Senior Information Security Analyst - Information Protection

at  Wells Fargo

Wells Fargo is back in the office three days a week, collaborating together for fabulous outcomes!
This role has no Visa sponsorship or transfers.
The req is seated in the location posted on the req and is in the office three days a week.
This analyst role supports security and focuses on security controls and assessing how business functions engage and interact with technology. You’ll tailor initiatives to react to technological trends while exceeding IT security measures.
We need someone with good communication skills that is happy to partner, guide and consult varies levels of the business. You’ll enjoy crunching numbers, looking at large data sets and working with application owners. Each day will feel fulfilling, knowing you are offering your skill set to security and governance.
You’ll work with a collaborative team that gets along, shares information and helps each other out. Work for an organization that values diversity and career path for all employees.
We need a Senior Information Security Analyst who will focus on executing security controls while engaging with Application Owners, delegates and other stakeholders to validate that Wells Fargo information is protected per control requirements.

In this role, you will:

• Perform validation on applications to ensure that information is protected per Wells Fargo Control requirements.
• Provide information security consultation to improve awareness and compliance with Enterprise Information Security policy, processes and standards
• Perform remediation of security assessment review issues, complex ad hoc data, and reporting to support information security risk management
• Provide guidance and direction in reviewing assessment findings and mitigating controls to optimize information security
• Identify and direct information asset portfolio reconciliations and certifications
• Provide advanced data aggregation and data of information security risk exposure
• Develop and deliver Information Security Education Awareness and Training in accordance with the Enterprise Information Security Program standards
• Review draft and proposed control standards for business impact and recommend modifications or clarifications as required
• Conduct security control testing and consultation with stakeholders
• Evaluate and interpret internal and Enterprise Information Security policies, processes and standards, and provide recommendations to improve them
• Collaborate and consult with peers, colleagues, and managers to resolve issues and achieve goals
• Interact with internal customers
• Serve as a mentor to less experienced staff

Required Qualifications:

• 4+ years of Information Security Analysis experience, or equivalent demonstrated through one or a combination of the following: work experience, training, military experience, education

Desired Qualifications:

• CISSP, CRISC or industry equivalent certification
• Experience with execution of controls
• Experience with governance, risk and compliance
• Experience with large data sets from multiple sources
• Experience with advanced Excel skills (Pivot Tables and V Lookups) and Microsoft Office suite of products
• Experience with Jira

APPLICANTS WITH DISABILITIES

To request a medical accommodation during the application or interview process, visit Disability Inclusion at Wells Fargo .

WELLS FARGO RECRUITMENT AND HIRING REQUIREMENTS:

a. Third-Party recordings are prohibited unless authorized by Wells Fargo.
b. Wells Fargo requires you to directly represent your own experiences during the recruiting and hiring process

• Perform validation on applications to ensure that information is protected per Wells Fargo Control requirements.
• Provide information security consultation to improve awareness and compliance with Enterprise Information Security policy, processes and standards
• Perform remediation of security assessment review issues, complex ad hoc data, and reporting to support information security risk management
• Provide guidance and direction in reviewing assessment findings and mitigating controls to optimize information security
• Identify and direct information asset portfolio reconciliations and certifications
• Provide advanced data aggregation and data of information security risk exposure
• Develop and deliver Information Security Education Awareness and Training in accordance with the Enterprise Information Security Program standards
• Review draft and proposed control standards for business impact and recommend modifications or clarifications as required
• Conduct security control testing and consultation with stakeholders
• Evaluate and interpret internal and Enterprise Information Security policies, processes and standards, and provide recommendations to improve them
• Collaborate and consult with peers, colleagues, and managers to resolve issues and achieve goals
• Interact with internal customers
• Serve as a mentor to less experienced staf