Deputy Business Information Security Officer - Senior Lead Information Security Analyst

Company: Wells Fargo
Location: Des Moines
Posted on: June 25, 2022

Job Description:

About this role:Reporting directly to the Business Information Security Officer (BISO), this position works to create a security aware culture and is aligned with one or more major business groups. Responsible for ensuring focus on the core disciplines of Information Security within the aligned major business groups, this Senior deputy's key responsibilities include:

• Assisting the bidirectional strategy development and implementation
• Partnering to engage and enable Cyber SME's within the line of business initiatives to accelerate security outcomes
• Assisting with partnering with senior Risk and Technology leaders and their teams on information security related matters
• Helping to provide strategic consultation to business, technology and risk leadership regarding long and short range information security risk/requirements and recommends security innovations that anticipate the future direction of the aligned business and technology
• Assist with monitoring, reporting and tracking of Information Security programs within the lines of business; provides business perspectives and feedback to Information Security senior leadership and evaluates the appropriateness of policy exceptions and risk acceptances requested by technology and/or line of business partners while responding to business specific information requests
• Helping to drive a collaborative environment that ensures timely communication and strong cooperation between Information Security and the lines of business
• Provide input to the development, maintenance and implementation of the overall WF Risk Management Framework as well as Risk Functional frameworks, policies and standards owned by risk-aligned areas to ensure they are well calibrated and integrated within the line of business.
• Grow the development of information security risk culture within the business
• Partnering to escalate concerns and issues to the BISO for further remediation and elevation to senior leadership and the Board as appropriate. The BISO works with the Group Heads, Operating Committee members, Control Executives, and Line of Business Leaders to ensure that they understand the information security risks for their businesses.The BISO provides strategic-level consultation to the business, technology and risk executives regarding long and short range information security risk/requirements and recommends security innovations that anticipate future directions of both the major business groups and information technology. The BISO deputy plays a key role in the support and leadership provided to the BISO in the tiered approval process for information security risk assessments.This person must have:
  • Strategic consultation skills to serve as the cyber partner to the major Wells Fargo business groups creating bidirectional security awareness and outcomes
  • Expertise and insight into the appropriateness of policy exceptions and risk acceptances requested by technology/line of business partners and the ability to respond within the industry requirements
  • Ability to build a collaborative environment that ensures timely communication, escalations, and cooperation between Information Security and the lines of businessCritical Leadership Capabilities Strategic Thinking
    • Explains specifically how changes in threat actors, competitors, clients, and market segments affect own business or institution.
    • Translates broad corporate strategies into clear, specific objectives and plans for units and individuals.
    • Creates plans that address specific segments or contrasts local market with other locations or segments.
    • Thinks 2-3 years ahead. Driving Results
      • Works to achieve goals while overcoming obstacles and/or planning for contingencies.
      • Drives urgency about reaching targets and closing security risks
      • Comfortable escalating concerns and issues to management and able to defend their concern. Collaborating and Influencing
        • The candidate will need the ability to communicate complex technical, information protection and cyber defense issues and value/impact in simple terms to very senior business and technology leaders.
        • Will bring a passion to change the culture within the technology organization alongside an ability to enter a culture where influence and collaboration is critical to driving change constructively.
        • Negotiates with a genuine give-and-take approach, where both act as true peers and decisions are shared.
        • Spends time identifying key stakeholders and meets or connects with each of them, neglecting no one to shape a collective consensus.
        • Identifies opportunities to build relationships that will help others achieve their objectives and reaches out to those people or new people.
        • Partner closely with Govt agencies, intelligence community and Law enforcementRequired Qualifications
          • 7+ years of Information Security Analysis experience, or equivalent demonstrated through one or a combination of the following: work experience, training, military experience, education
          • 5+ years in a technology environment
          • 5+ years of experience in cybersecurity across multiple areas of financial institution
          • 5+ years of experience with strategic planning in technologyDesired Qualifications
            • 5+ years of experience with Agile practices
            • 5+ years of experience with modern technologies and tool sets
            • A high level of comfort working with ambiguity or uncertainty and converting information into quantifiable concepts
            • Strong executive presence, the ability to interact and communicate with C-level executives and regulators
            • Strong organizational and project management skills with an ability to manage numerous, competing demands from internal and external stakeholders
            • Strong leadership and influencing skills within a complex, matrixed environment; able to gain support and cooperation and build effective business partnerships with all levels of team members to achieve results without direct organizational control
            • Demonstrated experience in managing strategic planning processes, initiatives and teams thinking about business, product, and technical challenges
            • Strong ability to effectively communicate and broker agreements amongst diverse, differing, competing, and/or conflicting perspectives/priorities
            • Understanding of how traditional Fortune 100 companies must modify/adapt to take on large-scale transformation efforts
            • Finance sector security experience or other regulated industry (e.g. utilities, health care, government)Pay Range$120,400.00 - $250,000.00 AnnualBenefits
              • Information about Wells Fargo's employee benefits We Value Diversity At Wells Fargo, we believe in diversity, equity and inclusion in the workplace; accordingly, we welcome applications for employment from all qualified candidates, regardless of race, color, gender, national origin, religion, age, sexual orientation, gender identity, gender expression, genetic information, individuals with disabilities, pregnancy, marital status, status as a protected veteran or any other status protected by applicable law. Employees support our focus on building strong customer relationships balanced with a strong risk mitigating and compliance-driven culture which firmly establishes those disciplines as critical to the success of our customers and company. They are accountable for execution of all applicable risk programs (Credit, Market, Financial Crimes, Operational, Regulatory Compliance), which includes effectively following and adhering to applicable Wells Fargo policies and procedures, appropriately fulfilling risk and compliance obligations, timely and effective escalation and remediation of issues, and making sound risk decisions. There is emphasis on proactive monitoring, governance, risk identification and escalation, as well as making sound risk decisions commensurate with the business unit's risk appetite and all risk and compliance program requirements. Candidates applying to job openings posted in US: All qualified applicants will receive consideration for employment without regard to race, color, religion, sex, sexual orientation, gender identity, national origin, disability, or status as a protected veteran.

Keywords: Wells Fargo, Des Moines , Deputy Business Information Security Officer - Senior Lead Information Security Analyst, Accounting, Auditing , Des Moines, Iowa