Senior Manager, Information Security Consultant

As a Senior Manager in the Information Security Office (ISO) at Capital One, you will play a crucial role in enhancing our Information Security initiatives, programs, and projects. Your expertise and practical approach to risk management and security will enable you to effectively collaborate with various teams and push the boundaries of what's possible in our dynamic environment. You will be well-versed in Cloud Service technologies including Storage Services, Security & Access Control Management, Container Services, and API Implementation and Management, as well as having a solid understanding of IaaS, PaaS, and SaaS.

Your responsibilities will include:

• Serving as the primary Information Security contact for the Commercial line of business.
• Coordinating proactive Information Security consulting for business and technology teams, covering Infrastructure Security, Resiliency, Data Security, Network Architecture, and User Access Management.
• Acting as a subject matter expert on Capital One's Information Security capabilities, solutions, policies, and standards.
• Collaborating with enterprise cyber teams to define and implement a robust cyber architecture strategy.
• Supporting security architecture and implementation for technology modernization initiatives.
• Overseeing security-related dependencies across our modernization projects.
• Encouraging customers to embrace security solutions to incorporate security earlier in development processes.
• Monitoring and managing cybersecurity risks, providing support on urgent Information Security matters.
• Regularly updating executive leadership on the Information Security status and risk landscape.
• Understanding and anticipating the objectives of business leadership to provide tailored support.
• Mapping technologies against standardized frameworks to identify best practices for risk reduction.
• Contributing to the development and refinement of risk classification frameworks to enhance cybersecurity posture.
• Communicating the implications of operational, compliance, and control gaps and remediation strategies to leadership.

About You:

• You thrive in dynamic and innovative computing environments.
• You have a strong passion for securing modern platforms and a commitment to continuous learning about new technologies.
• You possess excellent conceptual thinking and communication skills.
• You can work independently and maintain focus under minimal supervision.
• You are a collaborative leader with the ability to effectively engage with diverse stakeholders.
• You can remain composed under pressure while maintaining confidentiality.
• You have a clear understanding of strategic business objectives and know how to drive results.

Basic Qualifications:

• High School Diploma, GED, or equivalent certification.
• At least 6 years of experience in cybersecurity or information technology.
• At least 5 years overseeing cybersecurity concepts.
• At least 5 years conducting cybersecurity risk assessments or architecture reviews.
• At least 4 years of cloud security experience.
• At least 3 years in Cyber Risk Management.
• At least 2 years in Cyber Technical Program Management.

Preferred Qualifications:

• Bachelor's Degree.
• 7+ years of experience securing a public cloud environment.
• AWS Certified Solutions Architect or Certified Information Systems Security Professional (CISSP) certification.

Note: Capital One will not sponsor a new applicant for employment authorization for this position.

The minimum and maximum full-time annual salaries for this role are:

• McLean, VA: $225,400 - $257,200
• New York, NY: $245,900 - $280,600
• Plano, TX: $204,900 - $233,800
• Richmond, VA: $204,900 - $233,800

This role is also eligible for performance-based incentives, including cash bonuses and/or long-term incentives. Capital One offers a comprehensive and competitive benefits package designed to support your overall well-being.