Senior Lead Officer, Cybersecurity Risk and Control Management

Wells Fargo

full-time

Posted on: 9/20/2025

Origin: • 🇺🇸 United States

✨ AI Apply

💰 $159,000 - $305,000 per year

Senior

CloudCyber Security

About the role

Serve as a strategic cybersecurity risk advisor to senior leadership, driving the integration of security controls into business and technology initiatives focusing on the risk management lifecycle of plan, identify, control, monitor, and validate
Lead the development and execution of control strategies for complex, enterprise-wide cybersecurity risks, including threat detection, cloud governance, and data protection
Define risk assessable units (RAUs) that enable the transparency of risk at the business process level
Oversee the lifecycle of cybersecurity controls, including RCSA execution, issue management, and control testing, ensuring alignment with regulatory expectations and industry frameworks
Collaborate with Cybersecurity Technology teams to assess control effectiveness and drive remediation of technical vulnerabilities
Provide governance and oversight for cybersecurity risk reporting, metrics, and dashboards presented to executive and board-level stakeholders
Mentor and lead cross-functional teams in the design and implementation of innovative control solutions that address emerging threats and regulatory changes
Act as a liaison between Cybersecurity and Lines of Business, translating technical risks into business impacts and ensuring alignment with enterprise risk appetite
Support regulatory compliance and provide technical oversight across critical security functions

7+ years of experience in Cybersecurity Risk Management, IT Audit, or Control Management within a large financial institution or Big 4 consulting firm
4+ years of experience with proven leadership in managing cybersecurity risk portfolios and control environments across complex, regulated organizations
Deep technical expertise in Security Operations, Cloud Security, Data Protection, Vulnerability Management, and SIEM technologies (desired)
Strong working knowledge of cybersecurity frameworks and regulatory guidance, including NIST CSF, NIST 800-53, CIS Controls, FFIEC, COBIT, FedRAMP, and ISO 27001
Professional certifications such as CISSP, CISA, CISM, CCSP, CCAK, or CEH (desired)
Experience in process design, control automation, and data analytics for risk reporting
Exceptional communication skills with the ability to influence and engage stakeholders at all levels
Prior experience in a BISO or Control Management leadership role is highly desirable
Ability to travel up to 10%
Hybrid work schedule: Minimum 3 days in-office, 2 days remote