This list contains only the countries for which job offers have been published in the selected language (e.g., in the French version, only job offers written in French are displayed, and in the English version, only those in English).
Wells Fargo is seeking a Information Security Engineering Manager for their Cyber function to lead the Data Loss Prevention program in I&P region.
Job Responsibility:
Manage a team of engineers that design, document, test, maintain and provide issue resolution recommendations for highly complex security solutions related to networking, cryptography, cloud, authentication or directory services, email, internet, applications or endpoint security
Manage security consulting on large projects for internal clients to ensure conformity with corporate information security policy, and standards
Possess subject matter expertise at a mastery level in current and emerging security solutions and best practices
Review and correlate security logs
Manage computer security incident response activities for highly complex events
Conduct technical investigation of security-related incidents, and conduct post-incident digital forensics to identify causes and recommend future mitigation strategies
Manage implementation of information security such as availability, integrity, confidentiality, risk management, threat identification, modeling, monitoring, incident response, access management, and business continuity
Work with more experienced technologists and team
Interface with more experienced management
Manage allocation of people and financial resources for Information Security Architecture
Mentor and guide talent development of direct reports and assist in hiring talent
Architect and execute a world-class DLP program, integrating advanced controls for data in motion, at rest, and in use across the enterprise
Lead the Web & Email Security function, overseeing proxy and email security policies, exception management, and continuous improvement initiatives
Collaborate with Cyber Defense & Monitoring, Cloud Security, and Incident Response teams to align DLP and WES strategies with broader organizational risk objectives
Design, implement, and continuously refine DLP policies for web and email channels, leveraging industry standard data protection and monitoring technologies
Manage exception processes, including review and approval of operational allow entitlements, ensuring business needs are balanced with risk mitigation
Oversee risk management for SaaS applications, including the identification, assessment, and mitigation of data exfiltration risks associated with cloud-based platforms and services
Provide people leadership by building, mentoring, and managing a high-performing team of security engineers and analysts. Foster a culture of collaboration, continuous learning, and professional growth
Rapidly assess and communicate potential data exfiltration risks to senior leadership, coordinating detection and mitigation of incidents
Triage DLP alerts to determine severity and priority, ensuring timely escalation of critical events
Lead investigations into potential or confirmed data leakage incidents, gathering evidence and analyzing root causes
Manage the end-to-end incident response process, from initial detection through containment, eradication, recovery, and post-incident review
Requirements:
4+ years of Information Security Engineering experience, or equivalent demonstrated through one or a combination of the following: work experience, training, military experience, education
2+ years of Leadership experience
Bachelor’s or Master’s in Technology, Engineering, or equivalent experience
4 years of progressive experience in information security, with a strong focus on data protection and risk management in large, regulated environments
At least 4 years in leadership roles, demonstrating the ability to build, mentor, and manage high-performing teams of security engineers and analysts
Demonstrated ability to assess and manage risks related to data exfiltration, analyze emerging threats, and incorporate innovative technologies and methodologies into enterprise data loss prevention and monitoring
Demonstrated expertise in engineering and refining DLP policies for web, email, and cloud channels, including SaaS application risk management
Advanced knowledge of Security Information and Event Management (SIEM) platforms and industry standard data protection solutions
Exceptional leadership, stakeholder engagement, and program management skills, with a track record of driving operational excellence and fostering a culture of collaboration and continuous learning
Ability to communicate complex security concepts to senior leadership and cross-functional teams