Manager, Cyber Security - Information Security Office Consultant
Core
Act as an Information Security point of contact for a business function within the Card line of business, coordinating proactive consulting on infrastructure, data, network, and access security while driving risk transformation.
Role type
Manager, Cyber Security Consultant (IC)
Builds
Security governance, capability maturation, and risk mitigation solutions for Capital One's Card business.
Domain
Financial Services / Cybersecurity
Required skills
Security risk assessment, Security architecture review, Cloud security engineering, Threat intelligence, AI in cybersecurity, Network architecture, User access management, Security policy implementation, Executive reporting, Cross-functional partnership
Preferred skills
NIST CSF, MITRE ATT&CK, CMMC, FedRAMP, Security tooling (Splunk, Crowdstrike, Qualys, AWS Security Hub), Application security, Threat modeling, Penetration testing, Vulnerability management, Container security, Offensive/Defensive security techniques, AI attack vectors and model vulnerabilities
Technologies
AWS, GCP, Azure, Splunk, Crowdstrike, Qualys, AWS Security Hub, Splunk-Fu
Responsibilities
Serve as security SME reviewing architecture and providing risk mitigation solutions; Partner with engineers and product managers to integrate security left; Escalate and manage cyber security risk; Provide regular updates to executive leadership on security health; Evaluate AI technologies for security and compliance risks.
Seniority
Manager, hands-on IC
