Info Security Senior Manager - Cyber Threat Fusion Center

Wells Fargo Bank•Charlotte, NC

20h

About The Position

Wells Fargo is seeking an Information Security Engineering Senior Manager in Technology as part of Cybersecurity. The Senior Manager will lead the Cyber Threat Fusion Center (CTFC), an organization responsible for monitoring, detecting, investigating, escalating, and responding to cybersecurity threats affecting Wells Fargo. The role leads CTFC managers and cybersecurity technical resources and is accountable for operational effectiveness, readiness, and continuous improvement. The Senior CTFC Manager sets priorities and performance expectations, ensures consistent practices across teams and shifts, and maintains operational coverage during routine operations and elevated cyber activity. The position provides senior leadership for significant, complex, or enterprise-impacting cybersecurity incidents, coordinating cross-functional response and ensuring appropriate escalation and communication with cybersecurity and technology leadership. The role advances CTFC capabilities and governance, improves detection and response processes, and translates incidents, threat activity, and operational performance into measurable improvements. It also develops CTFC leaders and technical talent, leads workforce and succession planning, and fosters accountability, technical excellence, collaboration, and continuous improvement. The position requires substantial cybersecurity and incident response expertise, experience leading leaders and multidisciplinary technical teams, and the ability to influence senior stakeholders across cybersecurity, technology, risk, and business organizations. The manager will also leverage AI where appropriate to support analysis, automation, troubleshooting, documentation, and security operations. AI-assisted outputs must be validated with sound technical judgment, and AI use must account for model limitations, security risks, data handling, operational considerations, and applicable security, compliance, privacy, risk, and ethical standards.

Requirements

7+ years of Information Security Engineering experience, or equivalent demonstrated through work experience, training, military experience, education, or a combination.
3+ years of management or leadership experience.
Experience leading managers, team leads, or multiple cybersecurity or technical teams.
Demonstrated experience leading security operations, cyber incident response, threat detection, or comparable cybersecurity operational functions.
Demonstrated experience providing leadership during significant or complex cybersecurity incidents.

Nice To Haves

Experience leading multiple operational teams and people leaders in a 24x7 or mission-critical cybersecurity environment.
Experience managing SOC managers, technical leads, senior incident responders, or comparable cybersecurity leadership roles.
Experience leading geographically or organizationally distributed cybersecurity operations.
Ability to establish operating models, governance, performance expectations, and consistent practices across multiple teams or shifts.
Ability to coordinate complex response efforts across cyber defense, infrastructure, applications, cloud, risk, legal, communications, and business organizations.
Experience briefing senior executives on significant cybersecurity incidents, operational risks, emerging threats, and security operations performance.
Experience developing managers and senior technical professionals and building leadership succession and technical talent pipelines.
Strong understanding of cybersecurity detection and response methodologies, threat intelligence, threat hunting, malware analysis, digital forensics, and adversary tactics, techniques, and procedures.
Experience overseeing responses to malware, phishing, insider threat, credential compromise, ransomware, data loss, cloud security events, and network intrusions.
Experience leading root cause analysis, incident containment, eradication, recovery, post-incident review, and corrective-action activities.
Experience developing and using SOC metrics, service-level objectives, quality measures, and risk indicators to evaluate operational effectiveness and drive continuous improvement.
Knowledge of MITRE ATT&CK, Cyber Kill Chain, NIST incident response practices, and security operations best practices.
Experience with SIEM, SOAR, EDR, NDR, Threat Intelligence Platforms, case management platforms, cloud security technologies, and security analytics capabilities.
Experience driving automation, orchestration, and technology modernization initiatives within security operations.
Ability to translate cybersecurity operational issues and technical risk into clear business and executive-level communications.

Responsibilities

Lead CTFC managers and cybersecurity technical resources responsible for monitoring, detecting, investigating, escalating, and responding to cybersecurity threats and security incidents.
Coach and develop CTFC managers and technical leaders, setting accountability for operational execution, people leadership, technical excellence, and service delivery.
Provide strategic and operational leadership for detection, containment, mitigation, escalation, and resolution of cybersecurity events.
Establish consistent operating practices, priorities, performance expectations, and decision-making across CTFC teams, shifts, and technical functions.
Maintain awareness of significant cyber threats, incidents, operational risks, and emerging issues, and ensure appropriate prioritization and escalation.
Lead response to high-severity, complex, or enterprise-impacting cybersecurity incidents, including coordination, decision-making, escalation, communication, and resolution.
Provide oversight and escalation support to CTFC managers and incident leaders, especially for events crossing organizational boundaries or presenting significant operational or business risk.
Partner with cybersecurity, technology, risk, and business leaders to align CTFC capabilities and operations with information security policies, standards, organizational priorities, and risk management objectives.
Provide expertise and leadership in security operations, cyber threat detection, incident response, threat hunting, threat intelligence, and emerging adversary tactics, techniques, and procedures.
Oversee analysis and correlation of security alerts, threat intelligence, and security telemetry to identify malicious activity, emerging threats, and opportunities to improve detection and response.
Establish and monitor operational performance measures, service-level objectives, quality measures, and risk indicators; identify systemic issues and drive improvement.
Improve CTFC processes, organizational structures, workflows, escalation paths, technologies, and operating practices.
Ensure the development, maintenance, governance, and optimization of security operations procedures, response playbooks, escalation criteria, and operational documentation.
Collaborate with cybersecurity engineering, detection engineering, threat intelligence, threat hunting, automation, and platform teams to improve technologies, detection capabilities, telemetry, and response automation.
Translate operational trends, incident activity, threat intelligence, and performance data into recommendations for cybersecurity leadership.
Build partnerships with senior cybersecurity, technology, risk, and business leaders to communicate operational risks, significant incidents, emerging threats, capability needs, and organizational priorities.
Manage workforce strategy, capacity, scheduling, and personnel and technical resource allocation to maintain operational readiness and coverage.
Lead recruiting, organizational planning, succession planning, and talent management for CTFC management and technical roles.
Mentor CTFC managers and senior technical professionals, establishing development paths and strengthening leadership and technical capability.
Foster accountability, disciplined execution, constructive challenge, collaboration, continuous learning, and operational resilience.
Identify systemic operational risks, capability gaps, and recurring failure patterns, and drive cross-functional remediation.
Represent CTFC priorities and requirements in cybersecurity strategy, investment, technology, and transformation initiatives.
Use AI where appropriate to accelerate analysis, automation, troubleshooting, documentation, and security operations; validate AI-assisted outputs and ensure use follows applicable standards.