Information Security Senior Manager - Cyber Defense Management

Wells Fargo & Company•Iselin, NJ

1d•$159,000 - $305,000

About The Position

Wells Fargo is seeking an Information Security Senior Manager in Technology as part of Cybersecurity. This position is essential to maintaining consistent execution and governance for highly visible Cyber Defense Management functions. The role leads a team responsible for areas including policy, risk treatment, metrics, and the Cyber Defense RAU. It ensures timely and effective execution of regulatory and internal assessments across all three lines of defense, while providing direct operation of multiple cross CDM controls.

Requirements

7+ years of Information Security Analysis experience, or equivalent demonstrated through one or a combination of the following: work experience, training, military experience, education
3+ years of management or leadership experience

Nice To Haves

Expertise across core Cyber defense domains including Incident Response, Data Loss Prevention, OSRT, CTI, and Endpoint Security solutions.
Demonstrated ability to lead cross-functional initiatives, drive workflow integration, and prioritize enterprise-level initiatives
Strong leadership skills with the ability to foster a collaborative, high-performance team culture grounded in continuous learning and improvement
Excellent written, verbal, and executive-level presentation skills
Proven leadership in highly regulated environments with strong project and program management capabilities
Relevant industry certifications such as CISM, CISSP, CSSLP, GSLC or equivalent
Master’s degree or equivalent bachelor’s in information technology, Cybersecurity, Computer Science, or related discipline (or equivalent professional experience and certifications)
Ability to leverage AI to enhance efficiency and innovation.

Responsibilities

Manage and develop a team of individual contributors and managers in roles with moderate complexity and risk
Maintain a broad awareness of the state of information security companywide
Identify and recommend complex and innovative solutions addressing functions including vulnerability detection, threat data, network intrusion and development, and implementation of vulnerability mitigation strategies
Identify security risks and solutions for networks and virtual private network applications, security tools, public key infrastructures, authentication and directory services, and access management services
Identify, formulate, implement information security and Line of Business management
Determine appropriate strategy for information security policy, standards and procedures for systems, applications and tools
Set guidelines for compliance and risk management requirements for supported area and work with other stakeholders to implement key risk initiatives
Advise more experienced management on issues with high, critical impact
Collaborate and influence all levels of professionals including more experienced managers
Lead team to achieve objectives
Interface with Information Security Industry Leaders, Financial industry Leaders, Analysts and Regulators
Manage allocation of people and financial resources for Information Security Analysis
Develop and guide a culture of talent development to meet business objectives and strategy
Lead and develop a team of Information Security professionals delivering risk based cybersecurity outcomes aligned to Cyber Defense policies and Enterprise Risk requirements.
Own consistent execution and governance of highly visible, mandatory cyber risk and control functions across the Cyber Defense domain.
Drive effective execution of risk assessments, control testing, and challenge activities across all three lines of defense.
Manage CDM issue management coordination, and control maturity progression.
Oversee control operation for processes which span CDM teams.
Produce recurring executive level reporting and leadership updates translating cyber risk, control health, metrics, and trends into clear business context.
Coordinate and implement assigned projects and initiatives.
Play key role in executing Risk and Control Self-Assessment activities in partnership with Risk Assessable Unit (RAU) owner and Control management teams.
Ensure Cyber Defense compliance with enterprise policies, standards, metrics, risk treatments, and issue remediation expectations
Build and sustain a culture of accountability, talent development, and continuous improvement across the team.
Establish and track performance goals and operational metrics for self and team.
Monitor team deliverables to ensure timeliness, quality, and alignment with expectations.
Oversee resource allocations to ensure commitments align with strategic objectives.
Maintain a broad awareness of the state of information security across the enterprise and industry.
Influence and oversee changes to information security policies, standards, and procedures, ensuring alignment with Enterprise Risk Management and required functions including Business Continuity Planning (BCP).
Advise leadership or executive management on issues with high impact on the company.
Recommend mitigation strategies for identified security risks.
Support internal and external audits, regulatory reviews, and third-party assessments.