layiq
worthy; deserving; fitting; suitable.
A role, opportunity, or path that merits attention, time, and pursuit.
Loading LAYIQ…Job opportunity
Wells Fargo
CHARLOTTE, NC; 144039-NC-550 S Tryon; IRVING, TX; CHANDLER, AZ; ISELIN, NJ
Source: Wells Fargo careers · View original posting
From Wells Fargo's posting. “We” and “our” refer to the employer.
Wells Fargo is seeking a Senior Lead Control Management Officer to lead the Technology Controls engagement with the Cloud Platform organization. This role will provide strategic control oversight and risk leadership for enterprise infrastructure services, cloud platform adoption, platform engineering, and control modernization initiatives focused on Control-as-Code, automated governance, and continuous control monitoring.
The individual will partner closely with Infrastructure Engineering leaders, Cloud Platform Engineering, Information Security, Technology Risk, Cloud GRC, Audit, and Control Management teams to establish and maintain a strong control environment that enables secure technology transformation while ensuring regulatory compliance and operational resilience.
This role will be responsible for risk identification and assessment, control design and evaluation, issue management, governance reporting, regulatory engagement, and the advancement of automation strategies that embed controls directly into technology delivery pipelines.
In This Role, You Will
Act as a trusted advisor to senior technology and control management leaders in developing risk mitigation strategies for complex infrastructure and cloud-related risks.
Provide strategic oversight of enterprise technology risk, operational risk, resiliency risk, and regulatory compliance requirements.
Monitor, measure, evaluate, and report on the effectiveness of controls and risk mitigation strategies.
Lead assessment and remediation activities associated with audits, regulatory examinations, horizontal reviews, and independent testing.
Drive proactive identification of emerging technology risks associated with cloud adoption, automation, AI-enabled infrastructure operations, and platform modernization.
Serve as a key control partner within infrastructure transformation programs and cloud migration initiatives.
Lead complex risk and control governance activities, including preparation of executive-level reporting, risk committee materials, and regulatory updates.
Mentor and guide control officers and virtual teams supporting technology control execution.
Specific Responsibilities
Infrastructure & Cloud Risk Management
Develop and maintain risk and control frameworks supporting enterprise infrastructure services.
Assess risks related to cloud adoption, hybrid cloud architectures, platform engineering, and infrastructure modernization.
Evaluate control effectiveness across compute, storage, networking, databases, container platforms, virtualization, and cloud-native services.
Identify control gaps and partner with technology leaders to develop sustainable remediation strategies.
Control-as-Code Modernization
Lead the adoption of Control-as-Code principles across Infrastructure Engineering and Cloud Platforms.
Partner with engineering and cloud risk teams to embed automated controls within CI/CD, Infrastructure-as-Code, and platform deployment processes.
Drive implementation of continuous compliance monitoring and automated evidence collection.
Propose governance standards and operating models for automated preventive, detective, and corrective controls.
Promote measurable reductions in manual control execution and testing activities through automation.
Regulatory & Audit Engagement
Ensure alignment with enterprise policies, standards, and regulatory expectations.
Partner with Audit, Compliance, Independent Risk Management, and regulators before and during reviews and examinations.
Coordinate issue management activities, including root-cause analysis and sustainable corrective action plans.
Provide risk and control expertise during regulatory remediation efforts.
Risk Analytics & Governance
Analyze Key Risk Indicators (KRI), issue, control testing, and operational loss data to identify systemic risk trends.
Lead control health reporting and executive risk dashboards.
Support risk appetite monitoring and governance forums.
Present findings and recommendations to senior technology executives and control committees.
Strategic Technology Transformation
Serve as the control management lead for major infrastructure and cloud transformation programs.
Evaluate technology modernization initiatives through a risk and controls lens.
Influence technology strategy by integrating governance, resiliency, security, and compliance requirements into engineering and control processes.
Drive adoption of scalable control solutions that enable innovation while maintaining strong risk management practices.
Required Qualifications
7+ years of Risk Management or Financial Services Industry experience, or equivalent experience demonstrated through one or a combination of the following: work experience, training, military experience, education
DevSecOps
Experience implementing Control-as-Code frameworks.
Knowledge of OCC Heightened Standards, FFIEC guidance, NIST, COBIT, and enterprise technology policies.
Experience supporting large-scale infrastructure modernization or cloud migration programs.
Relevant certifications: CRISC
CISA
CISSP / CCSP
AWS/Azure/GCP Cloud Certifications
CGRC
ITIL
This position is NOT eligible for Visa sponsorship.
Ability to work on site in a hybrid role.
Fully remote work locations are not available for this role. If you are not in a location listed on the posting, you must commit to relocation within an agreed upon timeframe.
Relocation assistance is not available for this position.
Pay Range
Reflected is the base pay range offered for this position. Pay may vary depending on factors including but not limited to demonstrated examples of prior performance, skills, experience, or work location. Employees may also be eligible for incentive opportunities.
$159,000.00 - $305,000.00
LAYIQ is an independent job-discovery service. This listing does not imply a partnership with or endorsement by the employer. Review the original posting for current details and availability.
Employer posted: