Cyber Security Strategy & Risk Governance Lead

Capital One National Association; McLean (VA); On-site; USD 197,000 - 225,000; Full time

Job summary

Capital One is seeking a Manager, Cyber Security, Cyber Fraud Intelligence to lead the ongoing advancement of cybersecurity capabilities and risk management across the organization. You will partner with stakeholders to assess capability effectiveness and drive governance, measurement, and remediation efforts.

Qualified candidates bring 5+ years in cybersecurity, deep knowledge of CSF/ATT&CK, and experience in multi-cloud and regulated environments.

Qualifications

• Bachelor's Degree required; minimum 5 years in cybersecurity or IT.
• At least 4 years evaluating or supporting development of cybersecurity capabilities.
• Experience with governance, risk management, and metrics.
• Familiarity with industry frameworks (NIST CSF, MITRE ATT&CK, etc.).

Responsibilities

• Lead advancement of cybersecurity capabilities and risk management practices.
• Analyze data from multiple sources to produce risk indicators and program metrics.
• Provide expertise during control and risk assessments; document remediation plans.
• Drive automation to streamline monitoring, issue management, and reporting.
• Present cyber-risk insights to senior management and stakeholders.
• Mentor associates and promote best practices in cyber-risk management.

Skills

Cybersecurity

Threat intelligence

Risk management

Governance

Stakeholder communication

Mentoring

Data analysis

Automation awareness

Education

Bachelor's Degree

Tools

Splunk

CrowdStrike

Qualys

AWS Security Hub

Job description

Capital One is seeking a Manager, Cyber Security, Cyber Fraud Intelligence to lead the ongoing advancement of cybersecurity capabilities and risk management across the organization. You will partner with stakeholders to assess capability effectiveness and drive governance, measurement, and remediation efforts.

Qualified candidates bring 5+ years in cybersecurity, deep knowledge of CSF/ATT&CK, and experience in multi-cloud and regulated environments.