It starts with you…
Our goal is to attract, develop, retain and motivate the most talented people - those who care and who work together as partners across business units and functions. We value and promote diversity and inclusion in every aspect of our business and at every level of our organization.
At Wells Fargo, we invest in our people. Our diverse lines of business offer unique opportunities to expand your knowledge and advance your career.
This is an exciting opportunity to join a team and function committed to providing Wells Fargo with world-class technology risk management. The Operational Risk Group continues to build out a world-class technology risk management capability.
The Technology Risk Management Oversight organization is responsible for establishing the strategic direction and management of Wells Fargo’s enterprise technology risk management program, including developing, approving and maintaining the technology risk management framework. This role reports to the Head of Compliance Technology Risk and will be generally accountable, in a second-line-of-defense (SLOD) function, for oversight and credible challenge of all business and technology solutions (architecture, design, implementation, maintenance), helping to ensure these activities maintain compliance with all applicable laws, rules, regulations and internal policies and standards. Consistent with other programs overseen by Corporate Risk, the Technology Risk program provides SLOD oversight to ensure an independent, integrated, and holistic view of Wells Fargo technology risks.
As a team member, this position will be responsible for:
- Building strong relationships and collaborating effectively with compliance, operational risk, technology, audit and legal partners, insuring effective technology risk management principles are applied against all tech enabled regulatory solutions.
- Independently analyzing program/project requirements against the proposed solutions to determine technology risk levels, control weaknesses, sustainability and to evaluate the risk of solutions not meeting compliance requirements
- Providing independent risk management oversight principles, to evaluate and challenge “corrective action“ plans and milestones - for completeness, correctness and sustainability
- Developing practices, processes, and templates to provide independent compliance technology risk management oversight.
- Ensuring the enterprise has the right people, processes, information and tools in place to allow enterprise technology and design solutions to meet compliance requirements for Wells Fargo businesses
- Assisting business teams and compliance subject matter experts with ongoing assessments of the technology environment as they relate to managing compliance risk.
- Ensuring compliance requirements are effectively captured and built into standard technology architecture, design, application development, change management, and project management processes and standards.
- Participation in critical regulatory compliance enterprise programs or projects with significant technology risks.
- Oversight of the integration of requirements from the broader operational risk domains into existing compliance and technology risk management processes (e.g. risk assessments, monitoring of controls)
- Creation of risk Points of View (POV), risk briefs and credible challenges
- Serving as a subject matter expert for compliance to aid in the identification, documentation, and remediation of technology compliance risk management policy and control gaps.
- 10+ years of experience in compliance, operational risk management (includes audit, legal, credit risk, market risk, or the management of a process or business with accountability for compliance or operational risk), or a combination of both; or 10+ years of IT systems security, business process management or financial services industry experience, of which 5+ years must include direct experience in compliance, operational risk management, or a combination of both
- Advanced Microsoft Office skills
- Excellent verbal, written, and interpersonal communication skills
- Strong analytical skills with high attention to detail and accuracy
- Ability to interact with all levels of an organization
- Ability to communicate effectively, in both written and verbal formats, with senior executive-level leaders
- Virtual leadership experience with ability to effectively drive results, provide feedback/direction, and manage and build relationships with leaders and team members in a geographically dispersed team environment
Other Desired Qualifications
• Experience with risks and issue management related to general banking regulations of the OCC, FRB, CFPB, FINRA and/or SEC
• Knowledge and experience with technology-related regulatory requirements and frameworks including FFIEC,COBIT, COSO, NIST, ISO
• Knowledge of BCBS239 guidance and other key regulatory guidance
• Proven ability to collaborate with and present to multiple stakeholders, including business leaders, legal, audit and multiple US regulators.
• Experience with tracking, monitoring and implementing corrective actions for Compliance/Operational Risk
• Experience with assessing the adequacy of policies, procedures, processes, and compliance and operational controls in a significantly large and complex organization
• Experience participating in and/or leading regulatory exams