The point where experts and best companies meet
Share
About You...
You have strong consulting and analytical skills
You have demonstrated clear communication skills and ability to interact effectively at all levels of an organization, and to influence senior management and executives (Including translating technical information based on specific audiences)
You have experience managing multiple high-visibility and high-impact enterprise cybersecurity initiatives with cross-functional teams while maintaining superior results through risk analytics, data governance, and insight generation
You are a thought leader with team-oriented interpersonal skills and the ability to interface effectively with a broad range of people and roles, including upper management, IT leaders, and technology vendors
You have experience working with several of the following industry standards and frameworks: MITRE ATT&CK, MITRE DEFEND, MITRE ATLAS, NIST 800-53, NIST CSF, SANS 20
You have passion and expertise in one or more of the following areas: risk analytics, data analytics, machine learning, SQL, Python, cloud security, network security, vulnerability management, data protection, threat intelligence and investigations, or identity and access management
What you’ll do:
Develop and communicate risk-based and data-driven metrics, reporting, and insights for enterprise security services and solutions, in partnership with threat intel, engineering and operations partners, customers, and other stakeholders
Play a key role in developing and executing the Enterprise Cyber Metrics Strategy (ECMS), using your cybersecurity expertise and industry standards and frameworks experience
Develop new best practices and methodologies for risk quantification
Build relationships with Information Security Officers, product managers, and business requirement stakeholders to generate new or improved value streams using data and insights
Advise executive decision makers based on business and technology risk grounded in threat and risk analytics
Work with key stakeholders to anticipate their objectives and needs to better execute the cyber strategy
Proactively identify information security risk and partner with key stakeholders to reduce or eliminate risk
Coordinate and execute proactive consulting to both internal and external teams as it relates to Cyber analytics
Support Cyber related projects and initiatives and influence customers to make solid risk decisions
Provide regular updates to executive leadership through effective metrics and reporting
Escalate and manage cyber security risk through data analytics
Provide ad hoc support on special departmental goals, objectives, and initiatives
You’re heavily into problem solving, and love diving deep into data sets to draw out actionable insights and recommendations
You understand how to set a data roadmap and prioritize decision making around what’s most critical for the team and business
You will drive current and future team’s metrics strategy by leveraging your analytical skills
Collaborate across the Cyber organization in defining the metrics and analytics ecosystem
Work with top talent in a fast paced, entrepreneurial environment where analytics and good data are a top priority
On any given day you will be:
You will assess Capital One’s metrics and data ecosystem to conceptualize and build a best in class metrics program
You effectively partner with other teams, technical and non-technical, to understand business needs, use cases, and priorities
You seek out opportunities to bring new ideas, techniques, and approaches to improve existing products and services
Identifying gaps, proposing improvements, implementing processes, and reporting progress
Mining data to arrive at specific and crucial information for the organization
Identifying and implementing process, data, and reporting improvements for the organization
Extracting and analyzing data to influence risk management strategies
Consulting on the design and implementation of new production and data storage systems
Basic Qualifications:
High School Diploma, GED, or equivalent certification
At least 4 years of experience in cybersecurity or information technology
At least 3 years of experience in risk modeling or analytics
At least 3 years of experience translating cybersecurity metrics and analysis into risk management strategies
At least 2 years of experience providing guidance and oversight of cyber security concepts
At least 2 years of experience performing cyber security risk assessments or cyber security architecture reviews
Preferred Qualifications:
Bachelor’s Degree
4+ years of experience with enterprise security metrics and risk analytics
4+ years of experience with machine learning, data science, or data analytics
3+ years of experience in public cloud security and multi-cloud environments
3+ years of experience with product management
3+ years of experience with Python, R, Spark, or SQL
3+ years of experience with BI Tools (Tableau, Quicksight, or ThoughtSpot)
1+ years of experience with Agile process and JIRA management and reporting
1+ years of experience in regulated financial services organizations
CISSP, GIAC (various), CISM, CCSP, CISA, AWS Security, AWS Advanced Networking Specialty, or AWS Solutions Architect certification
. Eligibility varies based on full or part-time status, exempt or non-exempt status, and management level.
If you have visited our website in search of information on employment opportunities or to apply for a position, and you require an accommodation, please contact Capital One Recruiting at 1-800-304-9102 or via email at . All information you provide will be kept confidential and will be used only to the extent required to provide needed reasonable accommodations.
These jobs might be a good fit