Technology Director - BISO

About this role:

Wells Fargo is seeking a Business Information Security Officer (BISO). The BISO is the senior cybersecurity leader accountable for aligning cyber risk outcomes to the objectives, priorities, and risk appetite of an assigned Line of Business (LOB). 

The successful candidate will partner across business, technology, risk, compliance, audit, and cybersecurity functions to translate complex security issues into business decisions, drive remediation of priority risks, and provide clear executive visibility into the LOB’s cyber posture. 

Key Responsibilities 

Cyber Risk Leadership 

• Own the cybersecurity risk posture for the assigned business unit, including risk identification, prioritization, mitigation planning, and ongoing control effectiveness. 

• Partner with business and technology leaders to translate cyber threats, vulnerabilities, and control gaps into actionable business risk decisions. 

• Monitor emerging threats and material risk trends to proactively inform risk acceptance, remediation, and investment priorities. 

Strategic Business Partnership 

• Serve as the trusted cybersecurity advisor to executive leadership by framing risk tradeoffs, business impacts, and recommended actions. 

• Embed security guidance into business initiatives, digital transformation efforts, and strategic programs without slowing delivery. 

• Align cybersecurity priorities with LOB objectives, enterprise standards, and defined risk appetite. 

Governance and Executive Reporting 

• Lead concise executive reporting for governance forums, risk committees, and senior leadership decision-making. 

• Present risk trends, control effectiveness, remediation progress, and emerging threats through clear dashboards, scorecards, and briefings. 

• Represent cybersecurity priorities in governance forums and drive accountability for timely risk decisions. 

Regulatory and Compliance Oversight 

• Partner with Risk, Compliance, Audit, and Regulatory Relations teams to address cybersecurity requirements. 

• Support internal and external audits, examinations, and regulatory reviews. 

• Ensure alignment with enterprise policies, standards, risk frameworks, and regulatory obligations. 

• Facilitate issue management and remediation activities. 

Stakeholder Engagement 

• Build relationships across business units, CIO organizations, risk teams, and cybersecurity domains. 

• Coordinate with security architecture, application security, vulnerability management, identity and access management, and other cyber teams. 

• Act as an escalation point for significant cyber risks and security concerns. 

• Drive accountability and ownership for security outcomes across business stakeholders. 

Artificial Intelligence

• Demonstrate foundational AI literacy by effectively using approved AI tools to support everyday work
• Apply AI tools for activities such as research, summarization, drafting, analysis, and decision support
• Exercise sound judgment when interpreting and using AI‑generated outputs
• Understand basic AI limitations and appropriate use cases within daily workflows
• Adhere to data privacy, security, and data‑handling standards when using AI tools
• Use AI ethically and responsibly, in alignment with company policies and guidelines

Success Measures 

During the first 12 months, the BISO will be expected to: 

• Establish trusted advisor relationships with key business and technology executives. 

• Develop and maintain a comprehensive cyber risk profile for the assigned business. 

• Improve visibility of cyber risk through executive reporting and governance. 

• Drive measurable reduction of prioritized cyber risks. 

• Enhance compliance with security policies and regulatory requirements. 

• Strengthen collaboration across cybersecurity, technology, and business teams. 

Required Qualifications:

• 10+ years of Technology Strategic Leadership experience, or equivalent demonstrated through one or a combination of the following: work experience, training, military experience, education
• 10+ years of cybersecurity, technology risk, or information security experience, including significant leadership responsibility
• 4+ years of management or leadership experience
• ​3+ years in a senior security leadership role such as BISO, CISO, Deputy CISO, or equivalent. 

Desired Qualifications:

• Demonstrated ability to influence without direct authority and lead cross-functional initiatives in a complex, matrixed environment. 

• Exceptional executive communication skills, including the ability to translate complex technical issues into business language for C-level executives, regulators, and senior stakeholders. 

• Strong comfort operating through ambiguity, quantifying risk concepts, brokering agreement across competing priorities, and managing multiple stakeholder demands. 

• Financial services cybersecurity experience or comparable experience in another highly regulated industry such as utilities, health care, or government. 

• ​Deep knowledge of cybersecurity frameworks, technology risk management, regulatory requirements, security governance, incident response, and threat management
• Industry certifications such as: CISSP, CISM, CRISC, CISA, CGEIT
• Experience supporting regulatory examinations
• Experience working with enterprise risk management frameworks
• Experience developing executive cybersecurity reporting and metrics​

Job Expectations:

• Ability to work outside of normal business hours as needed 
• Ability to travel up to 10% of the time
• This role is not eligible for visa sponsorship now or in the future
• This role is not eligible for relocation assistance  

Posting End Date: 

*Job posting may come down early due to volume of applicants.

We Value Equal Opportunity

Wells Fargo is an equal opportunity employer. All qualified applicants will receive consideration for employment without regard to race, color, religion, sex, sexual orientation, gender identity, national origin, disability, status as a protected veteran, or any other legally protected characteristic.

Employees support our focus on building strong customer relationships balanced with a strong risk mitigating and compliance-driven culture which firmly establishes those disciplines as critical to the success of our customers and company. They are accountable for execution of all applicable risk programs (Credit, Market, Financial Crimes, Operational, Regulatory Compliance), which includes effectively following and adhering to applicable Wells Fargo policies and procedures, appropriately fulfilling risk and compliance obligations, timely and effective escalation and remediation of issues, and making sound risk decisions. There is emphasis on proactive monitoring, governance, risk identification and escalation, as well as making sound risk decisions commensurate with the business unit’s risk appetite and all risk and compliance program requirements.

Candidates applying to job openings posted in Canada: Applications for employment are encouraged from all qualified candidates, including women, persons with disabilities, aboriginal peoples and visible minorities. Accommodation for applicants with disabilities is available upon request in connection with the recruitment process.

Applicants with Disabilities

To request a medical accommodation during the application or interview process, visit Disability Inclusion at Wells Fargo.

Drug and Alcohol Policy

Wells Fargo maintains a drug free workplace.  Please see our Drug and Alcohol Policy to learn more.

Wells Fargo Recruitment and Hiring Requirements:

a. Third-Party recordings are prohibited unless authorized by Wells Fargo.

b. Wells Fargo requires you to directly represent your own experiences during the recruiting and hiring process.