About this role:
- Wells Fargo is seeking a Lead Information Security Analyst
- An enthusiastic and experienced Cyber Engagement, Training and Awareness Lead to contribute to fostering a strong cybersecurity culture across the organization. This role will assist in the design, development, and execution of comprehensive programs that effectively engage employees, deliver impactful training, and raise overall cyber awareness. The Lead will help drive behavioral change, empower employees to be active participants in our defense, and contribute to reducing human-centric cyber risk across the enterprise.
In this role, you will:
- Provide advanced information security consultation for all aspects of information security compliance policy, risk management, and remediation
- Direct information security risk assessment and research, and recommend remediation plans and strategies
- Influence stakeholders on net new or on material changes to an asset to influence control decisions
- Provide consulting on security risk assessment and research, and recommend remediation plans and strategies
- Act as more experienced lead to the organization to develop security risk awareness and mitigating actions
- Consult the organization on complex security issues and findings
- Manage the most complex and critical information assets
- Evaluate and interpret internal and companywide information security policies, processes, standards, and participate with more experienced leaders in decision making on information security
- Serve as information security lead to advice on the development and delivery of Information Security Education and Awareness
- Collaborate and consult with peers, colleagues, and mid-level to more experienced managers to resolve issues and achieve goals
- Lead projects and teams
- Coordinate with vendor manager on third party assets to manage information security risks
- Serve as a mentor to less experienced staff
Required Qualifications:
- 5+ years of Information Security Analysis experience, or equivalent demonstrated through one or a combination of the following: work experience, training, military experience, education
Additional Required Qualifications:
- Masters/ Bachelors degree in Cybersecurity, Information Technology, Computer Science or related field
- Experience in cybersecurity, learning & development, corporate communications, or a related field, with at least 2 years focused on supporting cyber awareness, training, or engagement programs, or equivalent demonstrated through one or a combination of the following: work experience, training, military experience, education.
- Experience in contributing to the development and execution of awareness and training initiatives.
- Strong written and verbal communication skills, with the ability to translate technical information into clear, engaging content for various audiences.
- Basic understanding of adult learning principles and effective communication strategies.
- Experience with learning management systems (LMS) and/or content creation tools.
- Familiarity with cybersecurity domains, concepts and frameworks (e.g., NIST).
- Prior experience in the financial services industry or other regulated environments.
Job Expectations:
Engagement & Partnership:
- Contribute to strategic engagement initiatives to embed cybersecurity principles and practices across all business units and functions.
- Act as a key point of contact for internal stakeholders, assisting in translating complex cyber concepts into relatable and actionable insights for diverse audiences.
- Support collaborative relationships across the organization to encourage widespread adoption and participation in cybersecurity initiatives and programs.
- Assist in developing and implementing internal communication strategies for cybersecurity, ensuring timely, relevant, and effective dissemination of critical information.
Training Program Support & Delivery:
- Contribute to the design, development, and delivery of effective cybersecurity training programs for all employee levels.
- Support the identification of critical training needs through analysis of risks, human factor considerations, and regulatory requirements.
- Assist in leveraging diverse training methodologies (e.g., e-learning, interactive workshops, simulated exercises, micro-learning modules) to maximize engagement and knowledge retention.
- Collaborate with instructional designers and subject matter experts to create compelling training content.
- Help manage the logistics and deployment of training initiatives, ensuring broad reach and consistent delivery.
Awareness Campaign Support & Content Creation:
- Support the development and execution of dynamic, organization-wide cybersecurity awareness campaigns aimed at driving behavioral change.
- Assist in creating engaging and accessible multimedia content (e.g., articles, infographics, videos, interactive quizzes, gamified challenges) to reinforce key awareness messages.
- Utilize data and metrics to help measure the effectiveness of awareness campaigns and contribute to optimizing content and delivery channels.
- Stay informed about current cyber threats and industry trends to ensure awareness content is timely and relevant.
Program Support:
- Assist in managing program budgets, allocating resources, and tracking project timelines for engagement, training, and awareness initiatives.
- Contribute to developing and tracking key performance indicators (KPIs) and metrics to measure program effectiveness, providing input for reports to leadership.
- Research and recommend best practices, innovative tools, and emerging technologies to enhance the overall effectiveness of cyber engagement, training, and awareness functions.
Desired Qualifications:
- Industry certifications such as CISSP, CISM, CRISC, CompTIA Security or similar
- Prior experience in training on Cybersecurity topics
- Ability to simplify & explain complex concepts in Cybersecurity/ Risk management
- Ability to build relationships and collaborate effectively with diverse stakeholders.
- Good organizational and analytical skills, with an ability to support multiple initiatives concurrently.
- Strong interpersonal & leadership skills
- Problem-solving & critical thinking
- Adaptability & continuous learning mindset
