Senior Information Security Analyst - IPD - CCAS

About this role: Wells Fargo is seeking a Senior Information Security Analyst to serve as a hands-on technical contributor focused on cryptographic controls, automation, and remediation execution. In this role, you will: Provide information security consultation to improve awareness and compliance with Enterprise Information Security policy, processes and standards Perform remediation of security assessment review issues, complex ad hoc data, and reporting to support information security risk management Provide guidance and direction in reviewing assessment findings and mitigating controls to optimize information security Identify and direct information asset portfolio reconciliations and certifications Provide advanced data aggregation and data of information security risk exposure Develop and deliver Information Security Education Awareness and Training in accordance with the Enterprise Information Security Program standards Review draft and proposed control standards for business impact and recommend modifications or clarifications as required Conduct security control testing and consultation with stakeholders Evaluate and interpret internal and Enterprise Information Security policies, processes and standards, and provide recommendations to improve them Collaborate and consult with peers, colleagues, and managers to resolve issues and achieve goals Interact with internal customers Serve as a mentor to less experienced staff Required Qualifications: 4+ years of Information Security Analysis experience, or equivalent demonstrated through one or a combination of the following: work experience, training, military experience, education Desired Qualifications: Experience in information security, cryptography, cybersecurity engineering, or control execution Strong understanding of cryptographic concepts including PKI, digital certificates, encryption, and key management lifecycle controls Experience with vulnerability and certificate scanning tools such as Qualys and Venafi Experience with endpoint or infrastructure scanning platforms such as Tanium Strong hands-on experience with Python, SQL, and API integration for automation and data processing Experience using ServiceNow or similar platforms for remediation tracking, workflow orchestration, and ticket management Ability to analyze large datasets, identify root causes, and drive remediation of complex security issues Strong troubleshooting skills across cryptographic implementations, system configurations, and data sources Understanding of security policies, control requirements, and governance expectations related to cryptographic controls Experience with enterprise certificate lifecycle management and PKI governance processes Experience building automated workflows for vulnerability detection, remediation tracking, and reporting Experience integrating security platforms and consolidating data across systems of record Experience with data visualization or reporting tools to support risk and control transparency Familiarity with SDLC integration and embedding security controls into development workflows Experience supporting audit, evidence generation, and control validation activities Demonstrated ability to design scalable solutions that improve control consistency and reduce manual effort Job Expectations: Specializes in digital certificates, Public Key Infrastructure (PKI), encryption key management, and data protection controls across data at rest and in transit. Analyze large-scale security datasets to identify non-compliant cryptographic implementations, troubleshoot configuration issues, and drive remediation across enterprise platforms such as Qualys, Venafi, Tanium, and ServiceNow. This role will design and implement automation solutions using Python, SQL, and APIs to improve visibility, reduce manual analysis, and enable scalable enforcement of cryptographic standards. In addition to technical execution, integrate policy-aligned cryptographic baselines into