Lead DLP Content Development Information Security Engineer

Wells Fargo is seeking a Lead DLP Content Development Information Security Engineer with deep expertise in Data Loss Prevention (DLP) and reporting development using tools such as Tableau & PowerBI. This role is responsible for supporting the designing, authoring, testing, and tuning DLP rules that protect sensitive data across email, endpoints, web, and SaaS/collaboration channels. In addition, this role will support development & maintenance of reporting dashboards. The ideal candidate will bring broad set reporting tooling experiences (Tableau, Power BI, etc), is innovative and resourceful with a passion to turn data/metrics into meaningful and relevant insights enabling businesses to drive changes and prioritization to secure WF data in on-prem and on-cloud environments.    Metrics and insights will also be generated to drive EDLP Team’s prioritization.  The candidate must love learning and exploring existing and new tools to support the strategy.

In this role, you will:

• Provide advanced information security reporting and metrics strategy and implementation platform
• Engage and influence stakeholders within ICS and partners on net new or on material changes to reporting
• Leverage existing platforms (data lake, splunk, etc.) to generate insights
• Provide consulting on security risk assessment and research, and recommend remediation plans and strategies
• Support the development, maintenance, and optimization DLP rules and policies using techniques such as:
  • Regular expressions
  • Keyword and dictionary‑based detection
  • Exact Data Match (EDM) / Indexed Data Match (IDM)
  • Document fingerprinting
  • Machine‑learning classifiers
  • Classification labels and metadata
• Develop, maintain, and update reporting dashboards in Tableau and PowerBi.
• Assist an aid in other development efforts related to automation, AI prompts, and other non-DLP policy development efforts.
• Conduct technical investigations of security events and incidents, including post‑incident analysis and digital forensics, to identify root causes and recommend long‑term mitigation strategies.
• Continuously tune DLP policies to reduce false positives and negatives using telemetry, triage feedback, and controlled experimentation, measure and report precision, recall, and block efficacy.
• Manage DLP policy‑as‑code artifacts using version control, peer review, and change‑management processes, maintaining traceability from requirement to implementation.
• Develop and maintain:
  • Operational runbooks
  • Exception and release‑code workflows
  • User‑facing guidance and FAQs
  • Release notes for policy updates and changes
• Define, track, and report key performance and risk indicators (KPIs/KRIs), including alert volumes, false-positive rates, channel coverage, and policy maturity.
• Support audits and regulatory exams by preparing evidence, maintaining documentation, and supporting quarterly and annual reviews.
• Align DLP rules and enforcement with Wells Fargo’s information classification and labeling program, ensuring consistent use of tags and labels in policy conditions.
• Collaborate cross‑functionally with Information Protection, Risk, Legal, Messaging & Collaboration, Endpoint, and Cloud teams to safely deploy and evolve controls.
• Mentor peers and contribute to standards, reusable patterns, and best practices for DLP engineering and security content development.

Required Qualifications:

• 5+ years of Engineering experience, or equivalent demonstrated through work experience, training, military service, or education
• 3+ years of Information Security Metrics and Reporting background
• Scripting and query proficiency (Powershell, SQL, and/or Python) and experience working in Git‑based version control and CI/CD workflows
• Experience leading development of reporting and dashboards in Tableau and PowerBI

Desired Qualifications:

• 5+ years of experience in information protection, DLP engineering, or security content development
• Hands‑on experience authoring and managing policies on one or more enterprise DLP platforms, such as:
  • Microsoft Purview
  • Broadcom (Symantec) DLP
  • Forcepoint
  • Proofpoint
  • Zscaler
  • or equivalent technologies
• Familiarity with modern collaboration and productivity platforms, including: Microsoft 365 (Exchange, SharePoint, OneDrive, Teams) and/or Google Workspace
• Excellent written communication and documentation skills, with the ability to communicate effectively to both technical and non‑technical audiences
• Experience in Technical Storytelling: Ability to learn, understand, and present modules to users
• Experience in financial services or other highly regulated industries, with familiarity with:
  • NIST 800‑53 / 800‑171
  • ISO/IEC 27001
  • Data privacy and protection requirements
• Knowledge of endpoint DLP, CASB/SSE, secure web gateways, email security, OCR, and document fingerprinting technologies
• Background in exception governance and release‑code processes, balancing risk exposure, business needs, and user experience
• Relevant certifications such as:
  • SC‑400 or SC‑100
  • CISSP, CCSP
  • GIAC

Job Expectations

• Ability to travel up to 10% of the time.
• Ability to work a hybrid work schedule – 3 days a week on-site/in office and 2 days a week remote.
• This position is not eligible for Visa sponsorship

Locations

• 300 South Brevard, Charlotte, NC
• 2600 S. Price Road, Chandler, AZ

DO NOT ADD:

This position is to backfill Anjani Nanduri- WRT ID-13363.

Posting End Date: 

*Job posting may come down early due to volume of applicants.

We Value Equal Opportunity

Wells Fargo is an equal opportunity employer. All qualified applicants will receive consideration for employment without regard to race, color, religion, sex, sexual orientation, gender identity, national origin, disability, status as a protected veteran, or any other legally protected characteristic.

Employees support our focus on building strong customer relationships balanced with a strong risk mitigating and compliance-driven culture which firmly establishes those disciplines as critical to the success of our customers and company. They are accountable for execution of all applicable risk programs (Credit, Market, Financial Crimes, Operational, Regulatory Compliance), which includes effectively following and adhering to applicable Wells Fargo policies and procedures, appropriately fulfilling risk and compliance obligations, timely and effective escalation and remediation of issues, and making sound risk decisions. There is emphasis on proactive monitoring, governance, risk identification and escalation, as well as making sound risk decisions commensurate with the business unit’s risk appetite and all risk and compliance program requirements.

Candidates applying to job openings posted in Canada: Applications for employment are encouraged from all qualified candidates, including women, persons with disabilities, aboriginal peoples and visible minorities. Accommodation for applicants with disabilities is available upon request in connection with the recruitment process.

Applicants with Disabilities

To request a medical accommodation during the application or interview process, visit Disability Inclusion at Wells Fargo.

Drug and Alcohol Policy

Wells Fargo maintains a drug free workplace.  Please see our Drug and Alcohol Policy to learn more.

Wells Fargo Recruitment and Hiring Requirements:

a. Third-Party recordings are prohibited unless authorized by Wells Fargo.

b. Wells Fargo requires you to directly represent your own experiences during the recruiting and hiring process.