Senior Lead Control Management Officer - Platform Assurance

Senior Lead Technology Control Officer

Wells Fargo is seeking a Senior Lead Technology Control Officer to play a critical role to drive end-to-end assessment and oversight of the company's most critical technology platforms, infrastructure, and services. This leader ensures that our technology environment meets strict regulatory standards, aligns with industry best practices, and effectively mitigates operational, cyber, and compliance risks. In this role, you will shape and execute a defensible, risk-based platform assurance strategy that spans cloud, private cloud, IAM, Dev Ops, data platforms, and shared technology services.

In this role you will:

• Develop and lead the assessment strategy for strategic and emerging technology (Public Cloud, Private cloud, IAM, CICD, Data Management, PAM) aligned with financial industry standards to ensure risk-based methodology is designed that is defensible and scalable
• Lead and perform the end-to-end platform assurance assessments across the core ITGC domains and functionality of the platform
• Identify the Consumer/Producer requirements, ensure those are embedded into the enabling technologies and are ratified in SOR with measurement and telemetry
• Act as an advisor to more experienced leaders in developing risk mitigation strategies for complex and highly integrated business specific risk across different business lines
• Drive issue management, thematic analysis, remediation and act an advisor to more experienced leaders in developing risk mitigation strategies, remediation efforts, and validation for complex issues
• Provide vision, direction, and expertise to more experienced leaders on implementing innovative and significant business solutions for highly complex risks associated with business operations
• Mentor and train Control Management teams, stakeholders and tech partners on assessment strategy, methodology and remediation
• Engage with all levels of roles across the business group, and serve as an experienced advisor in designing and implementing risk mitigation strategies, business processes, and controls that mitigate risks and address regulatory requirements

Specific responsibilities include:

Assessment Strategy & Execution

• Develop and lead the assessment strategy for strategic and emerging technology (Public Cloud, Private cloud, IAM, CICD, Data Management, PAM) aligned with financial industry standards to ensure risk-based methodology is designed that is defensible and scalable.
• Perform and oversee complex end-to-end platform assurance assessments across core ITGC, platform functionality, and integrated control environments.
• Identify, assess, and remediate technology risks related to platform, products and services, including operational resilience and third-party risk.
• Identify Consumer/Producer requirements and ensure their integration into enabling technologies and system-of-record (SOR) governance with measurable telemetry.

Risk Advisory & Issue Management

• Serve as a senior advisor to technology and business leaders on risk identification, mitigation strategies, and control design.
• Drive thematic analysis across assessment outputs (platform assurance, threat modeling, Red Team, audit results, etc.).
• Oversee issue management, remediation strategies, and validation activities for complex platform risks.

Control Framework & Governance

• Own and evolve the platform control framework (Cloud, Private Cloud, IAM, CI/CD, Data Management, PAM) aligned to financial-sector expectations.
• Conduct ongoing platform assessments and control testing; ensure alignment with enterprise risk appetite.
• Partner with internal audit, compliance, and regulatory teams to address findings and implement remediation plans.
• Maintain governance artifacts for regulatory exams, audits, and senior-level risk committees.

Security, Architecture & Engineering Partnership

• Collaborate with engineering, cyber, and architecture teams to embed controls across platform designs and deployments.
• Review and approve end-to-end platform configurations, IAM policies, encryption standards, and data residency requirements.
• Monitor vulnerabilities and ensure timely remediation aligned with financial-sector security expectations.

Stakeholder Engagement & Leadership

• Act as a trusted advisor across engineering, cyber, product, risk, and business units.
• Support technology transformation and migration initiatives with integrated risk guidance.
• Mentor and train Control Management, tech partners, and stakeholders on assessment strategies, methodologies, and remediation expectations.

Continuous Improvement & Innovation

• Stay current on emerging risks, technology trends, and regulatory changes impacting financial institutions.
• Recommend control enhancements, automation opportunities, and operational resilience improvements.
• Drive initiatives that strengthen technology risk governance and reduce enterprise risk exposure.

Required Qualifications:

• 7+ years of Risk Management or Financial Services Industry experience, or equivalent experience demonstrated through…