Lead Operational Risk Officer - Technology and Information Security

at  Wells Fargo

APPLICANTS WITH DISABILITIES

To request a medical accommodation during the application or interview process, visit Disability Inclusion at Wells Fargo .

WELLS FARGO RECRUITMENT AND HIRING REQUIREMENTS:

a. Third-Party recordings are prohibited unless authorized by Wells Fargo.
b. Wells Fargo requires you to directly represent your own experiences during the recruiting and hiring process

Required Qualifications:

• 5+ years of Operational Risk experience, or equivalent demonstrated through one or a combination of the following: work experience, training, military experience, educatio

Desired Qualifications:

• 10+ years in Technology and Cyber Security risk management or auditing experiences, or equivalent demonstrated through one or a combination of the following: work experience, training, military experience, education.
• Excellence in written and verbal communication to deliver risk information to key stakeholders.
• Demonstrate strong negotiation skill and partnership with internal and external Stakeholders.
• Knowledge on [Business Groups and Enterprise Functions (e.g., Wealth & Investment Management)] and ability to assess technical skills to evaluate risks for the [BGs and EFs]
• Information Security experience.
• Operational Risk experience.
• Regulatory requirements knowledge (FFIEC

Wells Fargo is seeking a Lead Operational Risk Officer. Technology and Information Security Risk Management (TISRM) group is part of Operational Risk Management in Corporate Risk. Learn more about the career areas and lines of business at wellsfargojobs.com .
TISRM is a 2nd line of Defense function responsible to oversee 1st line of Defense for Technology, Information Security, and Strategy, Digital & Innovation. This role is specifically for Information Security Risk Management Oversight and potential coverage areas include Information Protection, Data Loss Prevention, Compromised Data and areas included in Cybersecurity Governance.

In this role, you will:

• Develop, implement, and monitor risk-based programs to identify, assess, and mitigate any operational risk that arises from inadequate or failed internal processes, people, systems, or external events
• Maintain a balance between risk mitigation and operational efficiency
• Evaluate the adequacy and effectiveness of policies, procedures, processes, systems, and internal controls
• Analyze extremely complex business and system changes to determine impact, identify operational risk issues and participate in the development of risk ratings
• Provide operational risk expertise and consulting to complex business units for initiatives with high risk, generally spanning multiple business lines
• Design and develop the most complex testing strategies, methodologies and analyses
• Consult with the business to develop corrective action plans and effectively manage change
• Identify training opportunities
• Design and coordinate the development of training materials and coordinate or deliver training
• Report findings and develop business cases to influence executive management, management committee member or head of business on the need for controls to mitigate risk
• Collaborate and consult with peers, colleagues, and managers to resolve issues and achieve goals
• Lead project or virtual teams and mentor less experienced staff

Required Qualifications:

• 5+ years of Operational Risk experience, or equivalent demonstrated through one or a combination of the following: work experience, training, military experience, education

Desired Qualifications:

• 10+ years in Technology and Cyber Security risk management or auditing experiences, or equivalent demonstrated through one or a combination of the following: work experience, training, military experience, education.
• Excellence in written and verbal communication to deliver risk information to key stakeholders.
• Demonstrate strong negotiation skill and partnership with internal and external Stakeholders.
• Knowledge on [Business Groups and Enterprise Functions (e.g., Wealth & Investment Management)] and ability to assess technical skills to evaluate risks for the [BGs and EFs]
• Information Security experience.
• Operational Risk experience.
• Regulatory requirements knowledge (FFIEC)

One or more of the following preferred Certifications:

• Information Security or Risk Management (e.g., CISA, CISSP, or CRISC)
• Certified Fraud Examiner (CFE)
• Project Management Professional (PMP)
• FINRA (Series 7, 14, 23, 24)

Job Expectations:

• This position offers a hybrid work schedule.
• No relocation assistance is provided for this job.
• Ability to work at one of the approved locations in the job posting.

Posting Locations:

• Charlotte, NC
• West Des Moines, IA
• Minneapolis, MN
• Irving, TX
• St. Louis, MO
• Tempe, AZ