layiq
worthy; deserving; fitting; suitable.
A role, opportunity, or path that merits attention, time, and pursuit.
Loading LAYIQ…Job opportunity
CHARLOTTE, NC; 141753-NC-Three Wells Fargo Center, Charlotte
Source: Wells Fargo careers · View original posting
From Wells Fargo's posting. “We” and “our” refer to the employer.
The Senior Lead Control Management Officer will serve as an important member of the Technology Control Management organization, supporting Technology Development / Chief Development Experience Office. This role is responsible for helping strengthen the control environment within Software Development Lifecycle and Application Management Lifecycle.
The individual will partner closely with technology, cybersecurity, enterprise risk, asset management, procurement, and other stakeholders to identify risks, assess controls, monitor control effectiveness, and support sustainable remediation activities.
Support the design, implementation, and ongoing enhancement of the control environment across the Software Development Lifecycle (SDLC) and Application Lifecycle Management (ALM), including solution design, development, testing, release, deployment, and ongoing application maintenance.
Identify and assess technology development risks, including insecure design or coding practices, inadequate testing, unauthorized changes, segregation-of-duties conflicts, deployment failures, open-source and third-party software exposure, and gaps in development-tool governance.
Provide risk and control oversight for secure software development practices, including requirements traceability, code review, vulnerability management, software composition analysis, secrets management, and remediation of security findings.
Partner with engineering, cybersecurity, architecture, infrastructure, and product stakeholders to embed preventive and detective controls into development workflows, CI/CD pipelines, and release processes.
Monitor control effectiveness and develop metrics, reporting, and governance routines that provide transparency into control performance, policy compliance, risk trends, exceptions, and remediation progress.
Drive risk and control activities in alignment with enterprise programs such as Risk and Control Self-Assessment (RCSA), risk identification, control evaluation, issue management, and remediation validation.
Review technology development policies, standards, procedures, and process documentation to confirm risks are appropriately addressed and controls are clearly defined, consistently executed, evidenced, and sustainable.
Support governance and reporting for senior leadership by communicating key control themes, emerging development risks, issue status, exceptions, and risk-mitigation activities.
Collaborate across first-line, second-line, audit, and technology teams to support reviews, examinations, audit activity, and continuous improvement of the Technology Development control environment.
5+ years of Risk Management, Control Management, Operational Risk, Technology Risk, or equivalent demonstrated through one or a combination of the following: work experience, training, military experience, education
4+ years of experience supporting risk and control programs in a technology, operations, or enterprise risk environment
Knowledge of IT, information security and Cloud management and control frameworks (e.g. NIST Cybersecurity Framework and 800-53, CIS Top 20 Critical Security Controls, FFIEC IT Examination Handbooks, COBIT, FedRAMP, ISO 2700x, ITIL.
Strong control evaluation/testing and/or Audit experience: Experience in assessing risk, drafting, and executing test scripts, identifying gaps between controls and in control execution, assessing issues and trends, and influencing change
Strong risk and control fundamentals experience
Comprehensive understanding of risk types, methodologies, and frameworks for evaluating or testing controls and assessing results, conducting research, and identifying control deficiencies.
Experience at a financial institution or accounting firm.
A BS/BA degree or higher.
Excellent verbal, written, and interpersonal communication skills.
Ability to work onsite on a hybrid schedule per Wells Fargo's standard operating model in one of the listed locations
This position is not eligible for Visa sponsorship
Pay Range
Reflected is the base pay range offered for this position. Pay may vary depending on factors including but not limited to demonstrated examples of prior performance, skills, experience, or work location. Employees may also be eligible for incentive opportunities.
$77,000.00 - $121,000.00
LAYIQ is an independent job-discovery service. This listing does not imply a partnership with or endorsement by the employer. Review the original posting for current details and availability.
Employer posted:
How to spot a ghost jobGhost Job Checker: check another job link
The checker shows whether the employer still lists a job.
Five Below · Charlotte, NC 28208
Ace IT Careers · Atlanta, GA, US; Charlotte, NC, US; Columbus, OH, US; Indianapolis, IN, US; Tampa, FL, US; US
TechFlow, Inc. · Atlanta, GA, US; Birmingham, AL, US; Charlotte, NC, US; Columbia, SC, US; Orlando, FL, US
Datavant · Charlotte, NC
Bank of America · Charlotte; New York; Boston
Sompo · Morristown, NJ; Charlotte, North Carolina