Sr. Manager, Cyber Security
Capital One · Richmond, VA · 3 wk ago
Finance$230k–$262k/yrFull-time
We need to output HTML fragment with sections: About the role? The posting includes intro paragraphs about Capital One, mission, etc. We need to use for section headings like About the role, Responsibilities, Requirements, Qualifications, Skills, Benefits, Pay, Schedule. We must include sections only when posting has real specific content. We have content for responsibilities (What You’ll Do list). Basic Qualifications and Preferred Qualifications. Also Pay info (salary ranges). Benefits mentioned: "Capital One offers a comprehensive, competitive, and inclusive set of health, financial and other benefits". Also performance based incentive compensation. So we can have Benefits section. Pay section: salary ranges per location. Schedule not mentioned. So we omit Schedule.
We need to not repeat job title as heading. The job title is "Sr. Manager, Cyber Security". Not to be used as heading.
We need to include minor metadata like Job ID? Not present. So we can ignore.
We need to remove boilerplate: EEO, immigration note, etc. The immigration note about not sponsoring is maybe considered boilerplate? It's a specific statement about sponsorship; but it's likely considered legal/EEO? The instruction says remove cookie/navigation/legal/EEO/equal-opportunity/scam-warning boilerplate. The immigration note is legal; we should remove it. Also the equal opportunity employer statement, drug-free workplace, criminal history, accommodation, etc. All that should be removed.
We need to preserve substantive information: responsibilities, qualifications, pay, benefits, maybe location info? The location salary ranges are part of Pay. Should we include location list? Yes, as part of Pay.
We need to format responsibilities as
for section headings like About the role, Responsibilities, Requirements, Qualifications, Skills, Benefits, Pay, Schedule. We must include sections only when posting has real specific content. We have content for responsibilities (What You’ll Do list). Basic Qualifications and Preferred Qualifications. Also Pay info (salary ranges). Benefits mentioned: "Capital One offers a comprehensive, competitive, and inclusive set of health, financial and other benefits". Also performance based incentive compensation. So we can have Benefits section. Pay section: salary ranges per location. Schedule not mentioned. So we omit Schedule.
We need to not repeat job title as heading. The job title is "Sr. Manager, Cyber Security". Not to be used as heading.
We need to include minor metadata like Job ID? Not present. So we can ignore.
We need to remove boilerplate: EEO, immigration note, etc. The immigration note about not sponsoring is maybe considered boilerplate? It's a specific statement about sponsorship; but it's likely considered legal/EEO? The instruction says remove cookie/navigation/legal/EEO/equal-opportunity/scam-warning boilerplate. The immigration note is legal; we should remove it. Also the equal opportunity employer statement, drug-free workplace, criminal history, accommodation, etc. All that should be removed.
We need to preserve substantive information: responsibilities, qualifications, pay, benefits, maybe location info? The location salary ranges are part of Pay. Should we include location list? Yes, as part of Pay.
We need to format responsibilities as - . Similarly qualifications as list? The Basic Qualifications and Preferred Qualifications are lists; we can combine into Requirements and Qualifications sections? The instruction: Use
for section headings (e.g. About the role, Responsibilities, Requirements, Qualifications, Skills, Benefits, Pay, Schedule). So we need sections: About the role (intro paragraph), Responsibilities (What You’ll Do), Requirements (Basic Qualifications), Qualifications (Preferred Qualifications), Skills? Could combine skills maybe from preferred qualifications? But we can have Skills section if there is specific skill content. The preferred qualifications list includes many skills/experience; we could treat that as Qualifications. Skills maybe not needed. We'll include About the role, Responsibilities, Requirements, Qualifications, Benefits, Pay.
We must not create sections with filler like "commensurate with experience". Not applicable.
We need to preserve all substantive information; do not invent or summarize away detail. So we need to keep the bullet points exactly as given? We can keep the substance but not necessarily exact wording? Probably keep the substance but can rephrase slightly? Safer to keep the bullet points as they are, maybe slightly trimmed but not lose meaning.
