New York, New York

Job Description

Important Note: During the application process, ensure your contact information (email and phone number) is up to date and upload your current resume when submitting your application for consideration. To participate in some selection activities you will need to respond to an invitation. The invitation can be sent by both email and text message.  In order to receive text message invitations, your profile must include a mobile phone number designated as “Personal Cell” or “Cellular” in the contact information of your application.

At Wells Fargo, we are looking for talented people who will put our customers at the center of everything we do. We are seeking candidates who embrace diversity, equity and inclusion in a workplace where everyone feels valued and inspired.

Help us build a better Wells Fargo. It all begins with outstanding talent. It all begins with you.

Technology sets IT strategy; enhances the design, development, and operations of our systems; optimizes the Wells Fargo infrastructure; provides information security; and enables Wells Fargo global customers to have 24 hours a day, 7 days a week banking access through in-branch, online, ATMs, and other channels.

Our mission is to deliver stable, secure, scalable, and innovative services at speeds that delight and satisfy our customers and unleash the skills potential of our employees.

Technology Control resides within the Wells Fargo Technology (WFT) organization. Its functions improve how we own, assess, manage, and report technology risks, while ensuring that we have strong technology risk expertise, employ the concept of risk management as a utility – operationalizing for efficiency, and move us to progressive risk management based on data and analytical processes.

Core Job Responsibilities

  • Support Technology Policy Development team in providing Information and Cyber Security (ICS) expertise and driving the development of quality Policy and Procedural documentation for a number of ICS functions.
  • Partner with Policy Owner teams to draft policy and procedural content as well as mappings to applicable regulations, controls, and adherence metrics. Provide suggestions on policy and procedure rationalization opportunities, influence implementation.
  • Translate information security risk and compliance requirements, commitments and industry guidance into concise and easy to follow policy statements.
  • Parter with second line functions, Enterprise Policy Office and Independent Risk Management, to ensure policy development process requirements are followed, evidence is collected and documented.
  • Help drive Technology Policy simplification initiative, which includes collaboration with various policy owner teams across Technology organization as well as second line partners.
  • Support tools and automation strategy by participating in various UAT Testing efforts, proposing improvements and automation opportunities.
  • Provide guidance to partners on ICS topics in support of policies and obligations.
  • Partner with members of Technology Policy Development team to enhance program and process, policy update socialization strategy, internal routines, education & awareness.


Required Qualifications

  • 7+ years of experience in risk management or 7+ years of financial services industry experience, of which 5+ years must include direct experience in risk management



Desired Qualifications

  • Certified Internal Auditor (CIA), Certified Information Systems Auditor, (CISA) Certification in Control Self-Assessment (CCSA), Certified Information Systems Security Professional, (CISSP) or other risk management discipline certification
  • Ability to work effectively in a team environment and across all organizational levels, where flexibility, collaboration, and adaptability are important
  • Advanced Microsoft Office skills
  • Excellent verbal, written, and interpersonal communication skills
  • Good analytical skills with high attention to detail and accuracy



Other Desired Qualifications
  • 7+ Years risk management experience with demonstrated leadership skills and ability to mature risk management programs
  • Demonstrated knowledge of Technology and Security risk framework – NIST, ITIL, COSO, BASEL, FedRAMP, PCI, COBIT, FFIEC and OCC Heightened Standards
  • Familiarity with a broad range of IT and Information Security products and technologies such as identity and access management, vulnerability management, encryption, and key management, logging and monitoring and application security
  • Familiarity with cloud-based environments and technologies with associated auditing methodologies
  • Information Security audit/audit consulting experience
  • Policy writing experience, technical writing skills
  • Strong risk and control fundamentals, knowledge of risk framework and methodologies
  • Knows when to act independently and when to influence the decision making process
  • Reviews own work product for completeness and accuracy against a set of criteria
  • Program execution experience
  • Demonstrated collaboration skills, especially with difficult topics when partnering with senior management. This includes the willingness and ability to question decisions, understand direction and escalate issues, where necessary.
  • Demonstrated experience with both strategic and tactical approaches to risk management.
  • Experience within an Enterprise Technology function or Technology Risk function with demonstrated knowledge of, technology systems, applications and associated risks
  • Understanding of security metrics and creation of useful dashboards for management review and consumption
     




Disclaimer

    All offers for employment with Wells Fargo are contingent upon the candidate having successfully completed a criminal background check. Wells Fargo will consider qualified candidates with criminal histories in a manner consistent with the requirements of applicable local, state and Federal law, including Section 19 of the Federal Deposit Insurance Act.

    Relevant military experience is considered for veterans and transitioning service men and women.
    Wells Fargo is an Affirmative Action and Equal Opportunity Employer, Minority/Female/Disabled/Veteran/Gender Identity/Sexual Orientation.



Benefits Summary

Benefits
 

Visit https://www.wellsfargo.com/about/careers/benefits for benefits information.

New York, New York

At Wells Fargo, we’ve been proudly supporting military veterans and their families for more than 170 years.

We value the leadership, discipline, and skills you’ve gained through your service to our country and recognize the contributions our veteran team members bring to the table. We’re so committed to hiring and retaining military veterans, veterans with disabilities, National Guard members, and Reservists that we’ve made it our goal is to employ 20,000 veterans by 2020.

As a Wells Fargo team member, you’ll find a work culture that is team-oriented, collaborative, structured, and challenging. We support veterans transitioning from military service with a variety of job options, confidential resources, educational information, and career guidance. You may choose to join our Veteran’s Team Member Network, a group of thousands who share an interest in veterans’ matters, and that promotes greater awareness and job development within the veteran community. To learn more about opportunities at our company, please visit wellsfargojobs.com/military. Let’s talk about turning your military experience into a great civilian career.