Manager, Cyber Security - Information Security Office Consultant

Capital One • New York, NY

1d

About The Position

Capital One is seeking a cybersecurity professional to evaluate cyber capabilities, threat intelligence, and risk management. The role advances cybersecurity governance, capability maturity, and risk transformation across the organization. It partners with stakeholders to assess capability effectiveness and risk-management practices, uses cybersecurity data to develop insights and metrics, and supports control and risk assessments. The position also promotes automation and tooling for risk workflows, presents cyber-risk insights to senior management, and mentors associates.

Requirements

• Bachelor's degree.
• At least 5 years of experience in cybersecurity or information technology.
• At least 5 years of experience performing security risk assessments and security architecture reviews.
• At least 5 years of experience with architecture, software design, networking, or cloud infrastructure.
• At least 4 years of experience evaluating, contributing to, or supporting development of cybersecurity capabilities.
• At least 4 years of experience with cloud security engineering.
• At least 1 year of experience implementing artificial intelligence (AI) in cybersecurity.

Nice To Haves

• 5+ years of experience with cybersecurity frameworks and concepts such as NIST CSF, MITRE ATT&CK, CMMC, or FedRAMP.
• 5+ years of experience analyzing or developing solutions for cyber threats, vulnerabilities, risks, or events.
• 5+ years of experience working on teams and presenting cybersecurity information—such as metrics, threat intelligence, controls, or requirements—to stakeholders.
• 4+ years of experience working in multi-cloud environments.
• 4+ years of experience using security tools such as Splunk, CrowdStrike, Qualys, or AWS Security Hub.
• 2+ years of experience developing or interpreting cybersecurity metrics or dashboards.
• Demonstrated familiarity with industry governance or financial governance processes.
• Experience with risk-management concepts, including identifying threats, assessing vulnerabilities, and recommending mitigation strategies.
• Ability to perform security incident analysis and assist with resolution, translating technical findings into clear, actionable reports for technical and non-technical stakeholders.

Responsibilities

• Lead the ongoing advancement of cybersecurity capabilities and services by partnering with stakeholders and assessing capability effectiveness and risk-management practices using tools and frameworks such as the NIST Cybersecurity Framework (CSF).
• Leverage cybersecurity data from multiple sources to produce new insights, risk indicators, and program metrics.
• Provide expertise during control and risk assessments, ensuring issues and remediation plans are documented, owned, and tracked to closure.
• Drive adoption of automation and tooling to streamline control monitoring, issue management, and risk-reporting workflows.
• Synthesize and present key cyber-risk insights for senior management forums, highlighting trends, systemic issues, and risk-reduction opportunities.
• Mentor and guide associates, fostering consistent application of cyber-risk management methodologies and professional growth.

Benefits

• Comprehensive, competitive health, financial, and other benefits supporting total well-being; eligibility varies by employment status and management level.
• Eligible for performance-based incentive compensation, which may include cash bonuses and/or long-term incentives.

What This Job Offers

• Job Type: Full-time
• Career Level: Manager