Senior Lead Control Management Officer - Platform Assurance

Why Wells Fargo

Are you looking for more? Find it here. At Wells Fargo, we're more than a financial services leader – we’re a global trailblazer committed to driving innovation, empowering communities, and helping our customers succeed. We believe that a meaningful career is much more than just a job – it’s about finding all of the elements to help you thrive, in one place.

Living the Well Life means you’re supported in life, not just work. It means having robust benefits, competitive compensation, and programs designed to help you find work-life balance and well-being. You’ll be rewarded for investing in your community, celebrated for being your authentic self, and empowered to grow. Join us!

About this role:

Wells Fargo is seeking a Senior Lead Technology Control Officer to play a critical role to drive end‑to‑end assessment and oversight of the company’s most critical technology platforms, infrastructure, and services. This leader ensures that our technology environment meets strict regulatory standards, aligns with industry best practices, and effectively mitigates operational, cyber, and compliance risks. In this role, you will shape and execute a defensible, risk‑based platform assurance strategy that spans cloud, private cloud, IAM, DevOps, data platforms, and shared technology services.

In this role you will:

• Develop and lead the assessment strategy for strategic and emerging technology (Public Cloud, Private cloud, IAM, CICD, Data Management, PAM) aligned with financial industry standards to ensure risk-based methodology is designed that is defensible and scalable
• Lead and perform the end-to-end platform assurance assessments across the core ITGC domains and functionality of the platform
• Identify the Consumer/Producer requirements, ensure those are embedded into the enabling technologies and are ratified in SOR with measurement and telemetry
• Act as an advisor to more experienced leaders in developing risk mitigation strategies for complex and highly integrated business specific risk across different business lines
• Drive issue management, thematic analysis, remediation and act an advisor to more experienced leaders in developing risk mitigation strategies, remediation efforts, and validation for complex issues
• Provide vision, direction, and expertise to more experienced leaders on implementing innovative and significant business solutions for highly complex risks associated with business operations
• Mentor and train Control Management teams, stakeholders and tech partners on assessment strategy, methodology and remediation
• Engage with all levels of roles across the business group, and serve as an experienced advisor in designing and implementing risk mitigation strategies, business processes, and controls that mitigate risks and address regulatory requirements

Specific responsibilities include:

Assessment Strategy & Execution

• Develop and lead the assessment strategy for strategic and emerging technology (Public Cloud, Private cloud, IAM, CICD, Data Management, PAM) aligned with financial industry standards to ensure risk-based methodology is designed that is defensible and scalable.
• Perform and oversee complex end‑to‑end platform assurance assessments across core ITGC, platform functionality, and integrated control environments.
• Identify, assess, and remediate technology risks related to platform, products and services, including operational resilience and third-party risk.
• Identify Consumer/Producer requirements and ensure their integration into enabling technologies and system‑of‑record (SOR) governance with measurable telemetry.

Risk Advisory & Issue Management

• Serve as a senior advisor to technology and business leaders on risk identification, mitigation strategies, and control design.
• Drive thematic analysis across assessment outputs (platform assurance, threat modeling, Red Team, audit results, etc.).
• Oversee issue management, remediation strategies, and validation activities for complex platform risks.

Control Framework & Governance

• Own and evolve the platform control framework (Cloud, Private Cloud, IAM, CI/CD, Data Management, PAM) aligned to financial‑sector expectations.
• Conduct ongoing platform assessments and control testing; ensure alignment with enterprise risk appetite.
• Partner with internal audit, compliance, and regulatory teams to address findings and implement remediation plans.
• Maintain governance artifacts for regulatory exams, audits, and senior‑level risk committees.

Security, Architecture & Engineering Partnership

• Collaborate with engineering, cyber, and architecture teams to embed controls across platform designs and deployments.
• Review and approve end‑to‑end platform configurations, IAM policies, encryption standards, and data residency requirements.
• Monitor vulnerabilities and ensure timely remediation aligned with financial‑sector security expectations.

