Cyber Resiliency Exercise Senior Lead/Coordinator - Senior Lead Information Security Analyst

Wells Fargo & Company•Minneapolis, MN

3d•$159,000 - $305,000•Hybrid

About The Position

About this role: Cyber Resiliency Exercise Senior Lead/Coordinator: This role leads the planning, coordination, scheduling, and execution of tabletop exercises focused on emerging threats and resiliency capabilities, as well as clean rebuild (functional) cyber recovery exercises, validating the organization’s ability to restore critical systems to a trusted (malware‑free) and operational state following severe cyber events. The role partners closely with application, infrastructure, identity, cloud, backup, and security teams to coordinate participants and timelines, design and facilitate threat‑informed tabletops, execute hands‑on recovery scenarios, validate recovery runbooks through execution, and assess key technical resiliency capabilities such as immutable backups, identity recovery, and platform rebuilds. Success is measured through evidence‑based outcomes, clear articulation of recovery gaps and risk, and driving remediation to strengthen enterprise cyber resilience. In this role, you will: Provide oversight to the Information Security program for a major line of business Consult with line of business on the consistent implementation of the enterprise information security model and solutions to remediate information security risks Ensure that risks to all information assets are being managed in a timely and effective manner to meet the Information Security Program requirements and the current threat landscape Ensure information security capabilities are included in all aspects of the company's technology architecture Proactively manage the information security risk profile of line of business information assets throughout the lifecycle of the asset Provide vision, direction, and expertise to more experienced leadership on implementing innovative and significant business solutions that are large-scale, cross-functional, or companywide strategies Ensure the team has the necessary training and is keeping abreast of regulatory and compliance issues Engage with all levels of professionals and managers companywide and serve as an experienced advisor to leadership

Requirements

7+ years of Information Security Analysis experience, or equivalent demonstrated through one or a combination of the following: work experience, training, military experience, education
Lead experience including delegating and having strong organizational skills.

Nice To Haves

Knowledge of NIST SP 800‑160 cyber resiliency engineering principles.
Strong background in Business Continuity and Disaster Recovery (BCDR) with direct involvement in technology recovery planning, execution, and validation.
Hands‑on experience with technology recovery strategies for cyber events, including data corruption, destructive malware, ransomware, and loss of system integrity.
Proven ability to translate business recovery objectives (RTO/RPO) into executable technology recovery approaches and sequencing.
Familiarity with HSEEP exercise design and evaluation concepts.
Knowledge of the SIFMA/ FSSCC Reconnection Framework.
Experience in regulated or financial services environments; relevant certifications (e.g., CISSP) preferred.
Demonstrated experience executing or supporting clean rebuild recoveries following cyber incidents, including re‑provisioning of infrastructure, operating systems, applications, and data in a known‑good state.

Responsibilities

Leads the planning, coordination, scheduling, and execution of tabletop exercises focused on emerging threats and resiliency capabilities
Validates the organization’s ability to restore critical systems to a trusted (malware‑free) and operational state following severe cyber events
Partners closely with application, infrastructure, identity, cloud, backup, and security teams to coordinate participants and timelines
Designs and facilitate threat‑informed tabletops
Executes hands-on recovery scenarios
Validates recovery runbooks through execution
Assesses key technical resiliency capabilities such as immutable backups, identity recovery, and platform rebuilds
Provide oversight to the Information Security program for a major line of business
Consults with line of business on the consistent implementation of the enterprise information security model and solutions to remediate information security risks
Ensures that risks to all information assets are being managed in a timely and effective manner to meet the Information Security Program requirements and the current threat landscape
Ensures information security capabilities are included in all aspects of the company's technology architecture
Proactively manages the information security risk profile of line of business information assets throughout the lifecycle of the asset
Provides vision, direction, and expertise to more experienced leadership on implementing innovative and significant business solutions that are large-scale, cross-functional, or companywide strategies
Ensures the team has the necessary training and is keeping abreast of regulatory and compliance issues
Engages with all levels of professionals and managers companywide and serve as an experienced advisor to leadership