Senior Cyber Security Lead & Risk Strategist

Capital One; New York (NY); On-site; USD 251,000 - 286,000; Full time

Job summary

Capital One in New York, NY is seeking a Senior Lead, Cyber Security (GPN) to drive enterprise security initiatives, mentor teams, and partner with business units to reduce risk across cloud and on-prem environments. You will lead efforts to assess threats, develop risk-based prioritization, and communicate complex findings to technical and non-technical stakeholders.

The role emphasizes collaboration, governance, and a pragmatic approach to security.

Qualifications

• Bachelor’s degree required and 7+ years of relevant cybersecurity/IT experience.
• Experience evaluating or developing cybersecurity capabilities.
• Strong knowledge of security frameworks and risk management.
• Experience leading teams and communicating with stakeholders.

Responsibilities

• Lead, mentor, and develop associates by setting expectations and supporting career progression.
• Advise on risk reduction through configuration of cybersecurity tools and platforms.
• Support framework development for capability, risk, and threat classifications.
• Drive continuous improvement programs including risk identification and corrective actions.
• Identify cross-programmatic linkages among threats, controls, tooling, and analytics for prioritization.
• Lead solutioning for large-scale enterprise risk reduction efforts.
• Communicate impact of gaps and remediation options to leadership.
• Lead cross-domain risk assessments ensuring alignment with standards and objectives.
• Influence risk reduction initiatives across cyber programs for consistent control design.

Skills

Cybersecurity leadership

Risk assessment

Cloud security

Multi-cloud environments

Education

Bachelor’s degree

Tools

Splunk

CrowdStrike

Qualys

AWS Security Hub

Job description

Capital One in New York, NY is seeking a Senior Lead, Cyber Security (GPN) to drive enterprise security initiatives, mentor teams, and partner with business units to reduce risk across cloud and on-prem environments. You will lead efforts to assess threats, develop risk-based prioritization, and communicate complex findings to technical and non-technical stakeholders.

The role emphasizes collaboration, governance, and a pragmatic approach to security.