Senior InfoSec Office Consultant - Cloud & DevSecOps

Capital One; Richmond (VA); On-site; USD 209,000 - 239,000; Full time

Job summary

Capital One seeks an experienced Information Security consultant to lead risk and architecture efforts for developer-focused initiatives. You will advise on Infrastructure Security, Data Security, Network Design, and access controls, collaborating with enterprise cyber teams and platform architects to shape modern cyber architecture.

You will promote secure development practices and guide remediation across governance and technology groups.

Qualifications

• Six+ years in cybersecurity or IT with emphasis on risk and architecture.
• Experience in threat modeling and security architecture reviews.
• Experience securing public cloud environments (AWS/GCP/Azure).
• Familiarity with ISO 27001, ITIL, COBIT, PCI DSS, GDPR, NIST CSF.
• Cloud certifications such as AWS Solutions Architect are a plus.

Responsibilities

• Act as a central Information Security point of contact for the Developer Experience line of business.
• Coordinate and execute proactive Information Security consulting to the business and technology teams covering Infrastructure Security, Resiliency, Data Security, Network Architecture and Design, and User Access Management.
• Serve as an expert in Capital One’s Information Security capabilities, solutions, policies, procedures and standards.
• Collaborate with enterprise cyber teams and tech architects in defining and driving the cyber architecture strategy and guiding principles for the architecting and designing of the modern platforms.
• Support security architecture and implementation needs for technology modernization and DevSecOps efforts.
• Influence customers to leverage security capabilities and solutions to shift and integrate security to the left in the development processes.
• Escalate and manage cyber security risk.
• Provide ad-hoc support on special Information Security topics for the business.
• Provide regular updates to executive leadership with your line of business on the overall Information Security health and risk environment.
• Work with line of business leadership to anticipate their objectives and needs to better serve the line of business.
• Support data validation and communications on the impact of identified operational, compliance, process, control, and tooling gaps and potential remediation courses of action to multiple audiences, including leadership, to support the enhancement of their cybersecurity postures.

Skills

Cyber risk analysis

Security risk assessments

Threat modeling

Security architecture reviews

Cloud security engineering

Public cloud (AWS/GCP/Azure)

Education

Bachelor's Degree

Tools

AWS Certified Solutions Architect

CISSP

CISM

CISA

Job description

Capital One seeks an experienced Information Security consultant to lead risk and architecture efforts for developer-focused initiatives. You will advise on Infrastructure Security, Data Security, Network Design, and access controls, collaborating with enterprise cyber teams and platform architects to shape modern cyber architecture.

You will promote secure development practices and guide remediation across governance and technology groups.