Director, Information Security Office AI/ML

Overview

The AIML Division at Capital One is dedicated to advancing AI innovation and building robust, enterprise-grade AI capabilities. They seek a Director of Information Security Office (ISO) to support these objectives by guiding projects and investigative teams, implementing technology best practices, and collaborating with internal teams and industry partners.

Responsibilities

• Serve as the subject matter expert guiding projects and technical investigative teams to protect a large enterprise
• Strategize and implement technology best practices for risk mitigation associated with security operations center (SOC) alerts and cases
• Engage with internal teams and cyber/technology industry partners to evaluate and mitigate threats from external actors
• Understand business drivers and associate cultures, ensuring regulatory compliance, data protection, and associate protection are in place
• Collaborate with engineering and other teams to drive automation for analysis efficiency, containment, and remediation activities
• Advocate for change and excel at partnering with various cross-functional stakeholders
• Collaborate with other CSOC leaders to deliver a continuous monitoring and response capability
• Use data across CSOC operations to drive decisions, focusing on resource allocation, threat mitigation, and associate development
• Serve as the technical advisor for the Senior Director

Skills

• Subject matter expertise on Cyber Security Operations Centers (SIEM, SOAR, investigative methods)
• Experience with monitoring and protection tailored to specific applications
• Understanding of the System Development Lifecycle and influencing developers
• Ability to work with little oversight, representing the company’s interests and values
• Outstanding customer service and stakeholder management
• Experience with security operations center, data analysis, and security event and incident management
• Ability to apply independent judgment
• Strong ability to compartmentalize information and structure findings in an easy-to-consume format
• Thought leadership and industry influence

Qualifications

• Bachelor's Degree
• At least 7 years of experience in Cybersecurity or information technology
• At least 5 years of experience in Application Development
• At least 5 years of experience with Linux, Unix, and Windows operating systems
• 3+ years experience managing security operations projects
• 3+ years experience optimizing security operations tooling
• 2+ years experience securing customer servicing agents platforms
• 2+ years experience in securing Generative AI platforms and applications
• 2+ years of experience managing, monitoring, or configuring public cloud environments (AWS, Azure, GCP)
• Professional Security Certifications (CISSP, CISM, CCSP, Security+, CEH, SANS GIAC 503 or 504, AWS Security)