Lead Information Security Analyst Cryptography and PKI

Lead Information Security Analyst – Cryptography & PKI Governance

Wells Fargo is seeking a highly experienced Lead Information Security Analyst to serve as a technical leader and subject matter expert in cryptography, Public Key Infrastructure (PKI), digital certificate lifecycle management, and enterprise cryptographic governance.

This role requires a seasoned cryptography professional with significant hands-on experience in enterprise PKI, encryption, certificate lifecycle management, and key management. The successful candidate will be expected to operate as a recognized subject matter expert, provide technical leadership, and drive strategic initiatives across a complex enterprise environment.

This role provides strategic direction, risk oversight, and technical expertise across the firm's cryptographic ecosystem to help protect critical systems and data.

The ideal candidate will bring deep expertise in encryption technologies, certificate management, cryptographic controls, and regulatory requirements within large financial institutions. This individual will drive governance, risk management, automation, and modernization initiatives while partnering across cybersecurity, infrastructure, architecture, engineering, and application teams.

In this role, you will:

• Serve as a lead SME for enterprise cryptography, encryption technologies, PKI, certificate lifecycle management, and key management practices.
• Provide technical leadership for digital certificate governance across the enterprise.
• Partner with application, infrastructure, cloud, and security engineering teams to design secure cryptographic solutions and resolve complex technical challenges.
• Develop and maintain cryptographic policies, standards, governance frameworks, and control requirements.
• Assess cryptographic implementations and conduct risk assessments involving certificate management, key management, encryption controls, and trust architectures.
• Support audit, regulatory, and risk management activities related to cryptographic controls.
• Monitor emerging cryptographic threats and evaluate readiness for evolving standards, including Post-Quantum Cryptography (PQC).
• Provide expertise related to Hardware Security Modules (HSMs), including architecture, deployment, key custody, and operational controls.
• Lead initiatives to improve certificate discovery, inventory management, governance, and lifecycle automation.
• Evaluate and optimize certificate lifecycle management platforms including Venafi, Digi Cert, HSMs, and related technologies.
• Analyze cryptographic, certificate, and asset datasets to identify risk trends, compliance gaps, and improvement opportunities.
• Design automation solutions, dashboards, and reporting capabilities that improve governance visibility and operational efficiency.
• Leverage approved AI-assisted tools to enhance analysis, reporting, and investigations.
• Mentor cybersecurity professionals and influence enterprise cryptographic strategy, roadmaps, and modernization efforts.

Required Qualifications:

• 7+ years of experience in Information Security, Cryptography, PKI, Encryption, Key Management, or related cybersecurity disciplines within the financial services industry.
• Deep expertise in Public Key Infrastructure (PKI) and Digital Certificate Lifecycle Management.
• Strong knowledge of cryptographic principles, algorithms, encryption technologies, and key management processes.
• Experience supporting enterprise-scale certificate lifecycle management programs.
• Experience managing and governing certificate discovery and automation platforms such as Venafi, Keyfactor, Digi Cert, or similar technologies.
• Strong understanding of Hardware Security Modules (HSMs), including deployment architectures, key protection mechanisms, and operational controls.
• Experience developing and implementing cryptographic policies, standards, governance frameworks, and control requirements.
• Strong understanding of regulatory, audit, and compliance requirements applicable to cryptographic controls within financial institutions.
• Experience conducting cryptographic risk assessments and remediation planning.
• Experience analyzing large datasets to identify risk exposure,…