Lead Information Security Consultant

Capital One • McLean, VA

2d

About The Position

Lead Information Security Consultant As a Lead Consultant in Capital One’s Cyber Information Security Office (ISO), you will work closely with our cybersecurity team and with extended technical teams to manage and improve the cybersecurity posture specifically related to Card Servicing & Experiences Portfolio. You are pragmatic and practical in your understanding of risk and security, but also willing to know when to pull in experts and escalate. You collaborate and innovate with other teams within Capital One to push the envelope. Security is essential to what we do here, from protecting our customers to our associates. Responsibilities: Act as a central Information Security point of contact for a portfolio of voice and customer servicing technology assets. Coordinate and execute proactive Information Security consulting to the business and technology teams covering Infrastructure Security, Resiliency, Data Security, Network Architecture and Design, and User Access Management Serve as an expert in Capital One’s Information Security capabilities, solutions, policies, procedures and standards Influence customers to leverage security capabilities and solutions to shift and integrate security to the left in the development processes Escalate and manage cyber security risk Provide ad hoc support on special Information Security hot topics for the business Provide regular updates to executive leadership with your line of business on the overall Information Security health and risk environment Work with line of business leadership to anticipate their objectives and needs to better serve the line of business About You: Strong technical architecture background with the ability to proactively identify and mitigate technical risks throughout delivery life-cycle Exceptional communication and collaboration skills Excellent problem solving and influencing skills Strong desire to continually learn and solve security problems involving new technologies You are able to work well under minimal supervision Ability to simplify the technically complex and drive well-educated decisions across product, engineering, design, and enterprise risk representatives Exceptional cross-team collaboration; able to work across different functions, organizations, and reporting boundaries to get the job done.

Requirements

• High School Diploma, GED, or equivalent certification
• At least 4 years of experience providing guidance and oversight of cyber security concepts
• At least 3 years of experience performing cyber security risk assessments and cyber security architecture reviews
• At least 3 years of experience with architecture, software design, networking or cloud infrastructure
• Strong technical architecture background with the ability to proactively identify and mitigate technical risks throughout delivery life-cycle
• Exceptional communication and collaboration skills
• Excellent problem solving and influencing skills
• Strong desire to continually learn and solve security problems involving new technologies
• You are able to work well under minimal supervision
• Ability to simplify the technically complex and drive well-educated decisions across product, engineering, design, and enterprise risk representatives
• Exceptional cross-team collaboration; able to work across different functions, organizations, and reporting boundaries to get the job done.

Nice To Haves

• Bachelor’s Degree
• 6+ years of experience with Architecture, software design, networking or Cloud infrastructure
• 4+ years of experience in securing a public cloud environment (AWS, GCP, or Azure)
• 2+ years of experience utilizing Agile methodologies
• 2+ years of experience in Enterprise Monitoring
• 2+ years of experience in web application security
• AWS Certified Solutions Architect or Certified Information Systems Security Professional (CISSP)

Responsibilities

• Act as a central Information Security point of contact for a portfolio of voice and customer servicing technology assets.
• Coordinate and execute proactive Information Security consulting to the business and technology teams covering Infrastructure Security, Resiliency, Data Security, Network Architecture and Design, and User Access Management
• Serve as an expert in Capital One’s Information Security capabilities, solutions, policies, procedures and standards
• Influence customers to leverage security capabilities and solutions to shift and integrate security to the left in the development processes
• Escalate and manage cyber security risk
• Provide ad hoc support on special Information Security hot topics for the business
• Provide regular updates to executive leadership with your line of business on the overall Information Security health and risk environment
• Work with line of business leadership to anticipate their objectives and needs to better serve the line of business

Benefits

• Capital One offers a comprehensive, competitive, and inclusive set of health, financial and other benefits that support your total well-being.
• Learn more at the Capital One Careers website.
• Eligibility varies based on full or part-time status, exempt or non-exempt status, and management level.
• This role is also eligible to earn performance based incentive compensation, which may include cash bonus(es) and/or long term incentives (LTI). Incentives could be discretionary or non discretionary depending on the plan.

What This Job Offers

• Job Type: Full-time
• Career Level: Mid Level
• Education Level: High school or GED
• Number of Employees: 5,001-10,000 employees