Cloud Security Program and Transformation… at Wells Fargo · Irving

Cloud Security Program and Transformation Leader - Technology Director

Location: MCLEAN, VA

Wells Fargo is back in the office colborating for fabulous outcomes!

This role is a hybrid position and in the office three days a week and work from home two days a week.

There are no visa sponsorship or visa transfers.

Wells Fargo is seeking a Technology Director to lead Cloud and SaaS Security Posture and Vulnerability Management. We need a technically credible cloud security leader who can challenge assumptions, navigate technical pushback, and drive vulnerabilities through remediation with urgency.

This leader will partner directly with cloud, platform, infrastructure, and application teams to establish clear ownership and accountability for security issues. The ideal candidate combines deep cloud security expertise with strong relationship and influencing skills, using technical knowledge to ask the right questions, validate responses, remove roadblocks, and drive timely remediation.

We are looking for someone who has successfully handled this type of challenge before and can add value quickly. Experience with cloud vulnerability and posture management technologies, including Wiz or comparable CNAPP/CSPM platforms, SSPM tools, major cloud platforms, and container environments, is important. This leader should be able to step into the environment, understand where the issues are, and begin driving the work without needing to learn cloud security or vulnerability remediation on the job.

In this role, you will:

• Lead cloud and SaaS security posture and vulnerability management across the enterprise.
• Quickly assess existing vulnerabilities, remediation processes, tooling, ownership, and gaps and establish priorities for action.
• Serve as a technical authority for cloud vulnerabilities, misconfigurations, container security, SaaS security, and posture risk.
• Drive technology and application teams to identify, prioritize, and remediate vulnerabilities within established SLAs.
• Use technical depth to challenge assumptions, validate remediation plans, and work through technical pushback or roadblocks.
• Lead response to critical and zero-day cloud vulnerabilities, coordinating exposure assessment and remediation across application, infrastructure, and platform teams.
• Establish clear remediation ownership, escalation paths, risk acceptance, and validation of fixes.
• Partner with Cloud Engineering, Platform, Application Security, Identity, Threat Intelligence, and Security Operations to strengthen preventive controls and secure-by-default cloud guardrails.
• Build trusted relationships with technology leaders and engineering teams while creating greater urgency and accountability around remediation.
• Use metrics and risk data to identify remediation gaps, trends, and areas requiring leadership attention.
• Provide executive-level KPIs and KRIs covering remediation, SLA performance, risk trends, and security posture.
• Assess and influence cloud security technologies and integrations, including CNAPP, CSPM, SSPM, CIEM, DSPM, and AI security posture capabilities.
• Manage strategic security platforms and vendors, including Wiz and SSPM providers.
• Lead and develop cloud security engineers and analysts while strengthening technical capabilities across the team.

Required Qualifications:

• 10+ years of technology strategic leadership experience, or equivalent demonstrated through one or a combination of the following: work experience, training, military experience, education
• 10+ years of experience in information security or technology, including 5+ years focused on cloud security, and prior leadership of technical teams.
• 4+ years of management or leadership experience
• Hands-on expertise with Wiz or comparable CNAPP/CSPM platforms (such as Prisma Cloud, Microsoft Defender for Cloud or Orca).
• Experience running SSPM tools (such as AppOmni, Adaptive Shield or Obsidian) or managing SaaS security programs.
• Deep knowledge of at least one major cloud provider (Azure, GCP or AWS), including IAM, networking, Kubernetes/containers and cloud-native services.
• A proven track record of building and running vulnerability or posture management programs at enterprise scale.

Desired Qualifications:

• Experience applying software engineering concepts to technology delivery and operational decisions
• Skill in business analysis and business enablement to translate business needs into actionable technology requirements and outcomes
• Ability to guide platform management decisions involving reliability, lifecycle, and service considerations
• Knowledge of compliance requirements, risk controls, and cyber security management practices applicable to technology solutions
• Proven success managing projects, including plans, dependencies, risks, and delivery commitments
• Capability to develop strategy and translate priorities into technology roadmaps and execution plans
• Effective stakeholder relationship management across business and technology partners
• Experience in financial services or another highly regulated industry.
• Industry certifications such as CCSP, CISSP, CCSK, or cloud provider security certifications (AZ-500, AWS Security Specialty, GCP Professional Cloud Security Engineer).
• Experience with infrastructure as code (Terraform), policy as code (OPA/Rego) and automation or scripting (Python).
• Experience presenting to senior executives, risk committees and regulators.

Pay Range

Reflected is the base pay range offered for this position. Pay may vary depending on factors including but not limited to demonstrated examples of prior performance, skills, experience, or work location. Employees may also be eligible for incentive opportunities.
$215,000.00 - $355,000.00

Posting End Date:

15 Nov 2026

*Job posting may come down early due to volume of applicants.

We Value Equal Opportunity

Wells Fargo is an equal opportunity employer. All qualified applicants will receive consideration for employment without regard to race, color, religion, sex, sexual orientation, gender identity, national origin, disability, status as a protected veteran, or any other legally protected characteristic.

Employees support our focus on building strong customer relationships balanced with a strong risk mitigating and compliance-driven culture which firmly establishes those disciplines as critical to the success of our customers and company. They are accountable for execution of all applicable risk programs (Credit, Market, Financial Crimes, Operational, Regulatory Compliance), which includes effectively following and adhering to applicable Wells Fargo policies and procedures, appropriately fulfilling risk and compliance obligations, timely and effective escalation and remediation of issues, and making sound risk decisions. There is emphasis on proactive monitoring, governance, risk identification and escalation, as well as making sound risk decisions commensurate with the business unit’s risk appetite and all risk and compliance program requirements.

Applicants with Disabilities

To request a medical accommodation during the application or interview process, visit Disability Inclusion at Wells Fargo.

Drug and Alcohol Policy

Wells Fargo maintains a drug free workplace. Please see our Drug and Alcohol Policy to learn more.

Wells Fargo Recruitment and Hiring Requirements:

a. Third-Party recordings are prohibited unless authorized by Wells Fargo.

b. Wells Fargo requires you to directly represent your own experiences during the recruiting and hiring process.

c. Please be prepared to provide accurate information and supporting documentation in connection with any lawful employment and education verification conducted by Wells Fargo.