Let's extract responsibilities bullet points:
- Lead, mentor, and develop associates by setting clear expectations, providing actionable feedback, and supporting career progression
- Serve as a cybersecurity subject matter expert and advise on best practices in risk reduction through the configuration of cybersecurity tools and platforms
- Support the development, modification, and use of capability, risk, and/or threat classification frameworks and standardization methodologies to facilitate the conduct of correlative capability, maturity, and effectiveness evaluations
- Support the development, implementation, and execution of continuous improvement programs, including risk and issue identification, corrective action implementation, and results validation
- Support the identification and operationalization of cross-programmatic linkages among a.) threats and risks, b.) controls, capabilities, and tooling, and c.) data analytics in order to facilitate initiative prioritization and decisioning on spending and resource allocation.
- Lead solutioning for, and manage activities in response to, large-scale enterprise risk reduction efforts
- Effectively communicate the impact of identified operational, compliance, process, control, and tooling gaps and potential remediation courses of action to multiple audiences, including leadership, to support the enhancement of their cybersecurity postures
- Lead cross-domain cybersecurity risk assessments and capability reviews, ensuring alignment between enterprise control standards, business objectives, and regulator expectations
- Influence and coordinate risk reduction initiatives across multiple cyber programs, driving consistency in control design, testing and reporting practices
Basic Qualifications:
- Bachelor's Degree
- At least 7 years of experience in cybersecurity or information technology
- At least 6 years of experience evaluating, contributing to, or supporting development of cybersecurity capabilities
Preferred Qualifications (list):
- 7+ years of experience with cybersecurity frameworks and concepts such as NIST CSF, MITRE ATT&CK, CMMC, FedRAMP, etc.
- 7+ years of experience performing analysis of or developing solutions for cyber threats, vulnerabilities, risks, or, events
- 7+ years of experience working on teams and presenting to stakeholders cybersecurity information such as metrics, threat intelligence, controls and/or requirements
- 6+ years of experience working in multi-cloud environments
- 6+ years of experience using security tools (e.g., Splunk, Crowdstrike, Qualys, or AWS Security Hub)
- 3+ years of experience developing or interpreting cybersecurity metrics or dashboards
- 3+ years of people management experience
- 2+ years of experience developing or overseeing cybersecurity or technology risk programs
- Demonstrated familiarity with industry governance or financial governance processes
- Advanced experience with risk management concepts, including identifying threats, assessing vulnerabilities, and recommending mitigation strategies.
- Ability to perform security incident analysis and assist with resolution, translating technical findings into clear, actionable reports for technical and non-technical stakeholders
Benefits: "Capital One offers a comprehensive, competitive, and inclusive set of health, financial and other benefits that support your total well-being. Learn more at the Capital One Careers website. Eligibility varies based on full or part-time status, exempt or non-exempt status, and management level. This role is also eligible to earn performance based incentive compensation, which may include cash bonus(es) and/or long term incentives (LTI). Incentives could be discretionary or non discretionary depending on the plan."
Pay: Salary ranges per location:
- McLean, VA: $229,900 - $262,400 for Sr. Manager, Cyber Security
- New York, NY: $250,800 - $286,200 for Sr. Manager, Cyber Security
- Plano, TX: $209,000 - $238,500 for Sr. Manager, Cyber Security
- Richmond, VA: $209,000 - $238,500 for Sr. Manager, Cyber Security
- Candidates hired to work in other locations will be subject to the pay range associated with that location, and the actual annualized salary amount offered to any candidate at the time of hire will be reflected solely in the candidate’s offer letter.
We should keep that.
Now produce HTML:
About the role
Do you love building and pioneering in the technology space? Do you enjoy solving complex business problems in a fast-paced, collaborative, inclusive, and risk-conscious delivery environment? At Capital One, you'll be part of a big group of makers, breakers, doers and disruptors who love to solve real problems and meet real customer needs. We are seeking Cyber Security Professionals who are passionate about evaluating cyber capabilities, threat intelligence, and risk management to join our team. In this role, you’ll have the opportunity to be on the forefront of driving cybersecurity governance, capability maturation, and risk transformation across Capital One.
