Senior Cyber Security Manager — Cloud & Risk

Capital One; McLean (VA); On-site; USD 230,000 - 262,000; Full time

Job summary

Capital One is seeking a Senior Manager for Cyber Security (GPN) to lead and mentor a team focused on risk reduction, governance, and cross-program collaboration across multi-cloud environments. You will advise on best practices, develop capability maturity, and drive remediation through data-driven metrics.

The role requires strong communication to leadership, expert knowledge of cybersecurity frameworks, and a pragmatic approach to balancing risk with business needs.

Qualifications

• Bachelor's degree required.
• 7+ years of experience in cybersecurity or information technology.
• 7+ years evaluating, contributing to, or supporting development of cybersecurity capabilities.

Responsibilities

• Lead, mentor, and develop associates with clear expectations and feedback.
• Serve as cybersecurity SME advising on risk reduction through tool configuration.
• Support capability, risk, and threat frameworks and standardization.
• Drive continuous improvement programs including action tracking and validation.
• Identify cross-programmatic linkages among threats, controls, and data analytics for prioritization.
• Lead solutions and coordinate large-scale enterprise risk reduction efforts.
• Communicate impact of gaps and remediation plans to leadership.
• Lead cross-domain risk assessments ensuring alignment with standards and objectives.

Skills

Leadership

Risk assessment

Strategic thinking

Communication with leadership

Education

Bachelor's degree

Tools

Splunk

CrowdStrike

Qualys

AWS Security Hub

Job description

Capital One is seeking a Senior Manager for Cyber Security (GPN) to lead and mentor a team focused on risk reduction, governance, and cross-program collaboration across multi-cloud environments. You will advise on best practices, develop capability maturity, and drive remediation through data-driven metrics.

The role requires strong communication to leadership, expert knowledge of cybersecurity frameworks, and a pragmatic approach to balancing risk with business needs.