Capital One Lead Information Security Office Consultant 

United States, Virginia, Arlington 

648569491

Responsibilities:

• Act as a central Information Security point of contact for the Commercial line of business

• Coordinate and execute proactive Information Security consulting to the business and technology teams covering Infrastructure Security, Resiliency, Data Security, Network Architecture and Design, and User Access Management

• Serve as an expert in Capital One’s Information Security capabilities, solutions, policies, procedures and standards

• Influence customers to leverage security capabilities and solutions to shift and integrate security to the left in the development processes

• Escalate and manage cyber security risk

• Provide ad hoc support on special Information Security hot topics for the business

• Provide regular updates to executive leadership with your line of business on the overall Information Security health and risk environment

• Work with line of business leadership to anticipate their objectives and needs to better serve the line of business

About You:

• You have a desire to work in a very fast moving, forward leaning, and modern computing environment

• You have a deep passion for Securing modern computing platforms

• You have a strong desire to continually learn about new technologies

• You possess strong conceptual thinking and communication skills

• You are able to work well under minimal supervision

• You are a demonstrated leader with team-oriented interpersonal skills and the ability to interface effectively with a broad range of people and roles, including upper management, IT leaders, and technology vendors

• You maintain calmness and clarity of thought under pressure and ability to maintain confidentiality

• You have a deep understanding of strategic business objectives and the ability to drive results toward those objectives

Basic Qualifications:

• High School Diploma, GED or equivalent certification

• At least 4 years of experience working in cybersecurity or information technology

• At least 2 year of experience providing guidance and oversight of Security concepts

Preferred Qualifications:

• Bachelor’s Degree

• 4+ years of experience in securing a public cloud environment (e.g. AWS, GCP, Azure)

• Experience building software utilizing public cloud (e.g. AWS, GCP, Azure)

• Familiarity with Cloud patch management practices such as system rehydration and image management

• Experience utilizing Agile methodologies

• Experience with Software Security Architecture

• Experience with Application Security

• Experience with Threat Modeling

• Experience with Penetration Testing and/or Vulnerability Management

• Experience with integrating SaaS products into an Enterprise Environment

• Experience with securing Container services

• Financial services industry experience

• Professional certifications such as AWS Certified Solutions Architect and Certified Information Systems Security Professional (CISSP)

• Experience in Offensive and/or Defensive Security techniques

• Experience in a regulated environment

. Eligibility varies based on full or part-time status, exempt or non-exempt status, and management level.