Wells Fargo is seeking a Lead Information Security Analyst in Cybersecurity as part of Governance and Information Protection. Learn more about career areas and business divisions at wellsfargojobs.com.

This role will serve as the Cybersecurity Policy and AI Governance Program Lead. In this critical role, you will implement a dynamic Cybersecurity for AI governance framework, including supporting execution of governance routines such as adherence monitoring, controls, metrics, reporting, key performance indicators, and escalation.

You will also support the sustainment of this dynamic Cybersecurity for AI governance framework, including review and ingestion of regulatory changes to AI; maintenance of mapping to AI instances across the firm to ensure visibility of full scope of AI activity; and defined plans on how to pivot the program as regulatory and firm environmental changes necessitate.

You will partner across Cybersecurity to help establish AI requirements to secure AI across the firm; drive the incorporation of AI requirements into the appropriate documentation, including policy, baselines, developer design requirements; and work with engineers, cloud SMEs, data scientists, among others, to translate requirements into patterns and/or security assessments controls.

In this role, you will:

• Provide advanced information security consultation for all aspects of information security compliance policy, risk management, and remediation

• Act as more experienced lead to the organization to develop security risk awareness and mitigating actions

• Consult the organization on complex security issues and findings

• Evaluate and interpret internal and companywide information security policies, processes, standards, and participate with more experienced leaders in decision making on information security

• Collaborate and consult with peers, colleagues, and mid-level to more experienced managers to resolve issues and achieve goals

• Coordinate with vendor manager on third party assets to manage information security risks

• Serve as a mentor to less experienced staff

• Lead one or more complex Cybersecurity policy governance areas

• Align policy area scope and deliverables to strategic and transformational goals

• Drive the successful completion of programs to achieve business goals, including timely identification, escalation, and remediation of risks and issues that impact program execution and delivery

• Deliver periodic business and operating reports, including identification and remediation of execution or other risks and issues, retrospective reviews, and lessons learned

• Build strong relationships with program sponsors, business partners, and key stakeholders

• Coordinate, facilitate, negotiate, and influence cross-functional macro-level topics with key stakeholders and senior management

• Deliver clear, concise, and actionable communication to various levels of organization on a timely basis to ensure effective understanding, decision-making, and execution

Required Qualifications:

• 5+ years of Information Security Analysis experience, or equivalent demonstrated through one or a combination of the following: work experience, training, military experience, education

• 4+ years of cross-functional, Cybersecurity domain experience (e.g., demonstrated ability to understand and mitigate Cybersecurity risk across multiple domains (IAM, AppSec, DLP, Encryption, Infrastructure, Third-Party, etc.))

• 4+ years of experience in Cybersecurity or Technology risk management, audit, or legal functions

• 3+ years of experience with core security technologies such as cryptography, certificate and key management, data loss prevention (DLP), information protection, vulnerability management, cloud governance, and incident response

• 1+ year of experience with AI/ML governance

Desired Qualifications:

• 3+ years of cyber governance is highly desired

• 4+ years' experience in the development and management of complex programs spanning multiple technology, Cybersecurity, or large banking operations

• Experience in financial services or other highly regulated industry; knowledge of the financial services regulatory environment

• Deep understanding of AI/ML governance, including:

  • Understanding key AI/ML laws, rules, regulations, and frameworks

  • Establishing guardrails/governance for defensible security around AI instances utilized across a firm via policy, procedures, and associated adherence monitoring mechanisms (e.g., controls, metrics, repor