Senior Information Security Strategy Consultant

Capital One Group; New York (NY); On-site; USD 250,000 - 286,000; Full time

Job summary

Capital One is seeking a Senior Lead Information Security Office Consultant to act as a central security partner for the Developer Experience line, coordinating proactive consulting across infrastructure, data security, and access management. You will influence cyber architecture strategy with architects and enable secure DevSecOps in modern platforms.

Ideal candidates bring strong risk analysis, threat modeling, and security certifications; familiarity with AWS, GCP, and Azure; and the ability

Qualifications

• Demonstrated experience in cyber risk analysis, threat modeling and remediation.
• Experience securing public cloud environments (AWS, GCP, Azure).
• Familiar with ISO 27001, ITIL, COBIT, PCI DSS, GDPR, NIST CSF frameworks.

Responsibilities

• Act as a central Information Security point of contact for the Developer Experience line of business.
• Coordinate proactive Information Security consulting across Infrastructure Security, Resiliency, Data Security, Network Architecture and User Access Management.
• Define and drive cyber architecture strategy with enterprise cyber teams and tech architects.
• Support security architecture and implementation for modernization and DevSecOps.
• Provide regular updates to executive leadership on overall information security health and risk.

Skills

Threat modeling

Cyber risk analysis

Security architecture reviews

Cloud security engineering

Communication skills

ISO 27001

Education

Bachelor's degree

Tools

AWS

GCP

Azure

DevSecOps

Job description

Capital One is seeking a Senior Lead Information Security Office Consultant to act as a central security partner for the Developer Experience line, coordinating proactive consulting across infrastructure, data security, and access management. You will influence cyber architecture strategy with architects and enable secure DevSecOps in modern platforms.

Ideal candidates bring strong risk analysis, threat modeling, and security certifications; familiarity with AWS, GCP, and Azure; and the ability