Responsibilities
- Lead, mentor, and develop associates by setting clear expectations, providing actionable feedback, and supporting career progression
- Serve as a cybersecurity subject matter expert and advise on best practices in risk reduction through the configuration of cybersecurity tools and platforms
- Support the development, modification, and use of capability, risk, and/or threat classification frameworks and standardization methodologies to facilitate the conduct of correlative capability, maturity, and effectiveness evaluations
- Support the development, implementation, and execution of continuous improvement programs, including risk and issue identification, corrective action implementation, and results validation
- Support the identification and operationalization of cross-programmatic linkages among a.) threats and risks, b.) controls, capabilities, and tooling, and c.) data analytics in order to facilitate initiative prioritization and decisioning on spending and resource allocation.
- Lead solutioning for, and manage activities in response to, large-scale enterprise risk reduction efforts
- Effectively communicate the impact of identified operational, compliance, process, control, and tooling gaps and potential remediation courses of action to multiple audiences, including leadership, to support the enhancement of their cybersecurity postures
- Lead cross-domain cybersecurity risk assessments and capability reviews, ensuring alignment between enterprise control standards, business objectives, and regulator expectations
- Influence and coordinate risk reduction initiatives across multiple cyber programs, driving consistency in control design, testing and reporting practices
Requirements
- Bachelor's Degree
- At least 7 years of experience in cybersecurity or information technology
- At least 6 years of experience evaluating, contributing to, or supporting development of cybersecurity capabilities
Qualifications
- 7+ years of experience with cybersecurity frameworks and concepts such as NIST CSF, MITRE ATT&CK, CMMC, FedRAMP, etc.
- 7+ years of experience performing analysis of or developing solutions for cyber threats, vulnerabilities, risks, or events
- 7+ years of experience working on teams and presenting to stakeholders cybersecurity information such as metrics, threat intelligence, controls and/or requirements
- 6+ years of experience working in multi-cloud environments
- 6+ years of experience using security tools (e.g., Splunk, Crowdstrike, Qualys, or AWS Security Hub)
- 3+ years of experience developing or interpreting cybersecurity metrics or dashboards
- 3+ years of people management experience
- 2+ years of experience developing or overseeing cybersecurity or technology risk programs
- Demonstrated familiarity with industry governance or financial governance processes
- Advanced experience with risk management concepts, including identifying threats, assessing vulnerabilities, and recommending mitigation strategies.
- Ability to perform security incident analysis and assist with resolution, translating technical findings into clear, actionable reports for technical and non-technical stakeholders
Benefits
Capital One offers a comprehensive, competitive, and inclusive set of health, financial and other benefits that support your total well-being. Learn more at the Capital One Careers website. Eligibility varies based on full or part-time status, exempt or non-exempt status, and management level. This role is also eligible to earn performance based incentive compensation, which may include cash bonus(es) and/or long term incentives (LTI). Incentives could be discretionary or non discretionary depending on the plan.
Pay
- McLean, VA: $229,900 - $262,400 for Sr. Manager, Cyber Security
- New York, NY: $250,800 - $286,200 for Sr. Manager, Cyber Security
- Plano, TX: $209,000 - $238,500 for Sr. Manager, Cyber Security
- Richmond, VA: $209,000 - $238,500 for Sr. Manager, Cyber Security
- Candidates hired to work in other locations will be subject to the pay range associated with that location, and the actual annualized salary amount offered to any candidate at the time of hire will be reflected solely in the candidate’s offer letter.
We should not
for section headings (e.g. About the role, Responsibilities, Requirements, Qualifications, Skills, Benefits, Pay, Schedule). So we need sections: About the role (intro paragraph), Responsibilities (What You’ll Do), Requirements (Basic Qualifications), Qualifications (Preferred Qualifications), Skills? Could combine skills maybe from preferred qualifications? But we can have Skills section if there is specific skill content. The preferred qualifications list includes many skills/experience; we could treat that as Qualifications. Skills maybe not needed. We'll include About the role, Responsibilities, Requirements, Qualifications, Benefits, Pay.
