Senior Information Security Analyst

Wells Fargo

. Apply lifecycle standards and risk thresholds to findings, security exposures, patch risks, and exceptions from intake through closure or risk acceptance .

Posted 10/14/2026full-timeUnited StatesSeniorWebsite

Core Competencies

Role fit

Core Competencies

Use this summary to align your resume positioning with the role.

Demonstrates expertise in Information Security Analysis, including risk assessment, remediation planning, and compliance reviews. Proficient in developing security metrics and executive dashboards while effectively communicating complex risk information to diverse audiences.

Highest-signal resume keywords

Information Security AnalysisRisk AssessmentCompliance ReviewsSecurity Metrics DevelopmentVulnerability Management

ATS Keywords

Tailor your resume

Applicant Tracking System Keywords

Tip: use these terms in your resume and cover letter to boost ATS matches.

Hard Skills

Information Security AssessmentsData ReconciliationTrend AnalysisRemediation PlanningControl EvaluationsPatch ManagementEvidence AssessmentRegulatory ComplianceSecurity FrameworksRisk Exposure Analysis

Soft Skills

Analytical SkillsProblem-Solving SkillsWritten CommunicationVerbal CommunicationRelationship Building

Tools & Technologies

AWSAzureGoogle CloudExecutive DashboardsData Quality Tools

Certifications & Qualifications

CISSPCISMCRISCCISASecurity+

Industry Keywords

NISTISO 27001CIS ControlsCOBITInformation Security Policies

Tech Stack

Tools & technologies

AWSAzureCloudCyber Security

About the role

Key responsibilities & impact

Apply lifecycle standards and risk thresholds to findings, security exposures, patch risks, and exceptions from intake through closure or risk acceptance
Review intake records for completeness, risk-based prioritization, and assignment of accountable owners
Independently challenge remediation plans, milestones, exception rationale, and supporting evidence
Monitor remediation progress, identify barriers and missed commitments, and coordinate escalation of overdue or material items
Validate closure evidence and support independent challenge of residual-risk acceptance rationale
Analyze findings and exposure data to identify trends, aging, data-quality issues, and emerging risks
Support certified metrics, executive dashboards, and recurring reporting
Perform recurring data-quality reviews and reconciliations
Support Patch Oversight by reviewing patch-not-deployed rationale, overdue approvals, PTS data quality, and escalation requirements
Contribute to targeted reviews, control effectiveness assessments, issue analysis, and continuous improvement of the oversight model
Prepare decision-oriented communications for leadership and governance forums
Mentor and support less experienced team members and promote consistent oversight practices
Partner with accountable owners, operational teams, data owners, risk authorities, and leadership to improve risk visibility and accountability

Requirements

What you’ll need

4+ years of Information Security Analysis experience, or equivalent demonstrated through work experience, training, military experience, or education
3+ years of experience performing information security assessments, findings reviews, security reviews, or control evaluations
3+ years of experience analyzing security risks, reviewing remediation plans, and escalating missed commitments
3+ years of experience interpreting and applying information security policies, standards, control requirements, or regulatory expectations
Experience with enterprise findings, issue, vulnerability, exposure, or patch management processes
Experience independently challenging remediation plans, exceptions, closure evidence, or residual-risk decisions
Experience with compliance reviews, data-quality reviews, or control effectiveness assessments
Experience developing security metrics, executive dashboards, trend reporting, or risk exposure analyses
Knowledge of information security frameworks and standards such as NIST, ISO 27001, CIS Controls, COBIT, or similar frameworks
Knowledge of vulnerability management, patch management, exception management, and remediation practices
Experience supporting regulatory, internal audit, or external audit examinations
Strong analytical and problem-solving skills, including data reconciliation, trend identification, evidence assessment, and translating information into actionable insights
Strong written and verbal communication skills with the ability to present complex risk information to technical and non-technical audiences
Ability to build effective relationships, influence outcomes, and provide credible challenge while maintaining independent oversight
Bachelor's degree in Information Security, Cybersecurity, Computer Science, Information Technology, Business, or a related field
Professional certification such as CISSP, CISM, CRISC, CISA, Security+, or a related certification
Knowledge of cloud security concepts and controls within AWS, Azure, or Google Cloud environments
This position is not available for Visa sponsorship
Ability to work in a hybrid environment from one of the posted locations

Benefits

Comp & perks

No relocation allowance
Hybrid work environment
Equal opportunity employment
Medical accommodation available during recruitment or interview process
Drug-free workplace