Senior InfoSec Strategy & Risk Advisor

Capital One Group; Plano, Northern (TX, KY); Hybrid; USD 209,000 - 239,000; Full time

Job summary

Capital One is seeking a Senior Lead, Information Security Office Consultant to advise on initiatives and programs that raise information security and risk management. You’ll work with Cloud, containers, microservices, APIs, and DevOps to integrate security across the development lifecycle.

You will lead cross-functional collaboration, influence stakeholders, and escalate cyber risk while delivering updates to leadership. A strong background in security concepts and architecture is essential.

Qualifications

• High-level understanding of security concepts and risk management.
• Bachelor’s degree in a related field is preferred.
• Minimum 6 years of cybersecurity/IT experience and 5+ years of guidance/oversight in security concepts.

Responsibilities

• Act as a central Information Security point of contact for Enterprise Platforms.
• Coordinate proactive Information Security consulting across Infrastructure Security, Resiliency, Data Security, Network Architecture, and User Access Management.
• Serve as an expert on Capital One’s Information Security capabilities, policies, and standards.
• Influence customers to leverage security capabilities and shift security left in development processes.
• Escalate and manage cyber security risk.
• Provide ad hoc support on Information Security topics for the business.
• Provide regular updates to executive leadership on information security health and risk.

Skills

Cloud security

Docker

APIs

DevOps

Microservices

Security architecture

Leadership

Education

Bachelor’s Degree

Tools

AWS

Kubernetes

Job description

Capital One is seeking a Senior Lead, Information Security Office Consultant to advise on initiatives and programs that raise information security and risk management. You’ll work with Cloud, containers, microservices, APIs, and DevOps to integrate security across the development lifecycle.

You will lead cross-functional collaboration, influence stakeholders, and escalate cyber risk while delivering updates to leadership. A strong background in security concepts and architecture is essential.