Senior InfoSec Office Lead: Cloud & Risk

Dev; Waco (TX); Hybrid; USD 230,000 - 263,000; Full time

Job summary

Capital One is seeking a Senior Manager, Information Security Office Consultant to lead enterprise security initiatives and provide strategic guidance across infrastructure, data, and application security.

The role emphasizes risk management, collaboration with multiple teams, and advanced expertise in cloud security, authentication, and access control. This position requires navigating a hybrid work model in key locations and delivering security excellence across the business.

Qualifications

• Bachelor’s Degree or equivalent in a related field.
• 3+ years securing public cloud environments (AWS, GCP, Azure).
• Experience with IAM or related areas.

Responsibilities

• Act as a central Information Security point of contact for the Enterprise Platform team.
• Coordinate proactive Information Security consulting across Infrastructure Security, Resiliency, Data Security, Network Architecture and User Access Management.
• Influence customers to leverage security capabilities and integrate security to the left in development processes.
• Escalate and manage cyber security risk.
• Provide regular updates to executive leadership on Information Security health and risk.

Skills

Information Security

Cloud Security

Security Risk Assessments

Security Architecture Reviews

Authentication/Access Management

Threat Modeling

Penetration Testing

Agile Methodologies

Communication

Education

Bachelor's Degree

High School Diploma or GED

Tools

AWS

Azure

GCP

IAM Tools

Job description

Capital One is seeking a Senior Manager, Information Security Office Consultant to lead enterprise security initiatives and provide strategic guidance across infrastructure, data, and application security.

The role emphasizes risk management, collaboration with multiple teams, and advanced expertise in cloud security, authentication, and access control. This position requires navigating a hybrid work model in key locations and delivering security excellence across the business.