Lead Information Security Analyst - Cyber Resiliency & Human Defense

About this role:

Wells Fargo is seeking a Lead Information Security Analyst as part of the Cyber Resiliency & Human Defense organization within Technology Management and Strategy.  Learn more about the career areas and lines of business at  will help advance cybersecurity resilience by connecting cyber threats, human behavior, business processes, controls, and operational data. You will translate complex security and risk information into practical actions for leaders and employees, support engaging learning and awareness experiences, improve workflows through automation, and strengthen measurement, reporting, and audit readiness.

A successful candidate will combine broad cybersecurity knowledge with strong communication, business judgment, operational discipline, and creative problem solving. Relevant backgrounds may include information security, cyber risk management, security operations, governance, security awareness, human risk, audit and assurance, workflow automation, or related  this role, you will:

Provide advanced information security consultation for information security policy, risk management, control effectiveness, and remediation activities

Lead cross-functional work streams that support cybersecurity awareness, behavioral defense, training, and human-risk reduction priorities

Connect evolving cyber threats, control expectations, and business risks to practical communications, learning experiences, behavioral interventions, and process improvements

Translate complex cybersecurity risks, threats, controls, and technical concepts into clear, concise, and actionable guidance for leaders, technical partners, managers, and frontline employees

Develop and deliver virtual and in-person presentations, webinars, workshops, briefings, and awareness events using strong storytelling, facilitation, and audience-engagement techniques

Design, build, maintain, and troubleshoot workflow automations using Microsoft Power Automate and SharePoint Online to improve approvals, content routing, notifications, governance, evidence retention, and operational traceability

Identify manual or repetitive processes that are appropriate for automation and document workflow logic, ownership, controls, dependencies, and support requirements

Synthesize performance, risk, control, and behavioral data into decision-ready dashboards, executive reports, and leadership narratives covering key performance, risk, and control indicators

Identify trends, emerging risks, data-quality concerns, control implications, and improvement opportunities, then translate them into concise recommendations and actions

Define or refine metric logic, baselines, thresholds, source traceability, and reporting cadence in partnership with metric owners and approved data providers

Translate audit observations, control gaps, and risk themes into business impact, executive-level reporting, and practical recommendations

Coordinate responses to audit, regulatory, compliance, and control-testing requests; organize review-ready evidence; and support findings through remediation and closure

Analyze ambiguous or complex cybersecurity and operational problems, identify risks and dependencies, and develop practical solutions aligned with business objectives and risk appetite

Partner across cybersecurity, technology, risk, compliance, fraud, audit, communications, and business teams to influence outcomes without direct authority

Required Qualifications:

5+ years of Information Security Analysis experience, or equivalent demonstrated through one or a combination of the following: work experience, training, military experience, education

Desired

Qualifications:

Experience creating, maintaining, or troubleshooting workflow automation using Microsoft Power Automate and SharePoint Online Experience synthesizing KPIs, KRIs, KCIs, trends, and risk themes into executive dashboards, narratives, recommendations, and decision-ready reporting

Experience supporting audit, regulatory, compliance, assurance, or control-testing activity through evidence management, response development, stakeholder coordination, and remediation tracking

Experience documenting standard operating procedures, process controls, workflow logic, operational runbooks, or evidence-retention requirements

Job Expectations:

Position offers a hybrid work schedule

This position is not eligible for Visa sponsorship

Relocation assistance is not available for this position

Posting Locations:1751 Pinnacle Dr. McLean, Virginia  S Brevard Street.…