We must not create sections with filler like "commensurate with experience". Not applicable.
We need to preserve all substantive information; do not invent or summarize away detail. So we need to keep the bullet points exactly as given? We can keep the substance but not necessarily exact wording? Probably keep the substance but can rephrase slightly? Safer to keep the bullet points as they are, maybe slightly trimmed but not lose meaning.
Let's extract responsibilities bullet points:
- Lead, mentor, and develop associates by setting clear expectations, providing actionable feedback, and supporting career progression
- Serve as a cybersecurity subject matter expert and advise on best practices in risk reduction through the configuration of cybersecurity tools and platforms
- Support the development, modification, and use of capability, risk, and/or threat classification frameworks and standardization methodologies to facilitate the conduct of correlative capability, maturity, and effectiveness evaluations
- Support the development, implementation, and execution of continuous improvement programs, including risk and issue identification, corrective action implementation, and results validation
- Support the identification and operationalization of cross-programmatic linkages among a.) threats and risks, b.) controls, capabilities, and tooling, and c.) data analytics in order to facilitate initiative prioritization and decisioning on spending and resource allocation.
- Lead solutioning for, and manage activities in response to, large-scale enterprise risk reduction efforts
- Effectively communicate the impact of identified operational, compliance, process, control, and tooling gaps and potential remediation courses of action to multiple audiences, including leadership, to support the enhancement of their cybersecurity postures
- Lead cross-domain cybersecurity risk assessments and capability reviews, ensuring alignment between enterprise control standards, business objectives, and regulator expectations
- Influence and coordinate risk reduction initiatives across multiple cyber programs, driving consistency in control design, testing and reporting practices
Basic Qualifications:
- Bachelor's Degree
- At least 7 years of experience in cybersecurity or information technology
- At least 6 years of experience evaluating, contributing to, or supporting development of cybersecurity capabilities
Preferred Qualifications (list):
- 7+ years of experience with cybersecurity frameworks and concepts such as NIST CSF, MITRE ATT&CK, CMMC, FedRAMP, etc.
- 7+ years of experience performing analysis of or developing solutions for cyber threats, vulnerabilities, risks, or, events
- 7+ years of experience working on teams and presenting to stakeholders cybersecurity information such as metrics, threat intelligence, controls and/or requirements
- 6+ years of experience working in multi-cloud environments
- 6+ years of experience using security tools (e.g., Splunk, Crowdstrike, Qualys, or AWS Security Hub)
- 3+ years of experience developing or interpreting cybersecurity metrics or dashboards
- 3+ years of people management experience
- 2+ years of experience developing or overseeing cybersecurity or technology risk programs
- Demonstrated familiarity with industry governance or financial governance processes
- Advanced experience with risk management concepts, including identifying threats, assessing vulnerabilities, and recommending mitigation strategies.
- Ability to perform security incident analysis and assist with resolution, translating technical findings into clear, actionable reports for technical and non-technical stakeholders
Benefits: "Capital One offers a comprehensive, competitive, and inclusive set of health, financial and other benefits that support your total well-being. Learn more at the Capital One Careers website. Eligibility varies based on full or part-time status, exempt or non-exempt status, and management level. This role is also eligible to earn performance based incentive compensation, which may include cash bonus(es) and/or long term incentives (LTI). Incentives could be discretionary or non discretionary depending on the plan."
Pay: Salary ranges per location:
- McLean, VA: $229,900 - $262,400 for Sr. Manager, Cyber Security
- New York, NY: $250,800 - $286,200 for Sr. Manager, Cyber Security
- Plano, TX: $209,000 - $238,500 for Sr. Manager, Cyber Security
- Richmond, VA: $209,000 - $238,500 for Sr. Manager, Cyber Security
- Candidates hired to work in other locations will be subject to the pay range associated with that location, and the actual annualized salary amount offered to any candidate at the time of hire will be reflected solely in the candidate’s offer letter.
We should keep that.
