Technology Control Senior Control Management Officer

About this role:

Wells Fargo is seeking a Senior Lead Control Management Officer to lead the Technology Controls engagement with the Cloud Platform organization. This role will provide strategic control oversight and risk leadership for enterprise infrastructure services cloud platform adoption platform engineering and control modernization initiatives focused on Control-as-Code automated governance and continuous control monitoring.

The individual will partner closely with Infrastructure Engineering leaders Cloud Platform Engineering Information Security Technology Risk Cloud GRC Audit and Control Management teams to establish and maintain a strong control environment that enables secure technology transformation while ensuring regulatory compliance and operational resilience.

This role will be responsible for risk identification and assessment control design and evaluation issue management governance reporting regulatory engagement and the advancement of automation strategies that embed controls directly into technology delivery pipelines.

In This Role You Will

• Act as a trusted advisor to senior technology and control management leaders in developing risk mitigation strategies for complex infrastructure and cloud-related risks.
• Lead the design implementation and continuous improvement of control frameworks supporting:
  • Infrastructure Engineering
  • Cloud Platforms (Azure AWS GCP OpenShift Kubernetes)
  • Storage Compute Network Database and Middleware Services
  • Platform Engineering initiatives
  • Control-as-Code implementations
• Provide strategic oversight of enterprise technology risk operational risk resiliency risk and regulatory compliance requirements.
• Monitor measure evaluate and report on the effectiveness of controls and risk mitigation strategies.
• Lead assessment and remediation activities associated with audits regulatory examinations horizontal reviews and independent testing.
• Drive proactive identification of emerging technology risks associated with cloud adoption automation AI-enabled infrastructure operations and platform modernization.
• Serve as a key control partner within infrastructure transformation programs and cloud migration initiatives.
• Lead complex risk and control governance activities including preparation of executive-level reporting risk committee materials and regulatory updates.
• Mentor and guide control officers and virtual teams supporting technology control execution.

Specific Responsibilities

Infrastructure & Cloud Risk Management

• Develop and maintain risk and control frameworks supporting enterprise infrastructure services.
• Assess risks related to cloud adoption hybrid cloud architectures platform engineering and infrastructure modernization.
• Evaluate control effectiveness across compute storage networking databases container platforms virtualization and cloud-native services.
• Identify control gaps and partner with technology leaders to develop sustainable remediation strategies.

Control-as-Code Modernization

• Lead the adoption of Control-as-Code principles across Infrastructure Engineering and Cloud Platforms.
• Partner with engineering and cloud risk teams to embed automated controls within CI/CD Infrastructure-as-Code and platform deployment processes.
• Drive implementation of continuous compliance monitoring and automated evidence collection.
• Propose governance standards and operating models for automated preventive detective and corrective controls.
• Promote measurable reductions in manual control execution and testing activities through automation.

Regulatory & Audit Engagement

• Ensure alignment with enterprise policies standards and regulatory expectations.
• Partner with Audit Compliance Independent Risk Management and regulators before and during reviews and examinations.
• Coordinate issue management activities including root-cause analysis and sustainable corrective action plans.
• Provide risk and control expertise during regulatory remediation efforts.

Risk Analytics & Governance

• Analyze Key Risk Indicators (KRI) issue control testing and operational loss data to identify systemic risk trends.
• Lead control health reporting and executive risk dashboards.
• Support risk appetite monitoring and governance forums.
• Present findings and recommendations to senior technology executives and control committees.

Strategic Technology Transformation

• Serve as the control management lead for major infrastructure and cloud transformation programs.
• Evaluate technology modernization initiatives through a risk and controls lens.
• Influence technology strategy by integrating governance resiliency security and compliance requirements into engineering and control processes.
• Drive adoption of scalable control solutions that enable innovation while maintaining strong risk management practices.

Required Qualifications

• 7 years of Risk Management or Financial Services Industry experience or equivalent experience demonstrated through one or a combination of the following: work experience training military experience education
• 7 years of Control Management Technology Risk Information Security or Audit experience
• 5 years supporting large-scale technology organizations

Desired Qualifications

• Deep understanding of:
  • Cloud Security
  • Platform Engineering
  • Infrastructure-as-Code
  • DevSecOps
  • Site Reliability Engineering (SRE)
  • Control Automation
  • Continuous Compliance Monitoring
• Experience implementing Control-as-Code frameworks.
• Knowledge of OCC Heightened Standards FFIEC guidance NIST COBIT and enterprise technology policies.
• Experience supporting large-scale infrastructure modernization or cloud migration programs.
• Relevant certifications:
  • CRISC
  • CISA
  • CISSP / CCSP
  • AWS/Azure/GCP Cloud Certifications
  • CGRC
  • ITIL

Job Expectations:

• This position is NOT eligible for Visa sponsorship.
• Ability to work on site in a hybrid role.
• Fully remote work locations are not available for this role. If you are not in a location listed on the posting you must commit to relocation within an agreed upon timeframe.
• Relocation assistance is not available for this position.

Posting End Date:

*Job posting may come down early due to volume of applicants.

We Value Equal Opportunity

Wells Fargo is an equal opportunity employer. All qualified applicants will receive consideration for employment without regard to race color religion sex sexual orientation gender identity national origin disability status as a protected veteran or any other legally protected characteristic.

Employees support our focus on building strong customer relationships balanced with a strong risk mitigating and compliance-driven culture which firmly establishes those disciplines as critical to the success of our customers and company. They are accountable for execution of all applicable risk programs (Credit Market Financial Crimes Operational Regulatory Compliance) which includes effectively following and adhering to applicable Wells Fargo policies and procedures appropriately fulfilling risk and compliance obligations timely and effective escalation and remediation of issues and making sound risk decisions. There is emphasis on proactive monitoring governance risk identification and escalation as well as making sound risk decisions commensurate with the business units risk appetite and all risk and compliance program requirements.

Candidates applying to job openings posted in Canada: Applications for employment are encouraged from all qualified candidates including women persons with disabilities aboriginal peoples and visible minorities. Accommodation for applicants with disabilities is available upon request in connection with the recruitment process.

Applicants with Disabilities

To request a medical accommodation during the application or interview process visitDisability Inclusion at Wells Fargo.

Drug and Alcohol Policy

Wells Fargo maintains a drug free workplace. Please see our Drug and Alcohol Policy to learn more.

Wells Fargo Recruitment and Hiring Requirements:

a. Third-Party recordings are prohibited unless authorized by Wells Fargo.

b. Wells Fargo requires you to directly represent your own experiences during the recruiting and hiring process.