Manager, Information Security Office Consultant

About the role

Manager, Information Security Office Consultant

Responsibilities

• Act as a central Information Security point of contact for the Enterprise Platforms Tech
• Cook up and execute proactive Information Security consulting to the business and technology teams covering Infrastructure Security, Resiliency, Data Security, Network Architecture and Design, and User Access Management
• Serve as an expert in Capital One’s Information Security capabilities, solutions, policies, procedures and standards
• Influence customers to leverage security capabilities and solutions to shift and integrate security to the left in the development processes
• Escalate and manage cyber security risk
• Provide ad hoc support on special Information Security hot topics for the business
• Provide regular updates to executive leadership with your line of business on the overall Information Security health and risk environment
• Work with line of business leadership to anticipate their objectives and needs to better serve the line of business

About You

• You have a desire to work in a very fast moving, forward leaning, and modern computing environment
• You have a deep passion for Securing modern computing platforms
• You have a strong desire to continually learn about new technologies
• You possess strong conceptual thinking and communication skills
• You are able to work well under minimal supervision
• You are a demonstrated leader with team-oriented interpersonal skills and the ability to interface effectively with a broad range of people and roles, including upper management, IT leaders, and technology vendors
• You maintain calmness and clarity of thought under pressure and ability to maintain confidentiality
• You have a deep understanding of strategic business objectives and the ability to drive results toward those objectives

Qualifications

• High School Diploma, GED or equivalent certification
• At least 4 years of experience working in cybersecurity or information technology
• At least 1 years of experience with architecture, software design, networking, and cloud infrastructure
• At least 1 years of experience providing guidance and oversight of Security concepts
• At least 1 years of experience performing security risk assessments and security architecture reviews

Preferred Qualifications

• Bachelor’s Degree
• 5+ years of experience working in cybersecurity or information technology
• 5+ years of experience with architecture, software design, networking, and cloud infrastructure
• 4+ years of experience providing guidance and oversight of Security concepts
• 4+ years of experience performing security risk assessments and security architecture reviews
• 4+ years of experience in securing a public cloud environment (e.g. AWS, GCP, Azure)
• Experience building software utilizing public cloud (e.g. AWS, GCP, Azure)
• Familiarity with Cloud patch management practices such as system rehydration and image management
• Experience with Artificial Intelligence security, notably Agentic workflows
• Experience with fundamental Identity and Access Management concepts
• Experience with Software Security Architecture
• Experience with Application Security
• Experience with Threat Modeling
• Experience with Penetration Testing and/or Vulnerability Management
• Experience with integrating SaaS products into an Enterprise Environment
• Experience with securing Container services
• Splunk-Fu / Enterprise Monitoring experience
• Financial services industry experience
• Professional certifications such as AWS Certified Solutions Architect and Certified Information Systems Security Professional (CISSP)
• Experience in Offensive and/or Defensive Security techniques
• Experience in a regulated environment