Director, Information Security Office Consultant
About The Position
Capital One is seeking a cybersecurity professional to help drive cybersecurity governance, capability maturation, and risk transformation. The role provides strategic leadership and coaching, advises on cybersecurity best practices and tool configuration, and supports the development and use of capability, risk, and threat classification frameworks. It also leads enterprise risk reduction efforts and cross-functional governance initiatives, while helping integrate cybersecurity assessments and maturity evaluations into strategic planning and business decisions. The position communicates operational, compliance, process, control, and tooling gaps and potential remediation actions to audiences including leadership. It supports continuous improvement programs and connects threats, risks, controls, capabilities, tooling, and data analytics to inform prioritization, spending, and resource allocation.
Requirements
- Bachelor's degree.
- At least 9 years of experience in cybersecurity or information technology.
- At least 8 years of experience evaluating, contributing to, or supporting the development of cybersecurity capabilities.
Nice To Haves
- 9+ years of experience with cybersecurity frameworks and concepts such as NIST CSF, MITRE ATT&CK, CMMC, or FedRAMP.
- 9+ years of experience analyzing or developing solutions for cyber threats, vulnerabilities, risks, or events.
- 9+ years of experience working on teams and presenting cybersecurity information such as metrics, threat intelligence, controls, or requirements to stakeholders.
- 8+ years of experience working in multi-cloud environments.
- 8+ years of experience using security tools such as Splunk, Crowdstrike, Qualys, or AWS Security Hub.
- 6+ years of experience with data ecosystems, applications, privacy, and compliance.
- 6+ years of experience with API security.
- 5+ years of experience with DataLake and consumption tools.
- 5+ years of experience with file transfer systems.
- 5+ years of experience integrating SaaS products into an enterprise environment.
- 5+ years of people management experience.
- 4+ years of experience developing or interpreting cybersecurity metrics or dashboards.
- 4+ years of experience developing and overseeing cybersecurity or technology risk programs.
- Demonstrated familiarity with industry risk governance or financial risk governance processes.
- Ability to perform security incident analysis and assist with resolution, translating technical findings into clear, actionable reports for technical and non-technical stakeholders.
Responsibilities
- Provide strategic leadership and coaching to senior managers and associates, setting direction, developing talent, and building a high-performing cybersecurity organization.
- Serve as a cybersecurity subject matter expert and advise on risk-reduction best practices through the configuration of cybersecurity tools and platforms.
- Support the development, modification, and use of capability, risk, and threat classification frameworks and standardization methodologies for capability, maturity, and effectiveness evaluations.
- Support the development, implementation, and execution of continuous improvement programs, including risk and issue identification, corrective action implementation, and results validation.
- Identify and operationalize linkages among threats and risks, controls, capabilities and tooling, and data analytics to facilitate initiative prioritization and spending and resource-allocation decisions.
- Lead solutioning for, and manage activities in response to, large-scale enterprise risk-reduction efforts.
- Communicate the impact of operational, compliance, process, control, and tooling gaps and potential remediation actions to multiple audiences, including leadership.
- Oversee enterprise-level cybersecurity risk assessments and maturity evaluations, integrating results into strategic planning and business decision-making.
- Direct cross-functional cyber governance initiatives to align risk management, engineering, and compliance functions with organizational strategy.
Benefits
- Comprehensive, competitive, and inclusive health, financial, and other benefits supporting total well-being.
- Eligibility for performance-based incentive compensation, which may include cash bonuses and/or long-term incentives.
Stand Out From the Crowd
Upload your resume and get instant feedback on how well it matches this job.
What This Job Offers
Job Type
Full-time
Career Level
Director
