Cyber Security Strategy Lead | Risk & Governance

Capital One Group; New York, Northern (NY, KY); Hybrid; USD 251,000 - 286,000; Full time

Benefits offered by this job

Performance-based incentives

Health benefits

Job summary

Capital One is seeking a Senior Manager of Cyber Security to lead teams, advance risk reduction, and align controls with business objectives. The role emphasizes governance, capability maturation, and cross-functional collaboration across large-scale programs.

The ideal candidate brings 7+ years in cybersecurity, strong expertise in NIST CSF/MITRE ATT&CK, and a track record of communicating complex findings to senior leadership.

Qualifications

• Bachelor's Degree in a related field.
• 7+ years in cybersecurity or information technology.
• 6+ years evaluating, contributing to, or supporting development of cybersecurity capabilities.

Responsibilities

• Lead, mentor, and develop associates by setting clear expectations and providing feedback.
• Advise on risk reduction through configuration of cybersecurity tools and platforms.
• Support development and standardization of capability, risk, and threat classification frameworks.
• Drive continuous improvement programs including risk and issue ID, corrective actions, and validation.
• Coordinate cross-program linkages among threats, controls, capabilities, and data analytics.
• Lead enterprise risk reduction initiatives and communicate remediation options to leadership.
• Coordinate risk assessments and capability reviews to align standards with business goals and regulator expectations.

Skills

Cybersecurity leadership

Threat intelligence

Risk assessment

Governance

Cloud security (multi-cloud)

Security tooling (Splunk/CrowdStrike/Q

Education

Bachelor's Degree

Tools

Splunk

CrowdStrike

Qualys

AWS Security Hub

Job description

Capital One is seeking a Senior Manager of Cyber Security to lead teams, advance risk reduction, and align controls with business objectives. The role emphasizes governance, capability maturation, and cross-functional collaboration across large-scale programs.

The ideal candidate brings 7+ years in cybersecurity, strong expertise in NIST CSF/MITRE ATT&CK, and a track record of communicating complex findings to senior leadership.