Risk Manager, Endpoint Security

About the role

The Risk Manager, Endpoint Security plays a critical role in ensuring the security and reliability of Capital One’s endpoint systems. Reporting to the 1st Line CISO, this individual will oversee and challenge the effectiveness of cybersecurity controls, operational capabilities, and processes related to endpoint security.

Responsibilities

• Provide advisory, oversight, and effective challenge to the 1st Line of defense.
• Implement and assess endpoint detection and response (EDR) tools with anti-malware and anti-virus functionality.
• Implement and assess application whitelisting technologies.
• Implement and assess next-generation endpoint platforms such as virtual desktop infrastructure (VDI) or thin clients.
• Implement tools and processes to remove sensitive data from endpoints.
• Implement and assess mobile device management (MDM) or mobile application management (MAM) tools.
• Implement and assess privileged access management (PAM) tools.
• Collaborate with colleagues, stakeholders, and leaders across multiple organizations to achieve objectives.
• Coordinate program-related activities and deliverables to ensure effective collaboration within the team and across stakeholder groups.
• Manage multiple projects while maintaining superior results.
• Communicate clearly in written and verbal form.
• Execute tasks with a self-motivated approach.

Requirements

• Bachelor’s degree or military experience.
• At least 5 years of experience implementing endpoint detection and response (EDR) tools with anti-malware and anti-virus functionality.
• At least 3 years of experience implementing application whitelisting technologies.
• At least 3 years of experience implementing next-generation endpoint platforms such as virtual desktop infrastructure (VDI) or thin clients.
• At least 3 years of experience implementing tools and processes that remove sensitive data off endpoints.
• At least 3 years of experience with Mobile Device Management (MDM) or Mobile Application Management (MAM).
• At least 2 years of experience with Privileged Access Management (PAM) tools.
• At least 2 years of consulting, audit, or risk management experience.

Qualifications

• Familiarity with NIST Cybersecurity Framework controls, NIST 800-53, ISO 27000-1.
• Cybersecurity certifications such as: Certified Information Systems Security Professional (CISSP); Certified Information Security Manager (CISM); or Certified in Risk and Information Systems Control (CRISC).
• Cloud certifications for Amazon Web Services (AWS) or Google Cloud Platform (GCP).

Benefits

Capital One offers a comprehensive, competitive, and inclusive set of health, financial, and other benefits designed to support your total well-being. Learn more at the Capital One Careers website.

Pay

Salaries for this role vary by location, ranging from $197,300 - $225,100 in McLean, VA to $179,400 - $204,700 in Richmond, VA. For more details, refer to the job posting.

Schedule

This role is expected to accept applications for a minimum of 5 business days. No agencies please.

Equal Opportunity Employer

Capital One is an equal opportunity employer (EOE, including disability/vet) committed to non-discrimination in compliance with applicable federal, state, and local laws. Capital One promotes a drug-free workplace. Capital One will consider for employment qualified applicants with a criminal history in a manner consistent with the requirements of applicable laws regarding criminal background inquiries, including, to the extent applicable, Article 23-A of the New York Correction Law; San Francisco, California Police Code Article 49, Sections 4901-4920; New York City’s Fair Chance Act; Philadelphia’s Fair Criminal Records Screening Act; and other applicable federal, state, and local laws and regulations regarding criminal background inquiries.