Lead Information Security Analyst Cryptography and PKI

Wells Fargo & Company•Minneapolis, MN

2d•$119,000 - $206,000•Hybrid

About The Position

Wells Fargo is seeking a highly experienced Lead Information Security Analyst to serve as a technical leader and subject matter expert in cryptography, Public Key Infrastructure (PKI), digital certificate lifecycle management, and enterprise cryptographic governance. This role requires a seasoned cryptography professional with significant hands-on experience in enterprise PKI, encryption, certificate lifecycle management, and key management. The successful candidate will be expected to operate as a recognized subject matter expert, provide technical leadership, and drive strategic initiatives across a complex enterprise environment. This role provides strategic direction, risk oversight, and technical expertise across the firm's cryptographic ecosystem to help protect critical systems and data. The ideal candidate will bring deep expertise in encryption technologies, certificate management, cryptographic controls, and regulatory requirements within large financial institutions. This individual will drive governance, risk management, automation, and modernization initiatives while partnering across cybersecurity, infrastructure, architecture, engineering, and application teams.

Requirements

7+ years of experience in Information Security, Cryptography, PKI, Encryption, Key Management, or related cybersecurity disciplines within the financial services industry.
Deep expertise in Public Key Infrastructure (PKI) and Digital Certificate Lifecycle Management.
Strong knowledge of cryptographic principles, algorithms, encryption technologies, and key management processes.
Experience supporting enterprise-scale certificate lifecycle management programs.
Experience managing and governing certificate discovery and automation platforms such as Venafi, Keyfactor, DigiCert, or similar technologies.
Strong understanding of Hardware Security Modules (HSMs), including deployment architectures, key protection mechanisms, and operational controls.
Experience developing and implementing cryptographic policies, standards, governance frameworks, and control requirements.
Strong understanding of regulatory, audit, and compliance requirements applicable to cryptographic controls within financial institutions.
Experience conducting cryptographic risk assessments and remediation planning.
Experience analyzing large datasets to identify risk exposure, policy non-adherence, and operational improvement opportunities.
Demonstrated ability to solve complex cybersecurity challenges through scalable and sustainable solutions.
Strong written and verbal communication skills with the ability to communicate effectively with technical teams, risk partners, auditors, and executive leadership.

Nice To Haves

Expertise in emerging cryptographic standards and Post-Quantum Cryptography (PQC) readiness planning.
Experience with cloud-native cryptographic services and enterprise key management solutions.
Experience designing and implementing governance automation solutions.
Experience with enterprise analytics and visualization platforms such as MS Power Platform, Tableau and ServiceNow Platform Analytics.
Experience with configuration management and asset inventory platforms, including ServiceNow CMDB and Venafi datasets.
Knowledge of AI-assisted automation, large language models, and workflow integration capabilities.
Experience leading enterprise-wide cybersecurity initiatives and influencing strategic technology decisions.
Relevant industry certifications such as CISSP, CCSP, CISM, CRISC, GCLD, GDSA, GLEG, GPCS, GCSA, GCLA, or vendor-specific PKI and cryptography certifications.

Responsibilities

Serve as a lead SME for enterprise cryptography, encryption technologies, PKI, certificate lifecycle management, and key management practices.
Provide technical leadership for digital certificate governance across the enterprise.
Partner with application, infrastructure, cloud, and security engineering teams to design secure cryptographic solutions and resolve complex technical challenges.
Develop and maintain cryptographic policies, standards, governance frameworks, and control requirements.
Assess cryptographic implementations and conduct risk assessments involving certificate management, key management, encryption controls, and trust architectures.
Support audit, regulatory, and risk management activities related to cryptographic controls.
Monitor emerging cryptographic threats and evaluate readiness for evolving standards, including Post-Quantum Cryptography (PQC).
Provide expertise related to Hardware Security Modules (HSMs), including architecture, deployment, key custody, and operational controls.
Lead initiatives to improve certificate discovery, inventory management, governance, and lifecycle automation.
Evaluate and optimize certificate lifecycle management platforms including Venafi, DigiCert, HSMs, and related technologies.
Analyze cryptographic, certificate, and asset datasets to identify risk trends, compliance gaps, and improvement opportunities.
Design automation solutions, dashboards, and reporting capabilities that improve governance visibility and operational efficiency.
Leverage approved AI-assisted tools to enhance analysis, reporting, and investigations.
Mentor cybersecurity professionals and influence enterprise cryptographic strategy, roadmaps, and modernization efforts.
Act as the primary technical escalation point for complex cryptographic and PKI-related issues.
Drive initiatives that improve cryptographic risk posture, governance maturity, automation, operational resilience, and audit readiness.
Influence enterprise architecture and technology decisions involving cryptographic controls and trust services.
Build strong partnerships across Cybersecurity, Technology Infrastructure, Architecture, Engineering, Risk, Audit, and Regulatory teams.
Translate complex cryptographic concepts into actionable business and risk decisions.