InfoSec Strategy & Risk Manager

Capital One National Association; McLean (VA); On-site; USD 197,000 - 225,000; Full time

Job summary

Capital One is seeking a hands-on security leader to consult on initiatives across Information Security and Risk Management. You will leverage cloud, containers, microservices, and AI-assisted tools to prototype and implement security solutions, dashboards, and automated workflows.

You will partner with technology teams, escalate cyber risk, and keep executive leadership informed on security posture. Strong collaboration, communication, and technical leadership are essential.

Qualifications

• Must have 4+ years advisory/oversight of cybersecurity concepts.
• 3+ years security risk assessments and security architecture reviews.
• 3+ years architecture design, software design, networking or Cloud infrastructure.
• Preferred: 6+ years in architecture design, software design, networking or Cloud infra.

Responsibilities

• Act as a central point of contact for your line of business to Capital One’s Information Security and Risk Management.
• Coordinate and execute proactive information security consulting to business and technology teams.
• Leverage modern development and AI-assisted tools to prototype and build security solutions, automations, dashboards, and workflows.
• Serve as an expert in Capital One’s Information Security capabilities, solutions, policies, procedures and standards.
• Influence customers to shift security left in development processes.
• Escalate and manage cybersecurity risk.
• Provide updates to executive leadership on information security health and risk.

Education

High School Diploma/GED or equivalent

Bachelor’s Degree

Security Architecture

Security Risk Assessments

Cloud Infrastructure

Agile Methodologies

Scripting/Automation (Python/PowerShell)

AI-assisted development tools

Regulatory Audits Experience

Tools

AWS/Azure/GCP

Docker

Kubernetes

DevOps

CI/CD tools

Job description

Capital One is seeking a hands-on security leader to consult on initiatives across Information Security and Risk Management. You will leverage cloud, containers, microservices, and AI-assisted tools to prototype and implement security solutions, dashboards, and automated workflows.

You will partner with technology teams, escalate cyber risk, and keep executive leadership informed on security posture. Strong collaboration, communication, and technical leadership are essential.