Lead Control Management Officer - Platform Assurance

About this role:

Wells Fargo is seeking a Lead Technology Control Officer to support execution of the Platform Assurance program within Technology Control. This role provides advanced control assessment expertise, conducts deep‑dive risk evaluations across critical platforms, and partners with Technology, Cyber Security, Architecture, and Control Management teams to identify and mitigate risk.

The Lead Officer will help drive platform assessment activities, support issue management, contribute to control framework enhancements, and ensure adherence to corporate risk programs and regulatory expectations.

In this role, you will:

* Lead complex initiatives designed to mitigate current and emerging risks with broad impact

* Act as key participant in monitoring, evaluating, and measuring the impact of decisions practiced in Control Management functional area

* Monitor moderately complex business specific programs, and provide risk management consulting to support the business in designing and implementing risk-mitigation strategies

* Monitor, measure, evaluate, and report on the impact of decisions and controls to the relevant business group or functional area

* Develop and implement risk monitoring and risk reporting processes and controls

* Collaborate with relevant business group to identify current and emerging risks associated with business activities and operations, and provide guidance in developing and implementing risk-mitigating strategies

* Lead Control Management project or virtual teams

Specific responsibilities include:

Assessment Execution & Control Evaluation

* Lead and perform complex platform assurance assessments across IT General Controls (ITGC), platform engineering controls, and supporting technology services.

* Conduct hand on control testing and evaluation for emerging technology including cloud (Azure, GCP, AWS), private cloud, IAM, CI/CD, data platforms, databases, and container platforms.

* Identify and assess Consumer/Producer requirements and evaluate their implementation across enabling technologies and system-of-record governance.

* Analyze evidence, document findings, and assess platform risk posture with clear articulation of control impacts.

Risk Identification & Issue Management

* Identify technology risks related to access, configuration, deployment pipelines, data protection, and operational resilience.

* Support issue lifecycle activities including root cause analysis, remediation plan review, control design improvement, and evidence validation.

* Contribute to thematic analysis across assessment outputs, threat modeling, Red Team exercises, and audit reviews.

Control Framework & Governance

* Assist with maintaining and maturing the platform control framework across Cloud, IAM, CI/CD, Data Management, and PAM domains.

* Support governance routines, audit readiness, regulatory documentation, and senior reporting packages.

* Maintain high‑quality assessment artifacts, testing documentation, and risk summaries for leadership and committees.

Cross‑Functional Collaboration

* Work with platform engineering, cyber security, architecture, and application teams to interpret control requirements and support remediation.

* Lead and conduct technical walkthroughs, testing plan, evidence reviews, and control discussions across diverse stakeholder groups.

* Build effective relationships across Technology and Control Management to drive consistent risk management practices.

Continuous Improvement & Program Support

* Recommend enhancements to assessment methodology, testing processes, automation, and telemetry‑based monitoring.

* Stay current on emerging technology trends, cloud control models, and regulatory expectations impacting financial institutions.

* Contribute to initiatives that improve the control environment, technology risk governance, and overall program maturity.

* Provide guidance and mentorship to junior assessors and team members.

Required Qualifications:

* 5+ years of Risk Management or Financial Services Industry experience, or equivalent experience demonstrated through one or a combination of the following: work experience, training, military experience, education.

* 5+ years of…