Senior Manager, Cyber Security (IAM Product Manager)

Capital One • San Jose, CA

1d • $250,800 - $286,200 • Hybrid

About The Position

Capital One is seeking a cybersecurity professional to drive cybersecurity governance, capability maturation, and risk transformation. The role focuses on Identity and Access Management (IAM) product management and involves evaluating cyber capabilities, threat intelligence, and risk management in a fast-paced, collaborative, inclusive, and risk-conscious environment.

This hybrid position requires adherence to Capital One’s policy for on-site presence at the designated office. The role includes leadership of associates and enterprise risk-reduction work, as well as coordination of cybersecurity initiatives across programs and domains.

Requirements

• Bachelor’s degree.
• At least 7 years of experience in cybersecurity or information technology.
• At least 6 years of experience evaluating, contributing to, or supporting the development of cybersecurity capabilities.
• At least 4 years of experience in Product Management.
• At least 4 years of experience in Identity and Access Management (IAM).

Nice To Haves

• 7 or more years of experience with cybersecurity frameworks and concepts such as NIST CSF, MITRE ATT&CK, CMMC, or FedRAMP.
• 7 or more years of experience analyzing or developing solutions for cyber threats, vulnerabilities, risks, or events.
• 7 or more years of experience working on teams and presenting cybersecurity information such as metrics, threat intelligence, controls, or requirements to stakeholders.
• 6 or more years of experience working in multi-cloud environments.
• 6 or more years of experience using security tools such as Splunk, Crowdstrike, Qualys, or AWS Security Hub.
• 3 or more years of experience developing or interpreting cybersecurity metrics or dashboards.
• 3 or more years of people management experience.
• 2 or more years of experience developing or overseeing cybersecurity or technology risk programs.
• Demonstrated familiarity with industry governance or financial governance processes.
• Advanced experience with risk management concepts, including identifying threats, assessing vulnerabilities, and recommending mitigation strategies.
• Ability to perform security incident analysis and assist with resolution, translating technical findings into clear, actionable reports for technical and non-technical stakeholders.

Responsibilities

• Lead, mentor, and develop associates by setting clear expectations, providing actionable feedback, and supporting career progression.
• Serve as a cybersecurity subject matter expert and advise on best practices for reducing risk through configuration of cybersecurity tools and platforms.
• Support development, modification, and use of capability, risk, and threat classification frameworks and standardization methodologies for evaluating capability, maturity, and effectiveness.
• Support development, implementation, and execution of continuous improvement programs, including risk and issue identification, corrective action implementation, and results validation.
• Identify and operationalize cross-program linkages among threats and risks, controls, capabilities and tooling, and data analytics to support initiative prioritization and spending and resource-allocation decisions.
• Lead solutioning for and manage activities in response to large-scale enterprise risk-reduction efforts.
• Communicate the impact of operational, compliance, process, control, and tooling gaps, along with potential remediation actions, to audiences including leadership.
• Lead cross-domain cybersecurity risk assessments and capability reviews, aligning enterprise control standards with business objectives and regulator expectations.
• Influence and coordinate risk-reduction initiatives across multiple cyber programs, driving consistency in control design, testing, and reporting practices.

Benefits

• Comprehensive health, financial, and other benefits supporting total well-being; eligibility varies by employment status and management level.
• Eligible for performance-based incentive compensation, which may include cash bonuses and/or long-term incentives.

What This Job Offers

• Job Type: Full-time
• Career Level: Senior