About this role:

Wells Fargo is seeking a Lead Information Security Analyst to

support the Cybersecurity Contract Management process, which involves active participation in contract negotiations with third-party vendors providing services and products to Wells Fargo. As part of these negotiations, the analyst is responsible for assessing and mitigating technology risks associated with proposed changes to Information Security requirements in Master Services Agreements (MSAs). This ensures the protection of Wells Fargo’s information systems, effective cyber risk management, and compliance with internal policies and external regulatory frameworks.

The position works closely with Technology and Cybersecurity Domain Owners to define and integrate Information Security and Technology requirements into MSAs for all third-party service and product providers. Additionally, the analyst serves as a cybersecurity advisor to Lines of Business and Sourcing teams during the negotiation of cybersecurity-related contractual terms and Information Risk Questionnaire (IRQ) consultations.

In this role, you will:

• Act as cybersecurity partner to Line of Business and Sourcing when negotiating cybersecurity contractual term with Third Parties, to promote security best practices.
• Partner with Technology and Cybersecurity Domain Owners to access potential risk, impact, and resolution of alternation request to technology sections submitted by Third Parties during contract negotiations.
• Identify opportunities for Cybersecurity Contract Management process improvement and risk control development by overseeing strategy and execution of all activities.
• Annually collaborate with Technology and Cybersecurity Domain Owners, Sourcing and Legal to review and establish cybersecurity requirements for Third Parties, that align with Wells Fargo requirements, regulatory guidance, and industry standards.
• Support development of presentations to senior leadership and executives, to facilitate conversation on strategic business priorities, decision, and approach.
• Support ad-hoc specialty projects, including assessment, planning and execution.

Required Qualifications:

• 5+ years of Information Security Analysis experience, or equivalent demonstrated through one or a combination of the following: work experience, training, military experience, education

Desired Qualifications:

• Third-Party experience in either contract management or vendor management
• Ability to influence stakeholders across the enterprise.
• Ability to translate and explain information security concepts and risk in a simple manner in both written and verbal methods
• Information Security Certifications such as CISSP, CISM, CRISC.

Job Expectations:

• Ability to work on-site in a hybrid model in one of the locations listed on the job posting.

Pay Range

Reflected is the base pay range offered for this position. Pay may vary depending on factors including but not limited to achievements, skills, experience, or work location. The range listed is just one component of the compensation package offered to candidates.

Posting End Date:

*Job posting may come down early due to volume of applicants.

We Value Equal Opportunity

Wells Fargo is an equal opportunity employer. All qualified applicants will receive consideration for employment without regard to race, color, religion, sex, sexual orientation, gender identity, national origin, disability, status as a protected veteran, or any other legally protected characteristic.

Employees support our focus on building strong customer relationships balanced with a strong risk mitigating and compliance-driven culture which firmly establishes those disciplines as critical to the success of our customers and company. They are accountable for execution of all applicable risk programs (Credit, Market, Financial Crimes, Operational, Regulatory Compliance), which includes effectively following and adhering to applicable Wells Fargo policies and procedures, appropriately fulfilling risk and compliance obligations, timely and effective escalation and remediation of issues, and making sound risk decisions. There is emphasis on proactive monitoring, governance, risk identification and escalation, as well as making sound risk decisions commensurate with the business unit’s risk appetite and all risk and compliance program requirements.

Applicants with Disabilities

To request a medical accommodation during the application or interview process, visit Disability Inclusion at Wells Fargo.

Drug and Alcohol Policy

Wells Fargo maintains a drug free workplace. Please see our Drug and Alcohol Policy to learn more.

Wells Fargo Recruitment and Hiring Requirements:

a. Third-Party recordings are prohibited unless authorized by Wells Fargo.

b. Wells Fargo requires you to directly represent your own experiences during the recruiting and hiring process.