Senior Lead Control Management Officer - Cloud Platform

Wells Fargo is seeking a Senior Lead Control Management Officer to lead the Technology Controls engagement with the Cloud Platform organization. This role will provide strategic control oversight and risk leadership for enterprise infrastructure services, cloud platform adoption, platform engineering, and control modernization initiatives focused on Control-as-Code, automated governance, and continuous control monitoring.

The individual will partner closely with Infrastructure Engineering leaders, Cloud Platform Engineering, Information Security, Technology Risk, Audit, and Control Management teams to establish and maintain a strong control environment that enables secure technology transformation while ensuring regulatory compliance and operational resilience.

This role will be responsible for risk identification and assessment, control design and evaluation, issue management, governance reporting, regulatory engagement, and the advancement of automation strategies that embed controls directly into technology delivery pipelines.

In This Role, You Will

• Act as a trusted advisor to senior technology and control management leaders in developing risk mitigation strategies for highly complex infrastructure and cloud-related risks.
• Lead the design, implementation, and continuous improvement of control frameworks supporting: Infrastructure Engineering, Cloud Platforms (Azure, GCP, OpenShift, Kubernetes), Storage, Compute, Network, Database, and Middleware Services, Platform Engineering initiatives, Control-as-Code implementations.
• Provide strategic oversight of enterprise technology risk, operational risk, resiliency risk, and regulatory compliance requirements.
• Monitor, measure, evaluate, and report on the effectiveness of controls and risk mitigation strategies.
• Lead assessment and remediation activities associated with audits, regulatory examinations, horizontal reviews, and independent testing.
• Drive proactive identification of emerging technology risks associated with cloud adoption, automation, AI-enabled infrastructure operations, and platform modernization.
• Serve as a key control partner within infrastructure transformation programs and cloud migration initiatives.
• Lead complex risk and control governance activities, including preparation of executive-level reporting, risk committee materials, and regulatory updates.
• Mentor and guide control officers and virtual teams supporting technology control execution.

Specific Responsibilities

Infrastructure & Cloud Risk Management

• Develop and maintain risk and control frameworks supporting enterprise infrastructure services.
• Assess risks related to cloud adoption, hybrid cloud architectures, platform engineering, and infrastructure modernization.
• Evaluate control effectiveness across compute, storage, networking, databases, container platforms, virtualization, and cloud-native services.
• Identify control gaps and partner with technology leaders to develop sustainable remediation strategies.

Control-as-Code Modernization

• Lead the adoption of Control-as-Code principles across Infrastructure Engineering and Cloud Platforms.
• Partner with engineering teams to embed automated controls within CI/CD, Infrastructure-as-Code, and platform deployment processes.
• Drive implementation of continuous compliance monitoring and automated evidence collection.
• Establish governance standards and operating models for automated preventive, detective, and corrective controls.
• Promote measurable reductions in manual control execution and testing activities through automation.

Regulatory & Audit Engagement

• Ensure alignment with enterprise policies, standards, and regulatory expectations.
• Partner with Audit, Compliance, Independent Risk Management, and regulators during reviews and examinations.
• Coordinate issue management activities, including root-cause analysis and sustainable corrective action plans.
• Provide risk and control expertise during regulatory remediation efforts.

Risk Analytics & Governance

• Analyze KRI, issue, control testing, and operational loss data to identify systemic risk trends.
• Lead control health reporting and executive risk dashboards.
• Support risk appetite monitoring and governance forums.
• Present findings and recommendations to senior technology executives and control committees.

Strategic Technology Transformation

• Serve as the control management lead for major infrastructure and cloud transformation programs.
• Evaluate technology modernization initiatives through a risk and controls lens.
• Influence technology strategy by integrating governance, resiliency, security, and compliance requirements into engineering processes.
• Drive adoption of scalable control solutions that enable innovation while maintaining strong risk management practices., Employees support our focus on building strong customer relationships balanced with a strong risk mitigating and compliance-driven culture which firmly establishes those disciplines as critical to the success of our customers and company. They are accountable for execution of all applicable risk programs (Credit, Market, Financial Crimes, Operational, Regulatory Compliance), which includes effectively following and adhering to applicable Wells Fargo policies and procedures, appropriately fulfilling risk and compliance obligations, timely and effective escalation and remediation of issues, and making sound risk decisions. There is emphasis on proactive monitoring, governance, risk identification and escalation, as well as making sound risk decisions commensurate with the business unit’s risk appetite and all risk and compliance program requirements.

• 7+ years of Risk Management or Financial Services Industry experience, or equivalent experience demonstrated through one or a combination of the following: work experience, training, military experience, education
• 7+ years of Control Management, Technology Risk, Information Security, or Audit experience
• 5+ years supporting large-scale technology organizations

Desired Qualifications

• Deep understanding of: Cloud Security, Platform Engineering, Infrastructure-as-Code, DevSecOps, Site Reliability Engineering (SRE), Control Automation, Continuous Compliance Monitoring.
• Experience implementing Control-as-Code frameworks.
• Knowledge of OCC Heightened Standards, FFIEC guidance, NIST, COBIT, and enterprise technology policies.
• Experience supporting large-scale infrastructure modernization, cloud migration, or digital transformation programs.
• Relevant certifications: CRISC, CISA, CISSP / CCSP, AWS/Azure/GCP Cloud Certifications, CGRC, ITIL.

Wells Fargo maintains a drug free workplace. Please see our Drug and Alcohol Policy (https://www.wellsfargojobs.com/en/wells-fargo-drug-and-alcohol-policy) to learn more.

Wells Fargo Recruitment and Hiring Requirements:

a. Third-Party recordings are prohibited unless authorized by Wells Fargo.

b. Wells Fargo requires you to directly represent your own experiences during the recruiting and hiring process.