About this role: Wells Fargo is seeking a Information Security Engineering Manager In this role, you will: Manage a team of engineers that design, document, test, maintain and provide issue resolution recommendations for highly complex security solutions related to networking, cryptography, cloud, authentication or directory services, email, internet, applications or endpoint security Manage security consulting on large projects for internal clients to ensure conformity with corporate information security policy, and standards Possess subject matter expertise at a mastery level in current and emerging security solutions and best practices Review and correlate security logs Manage computer security incident response activities for highly complex events Conduct technical investigation of security-related incidents, and conduct post-incident digital forensics to identify causes and recommend future mitigation strategies Manage implementation of information security such as availability, integrity, confidentiality, risk management, threat identification, modeling, monitoring, incident response, access management, and business continuity Work with more experienced technologists and team Interface with more experienced management Manage allocation of people and financial resources for Information Security Architecture Mentor and guide talent development of direct reports and assist in hiring talent Required Qualifications: 4+ years of Information Security Engineering experience, or equivalent demonstrated through one or a combination of the following: work experience, training, military experience, education 2+ years of Leadership experience Desired Qualifications: 3+ years of Identity and Access management experience with minimum 8 years of leadership experience andor people management experience Bachelors or masters degree in relevant Technology Security discipline 3+ years of experience in developing IAM solutions in cloud service providers (Microsoft Azure, Google Cloud Platform & Amazon Web Services), Privileged Identity Manager in Azure and equivalent product on Google Cloud Platform 3+ years of hands-on experience with infrastructure as code (Terraform, Cloud Formation, etc.), IGA solutions 3+ years of experience with one or more of the following authentication tools: Windows Credential Provider, SAML, OpenIDConnect, OAuth, JWT and Kerberos 3+ years of experience in the Azure Active Directory, RBAC and custom roles development 3+ years of experience working with SDLC, devsecops, agile, including supporting and/or using tools, GRAPH API, CI/CD pipeline tools 3+ years of architectural design and planning experience 3+ years of experience in Agile delivery Awareness of industry standards and best practices (NIST, ITSM, ISO27000, PCI) Strong attention to detail to ensure documentation, procedures, and information security engineering, administration and operations-related information are accurate and consistent with generally accepted best practices and Wells Fargo policy Keeps abreast of latest information security trends specific to banking & financial services industry and security as a practice in Demonstrated understanding and experience with information security vulnerabilities, threats, risks, security operations fundamentals, tasks and best practices Delivery of projects/operations/administrative initiatives with strong focus on quality and value creation for the organization/enterprise Excellent leadership, stakeholder management and program management skills. Effective verbal, presentation, written and interpersonal communication skills. Experience with global financial institutions Self-motivated individual who seeks continuous self-improvement and thrives in a fast-paced, changing environment Industry certifications like: ISC2 CISSP, CISM, GIAC or other industry security certifications Managed service delivery certifications like ITIL, Six Sigma will be beneficial Experience in technology consulting companies or experience in US banking sector is preferred Experience with automation Awareness of industry standards and their applications to financial organizations. Awareness about regulatory requirements for financial institutions and relate them to day-to-day operations. Ability to manage in a matrixed organization environment Ability to manage multiple and competing priorities Ability to positively influence, motivate, and direct diverse teams Ability to take an active role in the education, mentoring and training of less experienced team members Ability to think strategically, implement, and deliver business objectives Job Expectations: Manage a team of engineers that design, code, test, debug, and document for projects and programs associated with technology domain, including upgrades and deployments Assimilate information security requirements from product owners, understand relevant impacts and translate them into technical designs. Lead complex initiatives and deliverables within technical domain environments Participate in scrum team meetings and ceremonies and provide daily documented updates in support of the team. Perform code and design reviews within the organization. Review all daily activities and ensure completion of shift duties and proper handover. Manage security consulting on large projects for internal clients to ensure conformity with corporate information security policy, and standards Possess subject matter expertise at a mastery level in current and emerging security solutions and best practices Review and correlate security logs Manage implementation of information security such as availability, integrity, confidentiality, risk management, threat identification, modeling, monitoring, incident response, access management, and business continuity Work with more experienced technologists and teams Interface with senior and executive level leadership Manage allocation of people and financial resources for Information Security Architecture Mentor and guide talent development of direct reports and assist in hiring talent Develop of actionable short and long-term product roadmaps and shaping prioritized features. Oversee engineering teams to deliver commitments aligned to strategic product priorities. Ensures that key areas of technology risk including security, stability, and scalability are addressed in products and capabilities within the domain(s). Plan, measure and monitor health of operations with KPIs and KRIs.
