Apply on Employer Site

Capital One · 4 days ago

Senior Manager, Information Security Office (ISO) Consultant

McLean, VA

Full-time

Onsite

Senior Level

$209K/yr - $286K/yr

6+ years exp

Capital One is a leading financial services company, and they are seeking a Senior Manager, Information Security Office (ISO) Consultant to enhance their Information Security initiatives. The role involves consulting on security architecture, coordinating proactive security measures, and collaborating with various teams to ensure robust security practices across the organization.

BankingCredit CardsFinanceFinancial Services

Comp. & Benefits

No H1B

Responsibilities

Act as a central Information Security point of contact for the Global Payment Networks line of business

Coordinate and execute proactive Information Security consulting to the business and technology teams covering Infrastructure Security, Resiliency, Data Security, Network Architecture and Design, and User Access Management

Serve as an expert in Capital One’s Information Security capabilities, solutions, policies, procedures and standards

Collaborating with enterprise cyber teams and tech architects in defining and driving the cyber architecture strategy and guiding principles for the architecting and designing of the modern platforms

Support security architecture and implementation needs for technology modernization efforts

Overseeing all cyber related dependencies across the multiple components being built for the modernization effort

Influence customers to leverage security capabilities and solutions to shift and integrate security to the left in the development processes

Escalate and manage cyber security risk

Provide ad-hoc support on special Information Security hot topics for the business

Provide regular updates to executive leadership with your line of business on the overall Information Security health and risk environment

Work with line of business leadership to anticipate their objectives and needs to better serve the line of business

Support the team on collectively mapping technologies to a standardized framework in order to identify and execute on best practices in risk reduction through the configuration of cybersecurity tools and platforms

Support the development, modification, and use of capability, risk, or threat classification frameworks and standardization methodologies to facilitate the conduct of correlative capability, maturity, and effectiveness evaluations

Support data validation and communications on the impact of identified operational, compliance, process, control, and tooling gaps and potential remediation courses of action to multiple audiences, including leadership, to support the enhancement of their cybersecurity postures

Qualification

Cloud SecurityCyber Security ArchitectureCyber Risk ManagementCyber Security ConsultingPublic Cloud ExperienceCryptographyPCI ComplianceConceptual ThinkingCommunication SkillsTeam Leadership