About this role:

Wells Fargo is seeking a Senior Lead Control Management Officer to lead the Technology Controls engagement with the Cloud Platform organization. This role will provide strategic control oversight and risk leadership for enterprise infrastructure services, cloud platform adoption, platform engineering, and control modernization initiatives focused on Control-as-Code, automated governance, and continuous control monitoring.

 The individual will partner closely with Infrastructure Engineering leaders, Cloud Platform Engineering, Information Security, Technology Risk, Cloud GRC, Audit, and Control Management teams to establish and maintain a strong control environment that enables secure technology transformation while ensuring regulatory compliance and operational resilience.

 This role will be responsible for risk identification and assessment, control design and evaluation, issue management, governance reporting, regulatory engagement, and the advancement of automation strategies that embed controls directly into technology delivery pipelines.

In This Role, You Will

• Act as a trusted advisor to senior technology and control management leaders in developing risk mitigation strategies for complex infrastructure and cloud-related risks.
• Lead the design, implementation, and continuous improvement of control frameworks supporting:
  • Infrastructure Engineering
  • Cloud Platforms (Azure, AWS, GCP, OpenShift, Kubernetes)
  • Storage, Compute, Network, Database, and Middleware Services
  • Platform Engineering initiatives
  • Control-as-Code implementations
• Provide strategic oversight of enterprise technology risk, operational risk, resiliency risk, and regulatory compliance requirements.
• Monitor, measure, evaluate, and report on the effectiveness of controls and risk mitigation strategies.
• Lead assessment and remediation activities associated with audits, regulatory examinations, horizontal reviews, and independent testing.
• Drive proactive identification of emerging technology risks associated with cloud adoption, automation, AI-enabled infrastructure operations, and platform modernization.
• Serve as a key control partner within infrastructure transformation programs and cloud migration initiatives.
• Lead complex risk and control governance activities, including preparation of executive-level reporting, risk committee materials, and regulatory updates.
• Mentor and guide control officers and virtual teams supporting technology control execution.

Specific Responsibilities

Infrastructure & Cloud Risk Management

• Develop and maintain risk and control frameworks supporting enterprise infrastructure services.
• Assess risks related to cloud adoption, hybrid cloud architectures, platform engineering, and infrastructure modernization.
• Evaluate control effectiveness across compute, storage, networking, databases, container platforms, virtualization, and cloud-native services.
• Identify control gaps and partner with technology leaders to develop sustainable remediation strategies.

Control-as-Code Modernization

• Lead the adoption of Control-as-Code principles across Infrastructure Engineering and Cloud Platforms.
• Partner with engineering and cloud risk teams to embed automated controls within CI/CD, Infrastructure-as-Code, and platform deployment processes.
• Drive implementation of continuous compliance monitoring and automated evidence collection.
• Propose governance standards and operating models for automated preventive, detective, and corrective controls.
• Promote measurable reductions in manual control execution and testing activities through automation.

Regulatory & Audit Engagement

• Ensure alignment with enterprise policies, standards, and regulatory expectations.
• Partner with Audit, Compliance, Independent Risk Management, and regulators before and during reviews and examinations.
• Coordinate issue management activities, including root-cause analysis and sustainable corrective action plans.
• Provide risk and control expertise during regulatory remediation efforts.

Risk Analytics & Governance

• Analyze Key Risk Indicators (KRI), issue, control testing, and operational loss data to identify systemic risk trends.
• Lead control health reporting and executive risk dashboards.
• Support risk appetite monitoring and governance forums.
• Present findings and recommendations to senior technology executives and control committees.

Strategic Technology Transformation

• Serve as the control management lead for major infrastructure and cloud transformation programs.
• Evaluate technology modernization initiatives through a risk and controls lens.
• Influence technology strategy by integrating governance, resiliency, security, and compliance requirements into engineering and control processes.
• Drive adoption of scalable control solutions that enable innovation while maintaining strong risk management practices.

Required Qualifications

• 7+ years of Risk Management or Financial Services Industry experience, or equivalent experience demonstrated through one or a combination of the following: work experience, training, military experience, education
• 7+ years of Control Management, Technology Risk, Information Security, or Audit experience
• 5+ years supporting large-scale technology organizations

 Desired Qualifications

• Deep understanding of:
  • Cloud Security
  • Platform Engineering
  • Infrastructure-as-Code
  • DevSecOps
  • Site Reliability Engineering (SRE)
  • Control Automation
  • Continuous Compliance Monitoring
• Experience implementing Control-as-Code frameworks.
• Knowledge of OCC Heightened Standards, FFIEC guidance, NIST, COBIT, and enterprise technology policies.
• Experience supporting large-scale infrastructure modernization or cloud migration programs.
• Relevant certifications:
  • CRISC
  • CISA
  • CISSP / CCSP
  • AWS/Azure/GCP Cloud Certifications
  • CGRC
  • ITIL

Job Expectations:

• This position is NOT eligible for Visa sponsorship. 
• Ability to work on site in a hybrid role.
• Fully remote work locations are not available for this role. If you are not in a location listed on the posting, you must commit to relocation within an agreed upon timeframe.
• Relocation assistance is not available for this position.

Posting End Date: 

*Job posting may come down early due to volume of applicants.