Senior Information Security Analyst - Third Party Cybersecurity

Senior Information Security Analyst - Third Party Cybersecurity

About the Role

Wells Fargo is seeking a Senior Analyst (Individual Contributor) in the area of Cyber Security for the Third Party Cyber Security Evaluations team. The role activities include assessing, testing, monitoring, and reporting on the adequacy, efficiency, and effectiveness of information security related controls for third party.  

In this role, you will:

• Provide information security consultation to improve awareness and compliance with Enterprise Information Security policy, processes and standards
• Perform remediation of security assessment review issues, complex ad hoc data, and reporting to support information security risk management
• Provide guidance and direction in reviewing assessment findings and mitigating controls to optimize information security
• Identify and direct information asset portfolio reconciliations and certifications
• Provide advanced data aggregation and data of information security risk exposure
• Develop and deliver Information Security Education Awareness and Training in accordance with the Enterprise Information Security Program standards
• Review draft and proposed control standards for business impact and recommend modifications or clarifications as required
• Conduct security control testing and consultation with stakeholders
• Evaluate and interpret internal and Enterprise Information Security policies, processes and standards, and provide recommendations to improve them
• Collaborate and consult with peers, colleagues, and managers to resolve issues and achieve goals
• Interact with internal customers
• Serve as a mentor to less experienced staff

Required Qualifications:

• 4+ years of Information Security Analysis experience, or equivalent demonstrated through one or a combination of the following: work experience, training, military experience, education

• 8+ years of experience working in Information Security Governance Risk and Compliance
• 3+ years of experience working in Third Party Information Security Assessment or Cyber Security Assessments
• Bachelor’s and/or Master’s degree in Computer Science or Information Systems
• Knowledge of security frameworks and regulations such as ISO 27001/27002, PCI DSS, COBIT, NIST, GLBA, GDPR
• Superior attention to detail with excellent written and verbal communication skills.
• Expertise in writing technical reports.
• Demonstrated critical thinking and analytical skills.
• Strong understanding of information security domains and possesses a well-rounded technical background. Knowledge of operational risk, IT processes and systems
• Comfortable with making and presenting recommendations to a wide audience of stakeholders

Job Expectations:

• Work and collaborate with third party service providers to assess information security risk in IT infrastructures, applications, and information security programs of varying sizes and complexities.
• Execute remote security assessments via questionnaires, as needed, and complete associated reports, and security plans.
• Review/analyze third party attestation and certification artifacts (SOC2, SIG, PCI DSS, Etc.) shared by third parties to identify the information security risks
• Document assessment results and write assessment report(s) for key stakeholders in conjunction with the Wells Fargo Information Security Risk Assessment Program.
• Provide subject matter expertise in the Third Party information security program and provide timely solutions to identified problems
• Work independently as the Third Party Assessment lead. Collaborate with the senior leader - Third Party Assessment management; US and internal stakeholders
• Analyze the data related to information security findings and present meaningful views to relevant stakeholders on the trends and patterns of control gaps.
• Demonstrated experience in stakeholder management
• Demonstrated experience of conflict resolution, negotiation and problem identification and solving skills.
• Demonstrated experience in managing complex projects related to information security
• Knowledge of operational risk, IT processes and systems
• Advanced MS SharePoint and Microsoft office skills

Posting End Date: 

10 Aug 2024

*Job posting may come down early due to volume of applicants.

Applicants with Disabilities

To request a medical accommodation during the application or interview process, visit Disability Inclusion at Wells Fargo.

Drug and Alcohol Policy

 

Wells Fargo maintains a drug free workplace.  Please see our Drug and Alcohol Policy to learn more.

Wells Fargo Recruitment and Hiring Requirements:

a. Third-Party recordings are prohibited unless authorized by Wells Fargo.

b. Wells Fargo requires you to directly represent your own experiences during the recruiting and hiring process.