Senior Information Security Analyst - IPD - SAS

Wells Fargo is seeking a Senior Information Security Analyst to lead automation and technical execution for Information Protection Domain (IPD) controls, including the prevention of production data in non-production environments, enterprise data scanning, and Data Loss Prevention (DLP).

• Provide information security consultation to improve awareness and compliance with Enterprise Information Security policy, processes and standards
• Perform remediation of security assessment review issues, complex ad hoc data, and reporting to support information security risk management
• Provide guidance and direction in reviewing assessment findings and mitigating controls to optimize information security
• Identify and direct information asset portfolio reconciliations and certifications
• Provide advanced data aggregation and data of information security risk exposure
• Develop and deliver Information Security Education Awareness and Training in accordance with the Enterprise Information Security Program standards
• Review draft and proposed control standards for business impact and recommend modifications or clarifications as required
• Conduct security control testing and consultation with stakeholders
• Evaluate and interpret internal and Enterprise Information Security policies, processes and standards, and provide recommendations to improve them
• Collaborate and consult with peers, colleagues, and managers to resolve issues and achieve goals
• Interact with internal customers
• Serve as a mentor to less experienced staff

• 4+ years of Information Security Analysis experience, or equivalent demonstrated through one or a combination of the following: work experience, training, military experience, education

• Experience in information security, data protection, or technical control execution
• Strong experience with Python or similar scripting language for automation, data processing, and workflow development
• Experience with data scanning and/or classification tools and processes
• Knowledge of Data Loss Prevention (DLP) and data protection controls
• Experience working with databases, data pipelines, and large-scale data processing
• Experience with ServiceNow or similar workflow platforms for automation, intake, or case management
• Strong troubleshooting and problem-solving skills across systems, data, and automation workflows
• Experience building end-to-end automation solutions supporting security or risk controls
• Familiarity with enterprise data scanning platforms and control lifecycle processes
• Experience integrating automation across multiple platforms and tools
• Experience with workflow orchestration and pipeline optimization
• Experience with data analysis and reporting to support control effectiveness and risk insights
• Demonstrated ability to scale technical solutions across distributed teams and environments
• Understanding of security risk, control requirements, and control execution processes
• Experience supporting large-scale transformation from manual to automated control execution

• This role focuses on building and scaling automation to replace manual and semi-automated processes, enabling consistent control execution and enterprise scalability.
• Design, develop, and implement end-to-end automation solutions across data scanning, validation, and control workflows.
• Design, build, and maintain automation solutions for IPD control execution, including scanning, validation, and DLP workflows
• Develop scripts and pipelines (e.g., Python), and services to support data scanning and classification processes
• Automate control activities, including evidence collection, validation, and compliance tracking
• Integrate automation with enterprise platforms, such as ServiceNow for workflow intake, orchestration, and case management
• Build and optimize data pipelines and processing workflows to support large-scale scanning and analysis
• Troubleshoot and resolve issues across automation workflows, data pipelines, and control execution processes
• Partner with control owners, SMEs, and stakeholders to translate control requirements into scalable technical solutions
• Partner with various stakeholders, across multiple domains, to improve control efficiency, reduce operational risk, and support the expansion of enterprise data protection capabilities.
• Analyze control execution data to identify opportunities for automation, optimization, and risk reduction
• Support DLP integration and automation to improve detection, response, and control coverage
• Ensure alignment with enterprise risk and control frameworks and Information Security policies