Technology Director

Wells Fargo is seeking a Technology Director to lead vulnerability management and application security capabilities within Wealth and Investment Management Technology (WIMT). This senior technology leadership role will be responsible for advancing a proactive, scalable, and risk-based approach to identifying, prioritizing, remediating, and preventing technology vulnerabilities across applications, infrastructure, cloud, container, open-source, and hybrid technology environments.
This leader will provide strategic direction for the vulnerability management function and work across Technology, Cybersecurity, Risk, Audit, Product, Engineering, and other key stakeholders to strengthen governance, accountability, engineering practices, and measurable risk reduction.
The Technology Director will lead a federated operating model that combines centralized vulnerability-management leadership with accountability across technology and product organizations. The role will also drive increased adoption of secure software development, DevSecOps, automation, authoritative vulnerability data, reusable remediation approaches, and responsible use of AI to improve vulnerability-management effectiveness and efficiency.
Success in this role will be measured by the organization's ability to reduce vulnerability exposure, prioritize remediation based on risk, prevent recurring vulnerabilities, strengthen ownership and accountability, validate remediation, and increase the scalability and effectiveness of vulnerability-management practices.

In this role, you will

• Set and execute the strategic direction for vulnerability management and application security across WIMT, evolving the function toward proactive risk reduction, prevention, engineering enablement, and measurable outcomes
• Serve as a senior change agent across WIMT, driving transparency, accountability, consistent execution, and sustainable improvement across CIO and technology organizations
• Lead a federated, risk-based operating model across applications, infrastructure, data center, cloud, containers, platforms, open-source software, and other technology environments, with clear governance, decision rights, ownership, and escalation
• Establish a transparent and authoritative view of vulnerability exposure and remediation performance, giving technology and executive leaders actionable insight into risk, ownership, aging, dependencies, commitments, systemic issues, and areas requiring intervention
• Represent WIMT in shaping enterprise vulnerability-management and application-security capabilities, influencing enterprise strategy, tooling, data, processes, and roadmaps while driving appropriate WIMT capabilities where gaps exist
• Shift vulnerability management toward an engineering-enablement model, providing teams with actionable data, automation, self-service capabilities, reusable remediation patterns, standards, and preventative controls that reduce friction and accelerate risk reduction
• Provide strategic leadership for Application Security and secure software delivery, including secure SDLC, DevSecOps, SAST, DAST, SCA, penetration testing, threat modeling, software supply-chain risk, and earlier integration of security into engineering practices
• Drive risk-based prioritization, remediation, validation, root-cause analysis, and risk decisions using exploitability, business impact, asset and application criticality, production exposure, threat intelligence, and control effectiveness
• Partner and influence across senior Technology, Cybersecurity, Risk, Audit, Product, Engineering, and Infrastructure leadership to address material vulnerabilities, systemic risks, control issues, dependencies, and remediation commitments
• Drive continuous improvement through automation, AI, authoritative data, simplified processes, reusable solutions, and talent development, reducing manual work and recurring vulnerabilities while increasing the scalability and effectiveness of vulnerability management

Required Qualifications

• 10+ years of Technology Strategic Leadership experience, or equivalent demonstrated through one or a combination of the following: work experience, training, military experience, education
• 4+ years of management or leadership experience
• 5+ years of Experience leading a large-scale vulnerability management, Application Security, cyber risk, security engineering, or closely related technology function
• 5+ years of Experience with Application Security, secure software development lifecycle practices, DevSecOps, and risk-based vulnerability prioritization and remediation
• 5+ years of Experience leading significant technology or cybersecurity transformation, including changes to operating models, accountability, processes, engineering practices, data, or technology capabilities
• 5+ years of experience leading horizontally through influence in a complex matrixed organization and driving outcomes across organizations outside of direct reporting lines
• 5+ years of Experience partnering with and influencing senior Technology, Cybersecurity, Risk, Audit, Product, Engineering, Infrastructure, and business stakeholders
• 5+ years of Experience translating technology and business requirements into broader enterprise capabilities, technology strategies, platforms, or operating-model improvements
• 5+ years of Experience establishing transparent management reporting, authoritative data, meaningful metrics, and executive-level risk views that enable decisions, accountability, and measurable outcomes
• 5+ years of Experience developing technology talent, building organizational capabilities, and communicating complex technology and cybersecurity risks to senior leadership

