Risk Manager, Endpoint Security

About the role

The Risk Manager, Endpoint Security plays a crucial role in ensuring the security and reliability of Capital One's endpoint systems. Reporting to the 1st Line CISO, this individual will oversee and challenge cybersecurity measures, providing strategic insights and technical assessments.

Responsibilities

• Provide advisory, oversight, and effective challenge to the 1st Line of defense.
• Implement technical assessments of cybersecurity controls design and effectiveness.
• Draft assessments for senior management and other stakeholders, as needed.
• Stay current on emerging cyber threats and their potential impacts.
• Collaborate with colleagues, stakeholders, and leaders across multiple organizations to achieve objectives.
• Coordinate program-related activities and deliverables to ensure effective collaboration within the team and across stakeholder groups.
• Lead, mentor, and influence others.
• Communicate clearly in both written and verbal forms.
• Manage multiple projects while maintaining superior results.
• Work individually and cross-functionally.
• Execute tasks efficiently and independently.

Requirements

• Bachelor’s degree or equivalent military experience.
• At least 5 years of experience implementing endpoint detection and response (EDR) tools with anti-malware and anti-virus functionality.
• At least 3 years of experience implementing application whitelisting technologies.
• At least 3 years of experience implementing next-generation endpoint platforms such as virtual desktop infrastructure (VDI) or thin clients.
• At least 3 years of experience implementing tools and processes that remove sensitive data off endpoints.
• At least 3 years of experience with Mobile Device Management (MDM) or Mobile Application Management (MAM).
• At least 2 years of experience with Privileged Access Management (PAM) tools.
• At least 2 years of consulting, audit, or risk management experience.

Qualifications

• Familiarity with NIST Cybersecurity Framework controls, NIST 800-53, ISO 27000-1.
• Cybersecurity certifications such as: Certified Information Systems Security Professional (CISSP); Certified Information Security Manager (CISM); or Certified in Risk and Information Systems Control (CRISC).
• Cloud certifications for Amazon Web Services (AWS) or Google Cloud Platform (GCP).

Benefits

Capital One offers a comprehensive, competitive, and inclusive set of health, financial, and other benefits designed to support your total well-being. Learn more at the Capital One Careers website.

Pay

Salaries for this role vary by location, ranging from $197,300 - $225,100 for McLean, VA to $179,400 - $204,700 for Richmond, VA. Performance-based incentives may also be offered, including cash bonuses and long-term incentives (LTI).

Schedule

This role is expected to accept applications for a minimum of 5 business days. No agencies please.