Now produce HTML:
About the role
Do you love building and pioneering in the technology space? Do you enjoy solving complex business problems in a fast-paced, collaborative, inclusive, and risk-conscious delivery environment? At Capital One, you'll be part of a big group of makers, breakers, doers and disruptors who love to solve real problems and meet real customer needs. We are seeking Cyber Security Professionals who are passionate about evaluating cyber capabilities, threat intelligence, and risk management to join our team. In this role, you’ll have the opportunity to be on the forefront of driving cybersecurity governance, capability maturation, and risk transformation across Capital One.
Responsibilities
- Lead, mentor, and develop associates by setting clear expectations, providing actionable feedback, and supporting career progression
- Serve as a cybersecurity subject matter expert and advise on best practices in risk reduction through the configuration of cybersecurity tools and platforms
- Support the development, modification, and use of capability, risk, and/or threat classification frameworks and standardization methodologies to facilitate the conduct of correlative capability, maturity, and effectiveness evaluations
- Support the development, implementation, and execution of continuous improvement programs, including risk and issue identification, corrective action implementation, and results validation
- Support the identification and operationalization of cross-programmatic linkages among a.) threats and risks, b.) controls, capabilities, and tooling, and c.) data analytics in order to facilitate initiative prioritization and decisioning on spending and resource allocation.
- Lead solutioning for, and manage activities in response to, large-scale enterprise risk reduction efforts
- Effectively communicate the impact of identified operational, compliance, process, control, and tooling gaps and potential remediation courses of action to multiple audiences, including leadership, to support the enhancement of their cybersecurity postures
- Lead cross-domain cybersecurity risk assessments and capability reviews, ensuring alignment between enterprise control standards, business objectives, and regulator expectations
- Influence and coordinate risk reduction initiatives across multiple cyber programs, driving consistency in control design, testing and reporting practices
Requirements
- Bachelor's Degree
- At least 7 years of experience in cybersecurity or information technology
- At least 6 years of experience evaluating, contributing to, or supporting development of cybersecurity capabilities
Qualifications
- 7+ years of experience with cybersecurity frameworks and concepts such as NIST CSF, MITRE ATT&CK, CMMC, FedRAMP, etc.
- 7+ years of experience performing analysis of or developing solutions for cyber threats, vulnerabilities, risks, or events
- 7+ years of experience working on teams and presenting to stakeholders cybersecurity information such as metrics, threat intelligence, controls and/or requirements
- 6+ years of experience working in multi-cloud environments
- 6+ years of experience using security tools (e.g., Splunk, Crowdstrike, Qualys, or AWS Security Hub)
- 3+ years of experience developing or interpreting cybersecurity metrics or dashboards
- 3+ years of people management experience
- 2+ years of experience developing or overseeing cybersecurity or technology risk programs
- Demonstrated familiarity with industry governance or financial governance processes
- Advanced experience with risk management concepts, including identifying threats, assessing vulnerabilities, and recommending mitigation strategies.
- Ability to perform security incident analysis and assist with resolution, translating technical findings into clear, actionable reports for technical and non-technical stakeholders
Benefits
Capital One offers a comprehensive, competitive, and inclusive set of health, financial and other benefits that support your total well-being. Learn more at the Capital One Careers website. Eligibility varies based on full or part-time status, exempt or non-exempt status, and management level. This role is also eligible to earn performance based incentive compensation, which may include cash bonus(es) and/or long term incentives (LTI). Incentives could be discretionary or non discretionary depending on the plan.
Pay
- McLean, VA: $229,900 - $262,400 for Sr. Manager, Cyber Security
- New York, NY: $250,800 - $286,200 for Sr. Manager, Cyber Security
- Plano, TX: $209,000 - $238,500 for Sr. Manager, Cyber Security
- Richmond, VA: $209,000 - $238,500 for Sr. Manager, Cyber Security
- Candidates hired to work in other locations will be subject to the pay range associated with that location, and the actual annualized salary amount offered to any candidate at the time of hire will be reflected solely in the candidate’s offer letter.