Technology Control Management Specialist

Wells Fargo & Company•Charlotte, NC

7d•$77,000 - $121,000•Hybrid

About The Position

The Technology Control Management Specialist is a member of the Technology Control Management organization supporting Technology Development / Chief Development Experience Office. The role helps strengthen controls within the Software Development Lifecycle and Application Management Lifecycle by partnering with technology, cybersecurity, enterprise risk, asset management, procurement, and other stakeholders to identify risks, assess controls, monitor effectiveness, and support sustainable remediation. The specialist supports controls for IT Asset Management, including hardware, software, and configuration management, and provides oversight of SACM processes and configuration item data. The role addresses risks involving asset inventory, ownership, lifecycle management, unauthorized technology use, data quality, and Shadow IT. It also contributes to risk and control programs, reporting, policy and process reviews, leadership governance, audit support, and continuous improvement. This position follows Wells Fargo’s standard hybrid operating model and requires onsite work at one of the listed locations. It is not eligible for visa sponsorship. The listed base pay range is $77,000 to $121,000. Employees may also be eligible for incentive opportunities. The posting end date is October 23, 2026.

Requirements

At least 5 years of Risk Management, Control Management, Operational Risk, Technology Risk, or equivalent experience demonstrated through work experience, training, military experience, education, or a combination.
At least 4 years of experience supporting risk and control programs in a technology, operations, or enterprise risk environment.
Ability to work onsite on a hybrid schedule under Wells Fargo’s standard operating model at one of the listed locations.

Nice To Haves

Knowledge of IT, information security, and cloud management and control frameworks, such as NIST Cybersecurity Framework and 800-53, CIS Top 20 Critical Security Controls, FFIEC IT Examination Handbooks, COBIT, FedRAMP, ISO 2700x, and ITIL.
Strong control evaluation/testing and/or audit experience, including assessing risk, drafting and executing test scripts, identifying control and control-execution gaps, assessing issues and trends, and influencing change.
Strong risk and control fundamentals.
Comprehensive understanding of risk types, methodologies, and frameworks for evaluating or testing controls and assessing results, conducting research, and identifying control deficiencies.
Clear understanding of technology risk.
Clear understanding of policies and standards associated with Technology and Cyber Security Risk.
Experience leading and providing feedback to staff on audit projects or engagements.
Experience at a financial institution or accounting firm.
BS/BA degree or higher.
Excellent verbal, written, and interpersonal communication skills.

Responsibilities

Support the design, implementation, and ongoing enhancement of IT Asset Management controls, including hardware, software, and configuration management processes.
Identify and assess risks related to asset inventory completeness, asset ownership, lifecycle management, unauthorized technology use, and data quality across asset repositories.
Provide control oversight for SACM processes, including the accuracy, completeness, and governance of configuration item data and related relationships.
Partner with stakeholders to identify, assess, and mitigate risks associated with Shadow IT, including unapproved applications, services, infrastructure, and technology solutions.
Monitor control effectiveness and support metrics, reporting, and routines that provide transparency into control performance, risk trends, and remediation progress.
Drive risk and control activities aligned with enterprise programs, including RCSA, risk identification, control evaluation, issue management, and remediation validation.
Review policies, standards, procedures, and process documentation to ensure risks are addressed and controls are clearly defined, documented, and sustainable.
Support senior-leadership governance and reporting on control themes, emerging risks, issue status, and risk mitigation activities.
Collaborate across first-line, second-line, audit, and technology teams to support internal reviews, audit activity, and continuous improvement of the IT asset management control environment.