Senior Information Security Analyst - IPD - CCAS

About this role:

Wells Fargo is seeking a Senior Information Security Analyst to serve as a hands-on technical contributor focused on cryptographic controls, automation, and remediation execution.

In this role, you will:

• Provide information security consultation to improve awareness and compliance with Enterprise Information Security policy, processes and standards

• Perform remediation of security assessment review issues, complex ad hoc data, and reporting to support information security risk management

• Provide guidance and direction in reviewing assessment findings and mitigating controls to optimize information security

• Identify and direct information asset portfolio reconciliations and certifications

• Provide advanced data aggregation and data of information security risk exposure

• Develop and deliver Information Security Education Awareness and Training in accordance with the Enterprise Information Security Program standards

• Review draft and proposed control standards for business impact and recommend modifications or clarifications as required

• Conduct security control testing and consultation with stakeholders

• Evaluate and interpret internal and Enterprise Information Security policies, processes and standards, and provide recommendations to improve them

• Collaborate and consult with peers, colleagues, and managers to resolve issues and achieve goals

• Interact with internal customers

• Serve as a mentor to less experienced staff

Required Qualifications:

• 4+ years of Information Security Analysis experience, or equivalent demonstrated through one or a combination of the following: work experience, training, military experience, education

Desired Qualifications:

• Experience in information security, cryptography, cybersecurity engineering, or control execution

• Strong understanding of cryptographic concepts including PKI, digital certificates, encryption, and key management lifecycle controls

• Experience with vulnerability and certificate scanning tools such as Qualys and Venafi

• Experience with endpoint or infrastructure scanning platforms such as Tanium

• Strong hands-on experience with Python, SQL, and API integration for automation and data processing

• Experience using ServiceNow or similar platforms for remediation tracking, workflow orchestration, and ticket management

• Ability to analyze large datasets, identify root causes, and drive remediation of complex security issues

• Strong troubleshooting skills across cryptographic implementations, system configurations, and data sources

• Understanding of security policies, control requirements, and governance expectations related to cryptographic controls

• Experience with enterprise certificate lifecycle management and PKI governance processes

• Experience building automated workflows for vulnerability detection, remediation tracking, and reporting

• Experience integrating security platforms and consolidating data across systems of record

• Experience with data visualization or reporting tools to support risk and control transparency

• Familiarity with SDLC integration and embedding security controls into development workflows

• Experience supporting audit, evidence generation, and control validation activities

• Demonstrated ability to design scalable solutions that improve control consistency and reduce manual effort

Job Expectations:

• Specializes in digital certificates, Public Key Infrastructure (PKI), encryption key management, and data protection controls across data at rest and in transit.

• Analyze large-scale security datasets to identify non-compliant cryptographic implementations, troubleshoot configuration issues, and drive remediation across enterprise platforms such as Qualys, Venafi, Tanium, and ServiceNow. This role will design and implement automation solutions using Python, SQL, and APIs to improve visibility, reduce manual analysis, and enable scalable enforcement of cryptographic standards.

• In addition to technical execution, integrate policy-aligned cryptographic baselines into workflows and SDLC processes, ensuring consistent, measurable control implementation aligned to enterprise policy requirements for certificate management and key lifecycle controls.

• Analyze and interpret security data to identify cryptographic vulnerabilities, non-adherence, and configuration gaps across enterprise platforms

• Drive remediation of non-compliant digital certificates, encryption configurations, and key management practices in alignment with policy and control requirements

• Build automation solutions using Python, SQL, and APIs to streamline data ingestion, analysis, and remediation tracking

• Integrate cryptographic controls into automated workflows and SDLC processes to ensure consistent application of standards

• Leverage enterprise tools including Qualys, Venafi, Tanium, and ServiceNow to manage detection, tracking, and remediation of cryptographic issues

• Design scalable, end-to-end solutions to improve visibility into cryptographic risk and control effectiveness

• Support certificate lifecycle management activities, including discovery, validation, renewal, and removal of non-adherent certificates

• Troubleshoot PKI-related issues, certificate misconfigurations, and key management lifecycle gaps

• Partner with application and infrastructure teams to provide guidance, resolve issues, and accelerate remediation timelines

• Communicate findings, risk impacts, and remediation priorities to stakeholders to enable informed decision-making

Posting End Date:

*Job posting may come down early due to volume of applicants.

We Value Equal Opportunity

Wells Fargo is an equal opportunity employer. All qualified applicants will receive consideration for employment without regard to race, color, religion, sex, sexual orientation, gender identity, national origin, disability, status as a protected veteran, or any other legally protected characteristic.

Employees support our focus on building strong customer relationships balanced with a strong risk mitigating and compliance-driven culture which firmly establishes those disciplines as critical to the success of our customers and company. They are accountable for execution of all applicable risk programs (Credit, Market, Financial Crimes, Operational, Regulatory Compliance), which includes effectively following and adhering to applicable Wells Fargo policies and procedures, appropriately fulfilling risk and compliance obligations, timely and effective escalation and remediation of issues, and making sound risk decisions. There is emphasis on proactive monitoring, governance, risk identification and escalation, as well as making sound risk decisions commensurate with the business unit’s risk appetite and all risk and compliance program requirements.

Candidates applying to job openings posted in Canada: Applications for employment are encouraged from all qualified candidates, including women, persons with disabilities, aboriginal peoples and visible minorities. Accommodation for applicants with disabilities is available upon request in connection with the recruitment process.

Applicants with Disabilities

To request a medical accommodation during the application or interview process, visit Disability Inclusion at Wells Fargo.

Drug and Alcohol Policy

Wells Fargo maintains a drug free workplace. Please see our Drug and Alcohol Policy to learn more.

Wells Fargo Recruitment and Hiring Requirements:

a. Third-Party recordings are prohibited unless authorized by Wells Fargo.

b. Wells Fargo requires you to directly represent your own experiences during the recruiting and hiring process.

c. Please be prepared to provide accurate information and supporting documentation in connection with any lawful employment and education verification conducted by Wells Fargo.