Desired Qualifications

• Experience leading vulnerability management or Application Security within a large, complex, highly regulated financial services organization
• Advanced knowledge of secure SDLC, secure-by-design principles, DevSecOps, threat modeling, SAST, DAST, SCA, penetration testing, software supply-chain security, and modern application architectures.
• Experience establishing federated vulnerability-management, security-champion, or similar technology-risk and engineering-enablement models
• Experience implementing threat-informed and business-contextual vulnerability prioritization and translating technical findings into meaningful business and technology risk
• Experience developing executive vulnerability reporting that connects exposure with applications, criticality, ownership, remediation commitments, aging, dependencies, and systemic risk.
• Experience establishing authoritative vulnerability data and consolidating fragmented reporting, tooling, governance, and manual operational processes
• Experience developing automated or self-service capabilities supporting vulnerability remediation, validation, evidence collection, prioritization, reporting, and reusable remediation patterns
• Experience influencing enterprise cybersecurity, technology, or engineering capabilities and roadmaps and applying automation or AI to improve cybersecurity, secure development, or engineering productivity
• Demonstrated ability to challenge established processes, remove organizational friction, influence senior stakeholders, and lead sustained change across organizational boundaries

Job Expectations

• Provide strategic leadership for vulnerability management and Application Security across a complex technology organization
• Operate as a change leader, not solely a control or governance leader, continuously identifying opportunities to simplify, automate, enable, and strengthen how vulnerability risk is managed
• Create transparency across WIMT so leaders and accountable technology owners have a consistent, trusted, and actionable understanding of vulnerability exposure, ownership, remediation commitments, systemic risks, and areas requiring intervention
• Maintain a risk-based approach that focuses organizational attention and investment on the vulnerabilities and systemic issues presenting the greatest potential business and technology risk
• Hold technology and product organizations accountable for remediation outcomes while providing centralized strategy, governance, standards, data, reporting, enablement, and appropriate escalation
• Establish outcomes centered on actual exposure reduction, validated remediation, prevention, engineering enablement, and sustainable risk reduction rather than activity-based measures alone
• Build strong relationships and drive outcomes across CIO organizations, Technology, Cybersecurity, Risk, Audit, Product, Engineering, Infrastructure, and other enterprise stakeholders
• Influence enterprise vulnerability-management and application-security capabilities, representing WIMT requirements and helping shape solutions that improve outcomes and scalability
• Build an organization capable of supporting increasing Application Security, cloud, DevSecOps, automation, data, and AI-related demands while maintaining appropriate governance and human oversight
• Develop high-performing technology and cybersecurity talent and represent WIMT effectively with senior internal stakeholders and relevant control or regulatory partners

Location:

• Metro Park, 194 Wood Avenue South, Iselin, New Jersey 08830
• Brevard Street, Charlotte, North Carolina
• 600 S 4th St., Minneapolis, MN 55415
• 2710 Pine St., Saint Louis, MO 63103

Pay Range
Reflected is the base pay range offered for this position. Pay may vary depending on factors including but not limited to demonstrated examples of prior performance, skills, experience, or work location. Employees may also be eligible for incentive opportunities.
$215,000.00 - $355,000.00
Benefits
Wells Fargo provides eligible employees with a comprehensive set of benefits, many of which are listed below. Visit Benefits - Wells Fargo Jobs for an overview of the following benefit plans and programs offered to employees.

• Health benefits
• 401(k) Plan
• Paid time off
• Disability benefits
• Life insurance, critical illness insurance, and accident insurance
• Parental leave
• Critical caregiving leave
• Discounts and savings
• Commuter benefits
• Tuition reimbursement
• Scholarships for dependent children
• Adoption reimbursement

Posting End Date:
29 Nov 2026
* Job posting may come down early due to volume of applicants.
We Value Equal Opportunity
Wells Fargo is an equal opportunity employer. All qualified applicants will receive consideration for employment without regard to race, color, religion, sex, sexual orientation, gender identity, national origin, disability, status as a protected veteran, or any other legally protected characteristic.
Employees support our focus on building strong customer relationships balanced with a strong risk mitigating and compliance-driven culture which firmly establishes those disciplines as critical to the success of our customers and company. They are accountable for execution of all applicable risk programs (Credit, Market, Financial Crimes, Operational, Regulatory Compliance), which includes effectively following and adhering to applicable Wells Fargo policies and procedures, appropriately fulfilling risk and compliance obligations, timely and effective escalation and remediation of issues, and making sound risk decisions. There is emphasis on proactive monitoring, governance, risk identification and escalation, as well as making sound risk decisions commensurate with the business unit's risk appetite and all risk and compliance program requirements.
Applicants with Disabilities
To request a medical accommodation during the application or interview process, visit Disability Inclusion at Wells Fargo .
Drug and Alcohol Policy
Wells Fargo maintains a drug free workplace. Please see our Drug and Alcohol Policy to learn more.
Wells Fargo Recruitment and Hiring Requirements:
a. Third-Party recordings are prohibited unless authorized by Wells Fargo.
b. Wells Fargo requires you to directly represent your own experiences during the recruiting and hiring process.
c. Please be prepared to provide accurate information and supporting documentation in connection with any lawful employment and education verification conducted by Wells Fargo.