Technology Director

Wells Fargo•Iselin, NJ

4d•$215,000 - $355,000•Onsite

About The Position

Wells Fargo is seeking a Technology Director to lead vulnerability management and application security capabilities within Wealth and Investment Management Technology (WIMT). This senior technology leadership role will advance a proactive, scalable, risk-based approach to identifying, prioritizing, remediating, and preventing technology vulnerabilities across applications, infrastructure, cloud, containers, open-source software, and hybrid environments. The Technology Director will provide strategic direction for vulnerability management and work across Technology, Cybersecurity, Risk, Audit, Product, Engineering, Infrastructure, and other stakeholders to strengthen governance, accountability, engineering practices, and measurable risk reduction. The role will lead a federated operating model that combines centralized leadership with accountability across technology and product organizations. It will also promote secure software development, DevSecOps, automation, authoritative vulnerability data, reusable remediation approaches, and responsible use of AI. Success will be measured by reducing vulnerability exposure, prioritizing remediation based on risk, preventing recurring vulnerabilities, strengthening ownership and accountability, validating remediation, and improving the scalability and effectiveness of vulnerability-management practices. The role is based at one of the listed Wells Fargo locations: Iselin, New Jersey; Charlotte, North Carolina; Minneapolis, Minnesota; or Saint Louis, Missouri. The stated base pay range is $215,000 to $355,000, and employees may also be eligible for incentive opportunities.

Requirements

10+ years of Technology Strategic Leadership experience, or equivalent demonstrated through work experience, training, military experience, education, or a combination.
4+ years of management or leadership experience.
5+ years of experience leading a large-scale vulnerability management, Application Security, cyber risk, security engineering, or closely related technology function.
5+ years of experience with Application Security, secure software development lifecycle practices, DevSecOps, and risk-based vulnerability prioritization and remediation.
5+ years of experience leading significant technology or cybersecurity transformation, including changes to operating models, accountability, processes, engineering practices, data, or technology capabilities.
5+ years of experience leading horizontally through influence in a complex matrixed organization and driving outcomes across organizations outside direct reporting lines.
5+ years of experience partnering with and influencing senior Technology, Cybersecurity, Risk, Audit, Product, Engineering, Infrastructure, and business stakeholders.
5+ years of experience translating technology and business requirements into enterprise capabilities, technology strategies, platforms, or operating-model improvements.
5+ years of experience establishing transparent management reporting, authoritative data, meaningful metrics, and executive-level risk views that enable decisions, accountability, and measurable outcomes.
5+ years of experience developing technology talent, building organizational capabilities, and communicating complex technology and cybersecurity risks to senior leadership.

Nice To Haves

Experience leading vulnerability management or Application Security within a large, complex, highly regulated financial services organization.
Advanced knowledge of secure SDLC, secure-by-design principles, DevSecOps, threat modeling, SAST, DAST, SCA, penetration testing, software supply-chain security, and modern application architectures.
Experience establishing federated vulnerability-management, security-champion, or similar technology-risk and engineering-enablement models.
Experience implementing threat-informed and business-contextual vulnerability prioritization and translating technical findings into meaningful business and technology risk.
Experience developing executive vulnerability reporting that connects exposure with applications, criticality, ownership, remediation commitments, aging, dependencies, and systemic risk.
Experience establishing authoritative vulnerability data and consolidating fragmented reporting, tooling, governance, and manual operational processes.
Experience developing automated or self-service capabilities for vulnerability remediation, validation, evidence collection, prioritization, reporting, and reusable remediation patterns.
Experience influencing enterprise cybersecurity, technology, or engineering capabilities and roadmaps and applying automation or AI to improve cybersecurity, secure development, or engineering productivity.
Demonstrated ability to challenge established processes, remove organizational friction, influence senior stakeholders, and lead sustained change across organizational boundaries.

Responsibilities

Set and execute strategic direction for vulnerability management and application security across WIMT, emphasizing proactive risk reduction, prevention, engineering enablement, and measurable outcomes.
Serve as a senior change agent across WIMT, driving transparency, accountability, consistent execution, and sustainable improvement.
Lead a federated, risk-based operating model across applications, infrastructure, data centers, cloud, containers, platforms, open-source software, and other technology environments, with clear governance, decision rights, ownership, and escalation.
Establish an authoritative view of vulnerability exposure and remediation performance, providing leaders with actionable insight into risk, ownership, aging, dependencies, commitments, systemic issues, and areas requiring intervention.
Represent WIMT in shaping enterprise vulnerability-management and application-security capabilities, strategy, tooling, data, processes, and roadmaps; drive appropriate WIMT capabilities where gaps exist.
Shift vulnerability management toward engineering enablement through actionable data, automation, self-service capabilities, reusable remediation patterns, standards, and preventative controls.
Provide strategic leadership for Application Security and secure software delivery, including secure SDLC, DevSecOps, SAST, DAST, SCA, penetration testing, threat modeling, software supply-chain risk, and earlier integration of security into engineering practices.
Drive risk-based prioritization, remediation, validation, root-cause analysis, and risk decisions using exploitability, business impact, asset and application criticality, production exposure, threat intelligence, and control effectiveness.
Partner with and influence senior Technology, Cybersecurity, Risk, Audit, Product, Engineering, and Infrastructure leaders to address material vulnerabilities, systemic risks, control issues, dependencies, and remediation commitments.
Drive continuous improvement through automation, AI, authoritative data, simplified processes, reusable solutions, and talent development, reducing manual work and recurring vulnerabilities.
Maintain trusted, actionable transparency for leaders and accountable technology owners regarding vulnerability exposure, ownership, remediation commitments, systemic risks, and intervention needs.
Hold technology and product organizations accountable for remediation outcomes while providing centralized strategy, governance, standards, data, reporting, enablement, and appropriate escalation.
Build organizational capability to support increasing Application Security, cloud, DevSecOps, automation, data, and AI-related demands while maintaining appropriate governance and human oversight.
Develop high-performing technology and cybersecurity talent and represent WIMT with senior internal stakeholders and relevant control or regulatory partners.