Senior Cyber Security Risk & Governance Lead

ITSMF; New York (NY); On-site; USD 215,000 - 246,000; Full time

Job summary

Capital One is seeking a Manager, Cyber Security within the Information Security Office to lead cybersecurity governance, risk transformation, and capability maturation. You will drive CSF-aligned initiatives, present insights to executives, and mentor teams in cyber-risk practices.

The role requires extensive experience in security risk assessments, cloud security, and multi-cloud environments, with leadership across stakeholder groups. This is a full-time, on-site position in New York.

Qualifications

• Bachelor's degree required.
• 5+ years in cybersecurity or information technology.
• 5+ years performing security risk assessments and security architecture reviews.
• 5+ years of architecture, software design, networking, or cloud infrastructure.
• 4+ years evaluating, contributing to, or supporting development of cybersecurity capabilities.
• 4+ years of cloud security engineering.
• 1+ year implementing AI in cybersecurity.

Responsibilities

• Lead the ongoing advancement of cybersecurity capabilities and services with stakeholders using CSF and risk management practices.
• Leverage data from multiple sources to produce risk indicators and program metrics.
• Provide expertise during control and risk assessments; ensure remediation plans are tracked to closure.
• Drive automation and tooling to streamline control monitoring and risk reporting workflows.
• Synthesize cyber-risk insights for senior management forums; highlight trends and risk-reduction opportunities.
• Mentor associates and promote consistent application of cyber-risk management methodologies.

Skills

Cybersecurity

Risk assessment

Security architecture

Cloud security engineering

AI in cybersecurity

Education

Bachelor's degree

Tools

Splunk

CrowdStrike

Qualys

AWS Security Hub

Job description

Capital One is seeking a Manager, Cyber Security within the Information Security Office to lead cybersecurity governance, risk transformation, and capability maturation. You will drive CSF-aligned initiatives, present insights to executives, and mentor teams in cyber-risk practices.

The role requires extensive experience in security risk assessments, cloud security, and multi-cloud environments, with leadership across stakeholder groups. This is a full-time, on-site position in New York.