Stakeholder Engagement & Leadership

• Act as a trusted advisor across engineering, cyber, product, risk, and business units.
• Support technology transformation and migration initiatives with integrated risk guidance.
• Mentor and train Control Management, tech partners, and stakeholders on assessment strategies, methodologies, and remediation expectations.

Continuous Improvement & Innovation

• Stay current on emerging risks, technology trends, and regulatory changes impacting financial institutions.
• Recommend control enhancements, automation opportunities, and operational resilience improvements.
• Drive initiatives that strengthen technology risk governance and reduce enterprise risk exposure.

Required Qualifications:

• 7+ years of Risk Management or Financial Services Industry experience, or equivalent experience demonstrated through one or a combination of the following: work experience, training, military experience, education.
• 3+ years focused on architecture, product technology assessment with a strong understanding of ITGC domains, controls and emerging platforms (Azure, GCP, databases, OpenShift Container Platform) and financial regulatory requirements.

Desired Qualifications:

• Cloud Certified Solutions Architect, Cloud Certified Security Engineer, CISSP, CISA, CRISC.
• Expertise in cloud security, IAM, SDLC, container, database, encryption and compliance frameworks.
• Strong analytical, problem solving and stakeholder management skills.
• Familiarity with automation tools and cloud monitoring solutions.

Job Expectations:

• Position offers a hybrid work schedule at one of the posted locations
• Relocation assistance is not available for this position
• Visa sponsorship is not available for this position
• May require limited travel depending on business needs

Posting Locations:

• 1525 West W.T. Harris Blvd. - Charlotte, NC 28262
• 2700 S Price Rd. - Chandler, AZ 85286
• 600 S 4th St. - Minneapolis, MN 55415
• 401 Las Colinas Blvd W. - Irving, TX 75039
• 4101 Wiseman Blvd. - San Antonio, TX 78251
• 194 Wood Ave S. - Iselin, NJ 08830

Pay Range

Reflected is the base pay range offered for this position. Pay may vary depending on factors including but not limited to demonstrated examples of prior performance, skills, experience, or work location. Employees may also be eligible for incentive opportunities.

Benefits

Wells Fargo provides eligible employees with a comprehensive set of benefits, many of which are listed below. Visit Benefits - Wells Fargo Jobs for an overview of the following benefit plans and programs offered to employees.

• Health benefits
• 401(k) Plan
• Paid time off
• Disability benefits
• Life insurance, critical illness insurance, and accident insurance
• Parental leave
• Critical caregiving leave
• Discounts and savings
• Commuter benefits
• Tuition reimbursement
• Scholarships for dependent children
• Adoption reimbursement

Posting End Date:

* Job posting may come down early due to volume of applicants.

We Value Equal Opportunity

Wells Fargo is an equal opportunity employer. All qualified applicants will receive consideration for employment without regard to race, color, religion, sex, sexual orientation, gender identity, national origin, disability, status as a protected veteran, or any other legally protected characteristic.

Employees support our focus on building strong customer relationships balanced with a strong risk mitigating and compliance-driven culture which firmly establishes those disciplines as critical to the success of our customers and company. They are accountable for execution of all applicable risk programs (Credit, Market, Financial Crimes, Operational, Regulatory Compliance), which includes effectively following and adhering to applicable Wells Fargo policies and procedures, appropriately fulfilling risk and compliance obligations, timely and effective escalation and remediation of issues, and making sound risk decisions. There is emphasis on proactive monitoring, governance, risk identification and escalation, as well as making sound risk decisions commensurate with the business unit’s risk appetite and all risk and compliance program requirements.

Applicants with Disabilities

To request a medical accommodation during the application or interview process, visit Disability Inclusion at Wells Fargo.

Drug and Alcohol Policy

Wells Fargo maintains a drug free workplace. Please see our Drug and Alcohol Policy to learn more.

Wells Fargo Recruitment and Hiring Requirements:

a. Third-Party recordings are prohibited unless authorized by Wells Fargo.

b. Wells Fargo requires you to directly represent your own experiences during the recruiting and hiring process.