Lead Third Party Risk Specialist

About this role:

This position is part of the Technology Third Party Governance, Third Party Officer team and will be responsible for providing support for the Third-party Program within WFT to identify, manage and mitigate risks of third parties. The job responsibilities for this position include to work with relevant SMEs and stakeholders to:

In this role, you will:

• Monitor and Oversee the Third Party Risk Management Program within Wells Fargo Technology for a high risk LoB
• Provide subject matter expertise as it relates to program requirements, policy changes, or changes to Third Party Management methodology and tools
• Credible Challenge of Third Party program work and results
• Ensure Third Party issues and concerns (e.g. oversight deficiencies, program concerns, and open risk items) are reported, tracked and escalated 
• Devise and/or monitor controls to identify gaps to prevent, detect or correct operational risk issues
• Review risk indicators to drive mitigation strategies, and challenge risk acceptances/exceptions where necessary
• Collaborate with and influence all levels of professionals including senior managers
• Engage and influence LoB, risk, legal, and audit partners to successfully ensure appropriate management of business risk

Required Qualifications:

• 5 years of Information Security Analysis experience, or equivalent demonstrated through one or a combination of the following: work experience, training, military experience, education
• 4 years of Technology Risk Management experience
• 3 years of third party risk management experience
• Experience reviewing risk from assessment and vendor performance data to develop and drive mitigations
• Experience leveraging data analysis to understand trends, issues and drive mitigation/remediation

Desired Qualifications:

• Appropriate industry certifications such as Certified Information Systems Security Professional (CISSP), Certified Information Security Manager (CISM), Certified Information Systems Auditor (CISA), or Certified in Risk and Information Systems Control (CRISC) preferred
• Familiarity with industry control frameworks such as COBIT, ITIL, ISO17799, COSO, etc.
• Familiarity with regulatory expectations (e.g., FFIEC) on management of third party and technology outsourcing
• Experience developing and cultivating professional relationships

Job Expectations:

• Knowledge and understanding of third party risk assessment procedures, risk mitigation or risk remediation
• Strong organizational, multi-tasking, and prioritizing skills
• Strong time management skills and ability to meet deadlines
• Ability to translate and convey complex technical information to senior technical and non-technical stakeholders in oral and written format
• Ability to influence and collaborate at all internal organizational levels and with stakeholders including business partners, project managers, senior executives
• Ability to take initiative and work independently with minimal supervision in a structured environment
• Ability to work effectively in virtual environment where key team members and partners are in various time zones and locations
• In office 3x weekly
• No visa sponsorship /transfer
• No C2C

Posting End Date: 

*Job posting may come down early due to volume of applicants.

We Value Diversity

At Wells Fargo, we believe in diversity, equity and inclusion in the workplace; accordingly, we welcome applications for employment from all qualified candidates, regardless of race, color, gender, national origin, religion, age, sexual orientation, gender identity, gender expression, genetic information, individuals with disabilities, pregnancy, marital status, status as a protected veteran or any other status protected by applicable law.

Employees support our focus on building strong customer relationships balanced with a strong risk mitigating and compliance-driven culture which firmly establishes those disciplines as critical to the success of our customers and company. They are accountable for execution of all applicable risk programs (Credit, Market, Financial Crimes, Operational, Regulatory Compliance), which includes effectively following and adhering to applicable Wells Fargo policies and procedures, appropriately fulfilling risk and compliance obligations, timely and effective escalation and remediation of issues, and making sound risk decisions. There is emphasis on proactive monitoring, governance, risk identification and escalation, as well as making sound risk decisions commensurate with the business unit’s risk appetite and all risk and compliance program requirements.

Candidates applying to job openings posted in US: All qualified applicants will receive consideration for employment without regard to race, color, religion, sex, sexual orientation, gender identity, national origin, disability, status as a protected veteran, or any other legally protected characteristic.

Candidates applying to job openings posted in Canada: Applications for employment are encouraged from all qualified candidates, including women, persons with disabilities, aboriginal peoples and visible minorities. Accommodation for applicants with disabilities is available upon request in connection with the recruitment process.

Applicants with Disabilities

To request a medical accommodation during the application or interview process, visit Disability Inclusion at Wells Fargo.

Drug and Alcohol Policy

Wells Fargo maintains a drug free workplace.  Please see our Drug and Alcohol Policy to learn more.

Wells Fargo Recruitment and Hiring Requirements:

a. Third-Party recordings are prohibited unless authorized by Wells Fargo.

b. Wells Fargo requires you to directly represent your own experiences during the recruiting and hiring process.