Senior Information Security Analyst
Wells Fargo
About this role:
Wells Fargo is seeking a Senior Information Security Analyst
In this role, you will:
- Provide information security consultation to improve awareness and compliance with Enterprise Information Security policy, processes and standards
- Perform remediation of security assessment review issues, complex ad hoc data, and reporting to support information security risk management
- Provide guidance and direction in reviewing assessment findings and mitigating controls to optimize information security
- Identify and direct information asset portfolio reconciliations and certifications
- Provide advanced data aggregation and data of information security risk exposure
- Develop and deliver Information Security Education Awareness and Training in accordance with the Enterprise Information Security Program standards
- Review draft and proposed control standards for business impact and recommend modifications or clarifications as required
- Conduct security control testing and consultation with stakeholders
- Evaluate and interpret internal and Enterprise Information Security policies, processes and standards, and provide recommendations to improve them
- Collaborate and consult with peers, colleagues, and managers to resolve issues and achieve goals
- Interact with internal customers
- Serve as a mentor to less experienced staff
Required Qualifications:
- 4+ years of Information Security Analysis experience, or equivalent demonstrated through one or a combination of the following: work experience, training, military experience, education
Desired Qualifications:
- Bachelor of Engineering Degree, preferably of Computer science or Information Technology
- 8 + years of experience in IT Compliance, Risk & Controls with a minimum of 5 years of experience in IAM, information security, Access Administration on platforms like Active directory, Unix and Mainframe systems & Certifications
- Experience with Service Delivery and SLAs/KPIs monitoring
- Must have strong analytical and problem-solving abilities; understanding of data analysis techniques, standards and error handling concepts, trend analysis and reporting.
- Must have good interpersonal and strong communication skills; clear verbal and written communication skills to facilitate solutions and resolve problems Ability to identify and address issues, self-driven for achieving problem resolution
- Ability to collaborate effectively with different teams, contribute to high impact decisions, accept challenging assignments and foster robust working relationships with teams.
- Provides support for testing, emergencies and audit compliance projects. Drives end to end implementation of any application/solution, highlight/identify risks and provide mitigation approach for the module.
- Ability to multi-task and provide excellent customer service
- Develops and maintains familiarity with bank security policies and government regulations pertaining to information security. Ability to identify & contribute towards mitigating risks.
- Must be self-motivated, directed, accountable and detail-oriented
- Must be flexible to work in shifts & be available for business meetings/team deliverables within/outside of ones shift
- Exposure to ticketing tools like BMC Remedy/ Zendesk etc.
- Must have advanced knowledge of Word, Excel and PowerPoint
- Ability to manage the bridge calls with Partners and Apps Owners on technical issues.
- Any one Information Security certification (Security +, CISSP, CIAM) or IAM vendor based certifications (Cyberark, Oracle, IBM)
- Knowledge on escalation processes/matrix and ability to prioritize tasks
- Basic troubleshooting skills over UNIX / Database / Mainframe / Active Directory.
- Ability to collaborate effectively with different teams, accept challenging assignments and foster robust working relationships with teams.
- Mentoring skills to help the team explore ideas and make them successful.
Job Expectations:
- Provide information security consultation to improve awareness and compliance with Enterprise Information Security policy, processes and standards
- Act as an SME or POC of the Access Certification Team. The position should be able to perform certification delinquency management, problem ticket handling, on-boarding and access level tiering processes.
- The person would be responsible for performing manual certifications and sub-process using our Enhanced Manual Certification Tool.
- The person would receive data files on a scheduled basis, load the files into our cert tool, perform validation and then use an auto-mailer to send out notifications to certify, provide support to certifiers, as well as using other tracking databases for overseeing completions, tracking delinquencies and uncertifiables, etc.
- Serve as a mentor to less experienced staff
Posting End Date:
6 Nov 2024*Job posting may come down early due to volume of applicants.
We Value Diversity
At Wells Fargo, we believe in diversity, equity and inclusion in the workplace; accordingly, we welcome applications for employment from all qualified candidates, regardless of race, color, gender, national origin, religion, age, sexual orientation, gender identity, gender expression, genetic information, individuals with disabilities, pregnancy, marital status, status as a protected veteran or any other status protected by applicable law.
Employees support our focus on building strong customer relationships balanced with a strong risk mitigating and compliance-driven culture which firmly establishes those disciplines as critical to the success of our customers and company. They are accountable for execution of all applicable risk programs (Credit, Market, Financial Crimes, Operational, Regulatory Compliance), which includes effectively following and adhering to applicable Wells Fargo policies and procedures, appropriately fulfilling risk and compliance obligations, timely and effective escalation and remediation of issues, and making sound risk decisions. There is emphasis on proactive monitoring, governance, risk identification and escalation, as well as making sound risk decisions commensurate with the business unit’s risk appetite and all risk and compliance program requirements.
Candidates applying to job openings posted in US: All qualified applicants will receive consideration for employment without regard to race, color, religion, sex, sexual orientation, gender identity, national origin, disability, status as a protected veteran, or any other legally protected characteristic.
Candidates applying to job openings posted in Canada: Applications for employment are encouraged from all qualified candidates, including women, persons with disabilities, aboriginal peoples and visible minorities. Accommodation for applicants with disabilities is available upon request in connection with the recruitment process.
Applicants with Disabilities
To request a medical accommodation during the application or interview process, visit Disability Inclusion at Wells Fargo.
Drug and Alcohol Policy
Wells Fargo maintains a drug free workplace. Please see our Drug and Alcohol Policy to learn more.
Wells Fargo Recruitment and Hiring Requirements:
a. Third-Party recordings are prohibited unless authorized by Wells Fargo.
b. Wells Fargo requires you to directly represent your own experiences during the recruiting and hiring process.