Senior Information Security Analyst - IPD - CCAS

Overview

Hands-on technical role focused on cryptographic controls, automation and remediation execution, serving as a senior information security analyst within Wells Fargo's IPD CCAS group.

What you'll do

• Provide information security consultation to improve awareness and compliance with Enterprise Information Security policy, processes and standards.
• Perform remediation of security assessment review issues, complex ad hoc data, and reporting to support information security risk management.
• Provide guidance and direction in reviewing assessment findings and mitigating controls to optimize information security.
• Identify and direct information asset portfolio reconciliations and certifications.
• Provide advanced data aggregation and data of information security risk exposure.
• Develop and deliver Information Security Education Awareness and Training in accordance with the Enterprise Information Security Program standards.
• Review draft and proposed control standards for business impact and recommend modifications or clarifications as required.
• Conduct security control testing and consultation with stakeholders.
• Evaluate and interpret internal and Enterprise Information Security policies, processes and standards, and provide recommendations to improve them.
• Collaborate and consult with peers, colleagues, and managers to resolve issues and achieve goals.
• Interact with internal customers.
• Serve as a mentor to less experienced staff.
• Analyze and interpret security data to identify cryptographic vulnerabilities, non-adherence, and configuration gaps across enterprise platforms.
• Drive remediation of non-compliant digital certificates, encryption configurations, and key management practices in alignment with policy and control requirements.
• Build automation solutions using Python, SQL, and APIs to streamline data ingestion, analysis, and remediation tracking.
• Integrate cryptographic controls into automated workflows and SDLC processes to ensure consistent application of standards.
• Leverage enterprise tools including Qualys, Venafi, Tanium, and ServiceNow to manage detection, tracking, and remediation of cryptographic issues.
• Design scalable, end-to-end solutions to improve visibility into cryptographic risk and control effectiveness.
• Support certificate lifecycle management activities, including discovery, validation, renewal, and removal of non-adherent certificates.
• Troubleshoot PKI-related issues, certificate misconfigurations, and key management lifecycle gaps.
• Partner with application and infrastructure teams to provide guidance, resolve issues, and accelerate remediation timelines.
• Communicate findings, risk impacts, and remediation priorities to stakeholders to enable informed decision-making.

What you'll need

• 4+ years of Information Security Analysis experience, or equivalent demonstrated through one or a combination of the following: work experience, training, military experience, education.

Nice to have

• Experience in information security, cryptography, cybersecurity engineering, or control execution.
• Strong understanding of cryptographic concepts including PKI, digital certificates, encryption, and key management lifecycle controls.
• Experience with vulnerability and certificate scanning tools such as Qualys and Venafi.
• Experience with endpoint or infrastructure scanning platforms such as Tanium.
• Strong hands-on experience with Python, SQL, and API integration for automation and data processing.
• Experience using ServiceNow or similar platforms for remediation tracking, workflow orchestration, and ticket management.
• Ability to analyze large datasets, identify root causes, and drive remediation of complex security issues.
• Strong troubleshooting skills across cryptographic implementations, system configurations, and data sources.
• Understanding of security policies, control requirements, and governance expectations related to cryptographic controls.
• Experience with enterprise certificate lifecycle management and PKI governance processes.
• Experience building automated workflows for vulnerability detection, remediation tracking, and reporting.
• Experience integrating security platforms and consolidating data across systems of record.
• Experience with data visualization or reporting tools to support risk and control transparency.
• Familiarity with SDLC integration and embedding security controls into development workflows.
• Experience supporting audit, evidence generation, and control validation activities.
• Demonstrated ability to design scalable solutions that improve control consistency and reduce manual effort.

Details

• Location: Bengaluru, India.
• Posting end date: 16 Nov 2026.