Manager, Cyber Security - Information Security Office Consultant

About This Role

This role is for a Cyber Security Professional passionate about evaluating cyber capabilities, threat intelligence, and risk management. You will drive cybersecurity governance, capability maturation, and risk transformation across Capital One.

Responsibilities

• Act as an Information Security point of contact for a business function within the Card line of business
• Coordinate and execute proactive Information Security consulting to the business and technology teams covering Infrastructure Security, Resiliency, Data Security, Network Architecture and Design, and User Access Management
• Serve as an expert in Capital One’s Information Security capabilities, solutions, policies, procedures and standards
• Leverage strong technical acumen and be a security SME reviewing architecture, providing risk mitigation solutions and driving overall risk management
• Partner closely with engineers, product managers, and other cross-functional partners to help break down complexity and organizational silos to problem solve
• Influence customers to leverage security capabilities and solutions to shift and integrate security to the left in the development processes
• Escalate and manage cyber security risk
• Provide ad hoc support on special Information Security hot topics for the business
• Provide regular updates to executive leadership within your line of business on the overall Information Security health and risk environment

Requirements

• Bachelor's Degree
• At least 5 years of experience in cybersecurity or information technology
• At least 4 years of experience evaluating, contributing to, or supporting development of cybersecurity capabilities
• At least 5 years of experience performing security risk assessments and security architecture reviews
• At least 5 years of experience with architecture, software design, networking, or cloud infrastructure
• At least 4 years of experience with cloud security engineering
• At least 1 year of experience in implementing Artificial Intelligence (AI) in cybersecurity

Nice to have:

• 5+ years of experience with cybersecurity frameworks and concepts such as NIST CSF, MITRE ATT&CK, CMMC, FedRAMP, etc.
• 5+ years of experience performing analysis of or developing solutions for cyber threats, vulnerabilities, risks, or events
• 5+ years of experience working on teams and presenting to stakeholders cybersecurity information such as metrics, threat intelligence, controls and/or requirements
• 4+ years of experience using security tools (e.g., Splunk, Crowdstrike, Qualys, or AWS Security Hub)
• Demonstrated familiarity with industry governance or financial governance processes