Manager, Cyber Security - Information Security Office Consultant

Capital One • New York, NY

2d • $215,200 - $245,600

About The Position

Capital One is seeking a cybersecurity professional to advance cybersecurity governance, capability maturation, and risk transformation. The role partners with stakeholders to assess cybersecurity capabilities and risk-management practices, uses cybersecurity data to develop insights and metrics, and helps ensure issues and remediation plans are documented and resolved. It also drives automation of monitoring and reporting workflows, presents cyber-risk insights to senior management, and mentors associates.

Requirements

• Bachelor's degree.
• At least 5 years of experience in cybersecurity or information technology.
• At least 5 years of experience performing security risk assessments and security architecture reviews.
• At least 5 years of experience with architecture, software design, networking, or cloud infrastructure.
• At least 4 years of experience evaluating, contributing to, or supporting development of cybersecurity capabilities.
• At least 4 years of experience with cloud security engineering.
• At least 1 year of experience implementing artificial intelligence (AI) in cybersecurity.

Nice To Haves

• 5+ years of experience with cybersecurity frameworks and concepts such as NIST CSF, MITRE ATT&CK, CMMC, or FedRAMP.
• 5+ years of experience analyzing or developing solutions for cyber threats, vulnerabilities, risks, or events.
• 5+ years of experience working on teams and presenting cybersecurity information such as metrics, threat intelligence, controls, or requirements to stakeholders.
• 4+ years of experience working in multi-cloud environments.
• 4+ years of experience using security tools such as Splunk, CrowdStrike, Qualys, or AWS Security Hub.
• 2+ years of experience developing or interpreting cybersecurity metrics or dashboards.
• Demonstrated familiarity with industry governance or financial governance processes.
• Experience with risk-management concepts, including identifying threats, assessing vulnerabilities, and recommending mitigation strategies.
• Ability to perform security incident analysis and assist with resolution, translating technical findings into clear, actionable reports for technical and non-technical stakeholders.

Responsibilities

• Lead the ongoing advancement of cybersecurity capabilities and services by partnering with stakeholders and assessing capability effectiveness and risk-management practices using tools and frameworks such as NIST Cybersecurity Framework (CSF).
• Use cybersecurity data from multiple sources to produce insights, risk indicators, and program metrics.
• Provide expertise during control and risk assessments, ensuring issues and remediation plans are documented, owned, and tracked to closure.
• Drive adoption of automation and tooling to streamline control monitoring, issue management, and risk-reporting workflows.
• Synthesize and present key cyber-risk insights for senior management forums, highlighting trends, systemic issues, and risk-reduction opportunities.
• Mentor and guide associates, fostering consistent application of cyber-risk management methodologies and professional growth.

Benefits

• Comprehensive, competitive, and inclusive health, financial, and other benefits supporting total well-being.
• Eligible for performance-based incentive compensation, which may include cash bonuses and/or long-term incentives.

What This Job Offers

• Job Type: Full-time
• Career Level: Manager