Senior Cyber Security Lead: Risk & Governance

Capital One; Richmond (VA); On-site; USD 209,000 - 239,000; Full time

Job summary

Capital One seeks a Sr. Manager, Cyber Security in Richmond, VA to lead and develop teams while driving risk reduction and governance initiatives. You will advise on security best practices, collaborate across programs, and shape capability maturity with leadership visibility.

Strong focus on metrics, incident analysis, and cross-domain risk alignment. The role emphasizes advanced risk concepts, multi-cloud experience, and communication of complex findings to technical and non‑technical

Qualifications

• Bachelor's degree required with strong cybersecurity foundation.
• 7+ years in cybersecurity or IT, 6+ years evaluating capabilities.
• Experience with risk management, threat analysis, and governance.

Responsibilities

• Lead, mentor, and develop associates with clear expectations and growth.
• Advise on risk reduction using cybersecurity tools and platforms.
• Support capability, risk, and threat framework development and standardization.
• Drive continuous improvement programs, risk/issue identification and action.
• Coordinate cross-programmatic risk linkages and resource allocation.
• Lead enterprise risk reduction efforts and manage large-scale initiatives.
• Communicate gaps and remediation options to leadership for posture improvement.
• Lead cross-domain risk assessments aligning standards, objectives, and regulators.

Skills

Leadership

Mentoring

Risk management

Threat intelligence

Cybersecurity governance

Communication with leadership

Cross-functional collaboration

Education

Bachelor's Degree

Tools

Splunk

CrowdStrike

Qualys

AWS Security Hub

Job description

Capital One seeks a Sr. Manager, Cyber Security in Richmond, VA to lead and develop teams while driving risk reduction and governance initiatives. You will advise on security best practices, collaborate across programs, and shape capability maturity with leadership visibility.

Strong focus on metrics, incident analysis, and cross-domain risk alignment. The role emphasizes advanced risk concepts, multi-cloud experience, and communication of complex findings to technical and non‑technical