About this role:

Wells Fargo is seeking a Lead Operational Risk Officer. We believe in the power of working together because great ideas can come from anyone. Through collaboration, any employee can have an impact and make a difference for the entire company. Explore opportunities with us for a career in a supportive environment where you can learn and grow

In this role, you will:

• Develop, implement, and monitor risk-based programs to identify, assess, and mitigate any operational risk that arises from inadequate or failed internal processes, people, systems, or external events
• Maintain a balance between risk mitigation and operational efficiency
• Evaluate the adequacy and effectiveness of policies, procedures, processes, systems, and internal controls
• Analyze extremely complex business and system changes to determine impact, identify operational risk issues and participate in the development of risk ratings
• Provide operational risk expertise and consulting to complex business units for initiatives with high risk, generally spanning multiple business lines
• Design and develop the most complex testing strategies, methodologies and analyses
• Consult with the business to develop corrective action plans and effectively manage change
• Identify training opportunities
• Design and coordinate the development of training materials and coordinate or deliver training
• Report findings and develop business cases to influence executive management, management committee member or head of business on the need for controls to mitigate risk
• Collaborate and consult with peers, colleagues, and managers to resolve issues and achieve goals
• Lead project or virtual teams and mentor less experienced staff

• 5 + years of Operational Risk experience, or equivalent demonstrated through one or a combination of the following: work experience, training, military experience, education

• The Candidate should possess direct technology and information security related work experience along with the following:
• Testing practitioner is desirable but at a minimum, deep working experiences in risk management functions or technical auditing in technology, information and cyber security programs.
• Deep knowledge technology and security organization practices, in industry frameworks (e.g., COBIT, ISO, NIST, PCI-DSS, SWIFT), tools and technologies, operations, risk management processes, principles, architectural requirements, including incident response methodologies and related laws, rules, and regulations (e.g., GLBA, FFIEC Handbook).
• Excellent analytical and problem-solving skills, inquisitive nature and comfort challenging current practices to drive efficiency and standardization
• Ability to deliver and synthesize technology, information and cyber security risk using simple business risk acumen by applying strong Banking products and services knowledge
• Knowledgeable in Banking and Investment products and their processes preferred, but not required.
• Desired applicable certification(s) in Risk Management, Agile, and Testing: Certified Scrum Master, Certified Associate in Software Testing, Certified Software Quality Analyst Certification, International Software Testing Qualifications Board, Certified Manager of Software Testing, Certified Software Tester Certified Information Systems Auditor, Certified Information Security Manager, Certified Information Systems Security Professional, Information Technology Infrastructure Library, Certified in Risk and Information Systems Control

• Perform independent review on testing approaches, methodologies, lifecycle, and adequacy of end-to-end testing align to requirements or user stories. Testing includes, but not limited to, User Acceptance Testing, Systems Integration Testing, Unit Testing, Regression Testing, and DevOp automated testing.
• Ability to review, interpret, and evaluate programming codes for automated testing.
• Be a Subject Matter Expert to the Testing Principles in Agile Framework and Waterfall Methodology
• Develop, implement, and monitor risk-based programs to identify, assess, and mitigate any operational risk that arises from inadequate or failed internal processes, people, systems, or external events
• Maintain a balance between risk mitigation and operational efficiency
• Evaluate the adequacy and effectiveness of policies, procedures, processes, systems, and internal controls
• Analyze extremely complex business and system changes to determine impact, identify operational risk issues and participate in the development of risk ratings