Technology Control Management Specialist

Wells Fargo Bank•Charlotte, NC

7d•$77,000 - $121,000•Hybrid

About The Position

The Technology Control Management Specialist is part of the Technology Control Management organization supporting Technology Development / Chief Development Experience Office. The role helps strengthen controls within the Software Development Lifecycle and Application Management Lifecycle. It partners with technology, cybersecurity, enterprise risk, asset management, procurement, and other stakeholders to identify risks, assess controls, monitor effectiveness, and support sustainable remediation. The specialist supports the control environment for IT Asset Management, including hardware, software, and configuration management. The role also provides oversight of SACM processes and configuration item data, helps address risks associated with Shadow IT, and supports metrics and reporting on control performance, risk trends, and remediation progress. It contributes to enterprise risk and control programs, reviews policies and process documentation, supports senior leadership governance routines, and collaborates with first-line, second-line, audit, and technology teams on reviews, audit activity, and continuous improvement. The position follows Wells Fargo’s standard hybrid operating model and must be performed from one of the listed locations. It is not eligible for visa sponsorship. The stated base pay range is $77,000 to $121,000; pay may vary based on performance, skills, experience, and work location. Employees may also be eligible for incentive opportunities.

Requirements

At least 5 years of Risk Management, Control Management, Operational Risk, Technology Risk, or equivalent experience demonstrated through work experience, training, military experience, or education.
At least 4 years of experience supporting risk and control programs in a technology, operations, or enterprise risk environment.
Ability to work onsite on a hybrid schedule according to Wells Fargo’s standard operating model in one of the listed locations.

Nice To Haves

Knowledge of IT, information security, and cloud management and control frameworks, such as NIST Cybersecurity Framework and 800-53, CIS Top 20 Critical Security Controls, FFIEC IT Examination Handbooks, COBIT, FedRAMP, ISO 2700x, or ITIL.
Control evaluation, testing, and/or audit experience, including assessing risk, drafting and executing test scripts, identifying control or execution gaps, assessing issues and trends, and influencing change.
Strong risk and control fundamentals.
Comprehensive understanding of risk types, methodologies, and frameworks for evaluating or testing controls and assessing results, conducting research, and identifying control deficiencies.
Clear understanding of technology risk and policies and standards associated with Technology and Cyber Security Risk.
Experience leading and providing feedback to staff on audit projects or engagements.
Experience at a financial institution or accounting firm.
A BS/BA degree or higher.
Excellent verbal, written, and interpersonal communication skills.

Responsibilities

Support the design, implementation, and ongoing enhancement of the IT Asset Management control environment, including hardware, software, and configuration management processes.
Identify and assess risks related to asset inventory completeness, asset ownership, lifecycle management, unauthorized technology use, and data quality across asset repositories.
Provide control oversight for SACM processes, including the accuracy, completeness, and governance of configuration item data and related relationships.
Partner with stakeholders to identify, assess, and mitigate Shadow IT risks involving unapproved applications, services, infrastructure, and technology solutions.
Monitor control effectiveness and support metrics, reporting, and routines that provide transparency into control performance, risk trends, and remediation progress.
Drive risk and control activities aligned with enterprise programs, including RCSA, risk identification, control evaluation, issue management, and remediation validation.
Review policies, standards, procedures, and process documentation to ensure risks are addressed and controls are clearly defined, documented, and sustainable.
Support senior leadership governance and reporting routines covering control-related themes, emerging risks, issue status, and mitigation activities.
Collaborate with first-line, second-line, audit, and technology teams on internal reviews, audit activity, and continuous improvement of the IT asset management control environment.