This list contains only the countries for which job offers have been published in the selected language (e.g., in the French version, only job offers written in French are displayed, and in the English version, only those in English).
Wells Fargo is seeking a Senior Information Security Analyst.
Job Responsibility:
Provide information security consultation to improve awareness and compliance with Enterprise Information Security policy, processes and standards
Perform remediation of security assessment review issues, complex ad hoc data, and reporting to support information security risk management
Provide guidance and direction in reviewing assessment findings and mitigating controls to optimize information security
Identify and direct information asset portfolio reconciliations and certifications
Provide advanced data aggregation and data of information security risk exposure
Develop and deliver Information Security Education Awareness and Training in accordance with the Enterprise Information Security Program standards
Review draft and proposed control standards for business impact and recommend modifications or clarifications as required
Conduct security control testing and consultation with stakeholders
Evaluate and interpret internal and Enterprise Information Security policies, processes and standards, and provide recommendations to improve them
Collaborate and consult with peers, colleagues, and managers to resolve issues and achieve goals
Interact with internal customers
Serve as a mentor to less experienced staff
Requirements:
4+ years of Information Security Analysis experience, or equivalent demonstrated through one or a combination of the following: work experience, training, military experience, education
4+ years hands-on experience working in Information Security / Cybersecurity domain
Bachelor’s and/or master’s degree in engineering or computer Science or Information Systems
Experience with enterprise control frameworks and risk management processes
Familiarity with cloud security concepts (shared responsibility model, continuous enforcement of secure configuration, Infrastructure and Policy as Code, etc.)
Experience running/leading security risk assessments (cloud-focused) and driving remediation to closure
Control framework fluency: mapping controls to enterprise frameworks and evidencing compliance
Control interpretation & improvement: ability to read policies/standards, identify gaps, recommend clarifications/updates
Shared Responsibility Model (IaaS/PaaS/SaaS) and how it affects controls & accountability