Director of Cyber Security Governance & Risk Office

ITSMF; McLean (VA); On-site; USD 269,000 - 307,000; Full time

Job summary

Capital One seeks a Director, Information Security Office Consultant to lead cybersecurity governance, risk transformation, and capability maturation in a fast-paced environment. You will guide senior managers, shape risk-based decisions, and drive strategic security initiatives across the organization.

The role offers high-visibility leadership, cross-functional collaboration, and opportunities to influence security posture, metrics, and incident response at scale.

Qualifications

• Bachelor's Degree in cybersecurity, IT, or related field.
• 9+ years of cybersecurity or IT experience.
• 8+ years evaluating or supporting cybersecurity capabilities.

Responsibilities

• Provide strategic leadership to senior managers and associates to build a high-performing cybersecurity organization.
• Advise on risk reduction by configuring cybersecurity tools and platforms.
• Develop and standardize capability, risk, and threat classification frameworks.
• Support continuous improvement programs including risk and action tracking.
• Identify cross-programmatic linkages among threats, controls, tooling, and data analytics.
• Lead solutioning for large-scale enterprise risk reduction efforts.
• Communicate gaps and remediation options to leadership.
• Oversee enterprise cybersecurity risk assessments and maturity evaluations.
• Direct cross-functional governance initiatives aligning risk, engineering, and compliance.

Skills

Cybersecurity governance

Risk management

Threat intelligence

Leadership

Communication

Stakeholder management

Multi-cloud

Security tools

Incident analysis

Metrics & dashboards

Education

Bachelor's Degree

Tools

Splunk

CrowdStrike

Qualys

AWS Security Hub

Power BI

Job description

Capital One seeks a Director, Information Security Office Consultant to lead cybersecurity governance, risk transformation, and capability maturation in a fast-paced environment. You will guide senior managers, shape risk-based decisions, and drive strategic security initiatives across the organization.

The role offers high-visibility leadership, cross-functional collaboration, and opportunities to influence security posture, metrics, and incident response at scale.