Senior Lead Technology Risk Officer - Technology Risk Management

Wells Fargo & Company•Irving, TX

1d•$159,000 - $254,000•Hybrid

About The Position

Wells Fargo is seeking a Senior Lead Technology Risk Officer to join the Technology Risk Management Organization within Corporate Risk. In this role, you'll provide second line oversight of cybersecurity risk management practices across the enterprise, ensuring alignment with regulatory expectations, internal risk frameworks, and industry standards. Learn more about the career areas and lines of business at wellsfargojobs.com.

Requirements

7+ years of Technology Risk experience, or equivalent demonstrated through one or a combination of the following: work experience, training, military experience, education.

Nice To Haves

Deep understanding of cybersecurity frameworks (e.g., NIST CSF, ISO 27001, MITRE ATT&CK) and incident response methodologies.
Strong knowledge of identity and access management (IAM) principles, tools, and governance practices.
Expertise in data protection, encryption standards, and information classification.
Experience with security operations, including SIEM, log management, and threat detection technologies.
Expertise with vulnerability management tools, scanning methodologies, and remediation processes.
Knowledge of cyber threat intelligence, adversary behavior analysis, and proactive threat hunting techniques.
Proven ability to assess and challenge cyber risk controls and influence remediation strategies.
Strong communication, analytical, and leadership skills with experience engaging senior stakeholders and regulators.
Experience in a second line of defense or independent cybersecurity risk oversight function is highly desirable.

Responsibilities

Evaluate and Challenge Cyber Incident Response Oversight: Including classification, investigation, escalation, containment, recovery, and closure to ensure timely and effective handling of cybersecurity events.
Evaluate and Challenge Infrastructure security: Including networks, workspace, and data stores.
Evaluate and Challenge Application security: Including pen testing, application threat modeling and application security testing
Evaluate and Challenge Identity and Access Management Oversight: Including authentication, authorization, privileged access, remote access, and segregation of duties.
Evaluate and Challenge Information Protection Oversight: Including data leakage prevention, information classification, encryption, and disclosure controls to ensure sensitive data is adequately protected.
Evaluate and Challenge Security Monitoring Oversight: Including the effectiveness of security event monitoring, log collection, dashboard governance, and threat actor analysis to ensure proactive detection and response capabilities.
Evaluate and Challenge Vulnerability Management Oversight: Including lifecycle of vulnerability management including discovery, identification, monitoring, remediation, and reporting to ensure timely mitigation of technical risks.
Evaluate and Challenge Cyber Threat Intelligence and Adversary Hunting: Including threat intelligence is effectively gathered, analyzed, and used to inform defenses against emerging threats and adversary tactics.
Deliver clear, actionable insights and reporting on cybersecurity risk exposures to senior management, risk committees, and regulatory bodies.
Collaborate with first-line cybersecurity teams, technology, compliance, legal, and internal audit to ensure a cohesive and effective cybersecurity risk management approach.