About the role:
The Senior Lead Control Management Officer will serve as an important member of the Technology Control Management organization, supporting Technology Development / Chief Development Experience Office. This role is responsible for helping strengthen the control environment within Software Development Lifecycle and Application Management Lifecycle. The individual will partner closely with technology, cybersecurity, enterprise risk, asset management, procurement, and other stakeholders to identify risks, assess controls, monitor control effectiveness, and support sustainable remediation activities.
In this role, you will:
- Support the design, implementation, and ongoing enhancement of the control environment across the Software Development Lifecycle (SDLC) and Application Lifecycle Management (ALM), including solution design, development, testing, release, deployment, and ongoing application maintenance.
- Identify and assess technology development risks, including insecure design or coding practices, inadequate testing, unauthorized changes, segregation-of-duties conflicts, deployment failures, open-source and third-party software exposure, and gaps in development-tool governance.
- Provide risk and control oversight for secure software development practices, including requirements traceability, code review, vulnerability management, software composition analysis, secrets management, and remediation of security findings.
- Partner with engineering, cybersecurity, architecture, infrastructure, and product stakeholders to embed preventive and detective controls into development workflows, CI/CD pipelines, and release processes.
- Monitor control effectiveness and develop metrics, reporting, and governance routines that provide transparency into control performance, policy compliance, risk trends, exceptions, and remediation progress.
- Drive risk and control activities in alignment with enterprise programs such as Risk and Control Self-Assessment (RCSA), risk identification, control evaluation, issue management, and remediation validation.
- Review technology development policies, standards, procedures, and process documentation to confirm risks are appropriately addressed and controls are clearly defined, consistently executed, evidenced, and sustainable.
- Support governance and reporting for senior leadership by communicating key control themes, emerging development risks, issue status, exceptions, and risk-mitigation activities.
- Collaborate across first-line, second-line, audit, and technology teams to support reviews, examinations, audit activity, and continuous improvement of the Technology Development control environment.
Required Qualifications:
- 5+ years of Risk Management, Control Management, Operational Risk, Technology Risk, or equivalent demonstrated through one or a combination of the following: work experience, training, military experience, education
- 4+ years of experience supporting risk and control programs in a technology, operations, or enterprise risk environment
Desired Qualifications:
- Knowledge of IT, information security and Cloud management and control frameworks (e.g. NIST Cybersecurity Framework and 800-53, CIS Top 20 Critical Security Controls, FFIEC IT Examination Handbooks, COBIT, FedRAMP, ISO 2700x, ITIL.
- Strong control evaluation/testing and/or Audit experience: Experience in assessing risk, drafting, and executing test scripts, identifying gaps between controls and in control execution, assessing issues and trends, and influencing change
- Strong risk and control fundamentals experience
- Comprehensive understanding of risk types, methodologies, and frameworks for evaluating or testing controls and assessing results, conducting research, and identifying control deficiencies.
- Clear understanding of technology risk acumen
- Clear understanding of policies and standards associated with Technology and Cyber Security Risk
- Experience leading and providing feedback to staff on audit projects or engagements
- Experience at a financial institution or accounting firm.
- A BS/BA degree or higher.
- Excellent verbal, written, and interpersonal communication skills.
Job Expectations:
- Ability to work onsite on a hybrid schedule per Wells Fargo's standard operating model in one of the listed locations
- This position is not eligible for Visa sponsorship
Work Locations:
· 401 S. Tryon, Charotte, NC 28202
· 2700 S Price Rd. - Chandler, AZ 85286
· 401 Las Colinas Blvd W. - Irving, TX 75039
Pay Range
Reflected is the base pay range offered for this position. Pay may vary depending on factors including but not limited to demonstrated examples of prior performance, skills, experience, or work location. Employees may also be eligible for incentive opportunities.
$77,000.00 - $121,000.00
Benefits
Wells Fargo provides eligible employees with a comprehensive set of benefits, many of which are listed below. Visit Benefits - Wells Fargo Jobs for an overview of the following benefit plans and programs offered to employees.
- Health benefits
- 401(k) Plan
- Paid time off
- Disability benefits
- Life insurance, critical illness insurance, and accident insurance
- Parental leave
- Critical caregiving leave
- Discounts and savings
- Commuter benefits
- Tuition reimbursement
- Scholarships for dependent children
- Adoption reimbursement
Posting End Date:
25 Oct 2026
*Job posting may come down early due to volume of applicants.
We Value Equal Opportunity
Wells Fargo is an equal opportunity employer. All qualified applicants will receive consideration for employment without regard to race, color, religion, sex, sexual orientation, gender identity, national origin, disability, status as a protected veteran, or any other legally protected characteristic.
Employees support our focus on building strong customer relationships balanced with a strong risk mitigating and compliance-driven culture which firmly establishes those disciplines as critical to the success of our customers and company. They are accountable for execution of all applicable risk programs (Credit, Market, Financial Crimes, Operational, Regulatory Compliance), which includes effectively following and adhering to applicable Wells Fargo policies and procedures, appropriately fulfilling risk and compliance obligations, timely and effective escalation and remediation of issues, and making sound risk decisions. There is emphasis on proactive monitoring, governance, risk identification and escalation, as well as making sound risk decisions commensurate with the business unit’s risk appetite and all risk and compliance program requirements.
Applicants with Disabilities
To request a medical accommodation during the application or interview process, visit Disability Inclusion at Wells Fargo.
Drug and Alcohol Policy
Wells Fargo maintains a drug free workplace. Please see our Drug and Alcohol Policy to learn more.
Wells Fargo Recruitment and Hiring Requirements:
a. Third-Party recordings are prohibited unless authorized by Wells Fargo.
b. Wells Fargo requires you to directly represent your own experiences during the recruiting and hiring process.
