Description
We are seeking a Director, Risk Advisory - Global Payment Networks to join our team at Capital One. As a Tech Risk & Analysis Professional, you will be responsible for applying expertise on cyber best practices to assess current state, identify gaps, and assess cyber risk, threats, and business impact.
Responsibilities:
- Possesses an understanding of technology systems at an aggregate level, including networks, applications, cloud computing, and data
- Maintains a broad understanding of relevant operating systems and their respective vulnerabilities in order to quickly identify the severity of potential issues
- Demonstrates a broad understanding of major categories of cyber threats, how those threats can occur in our environment, and the measures required to safeguard the enterprise
- Leverages reporting and tools to perform analysis on different types of projects, efforts, or datasets and uses data to inform policies and drive change
- Understands associated reporting metrics and is able to inform on cyber risk
- May use code to perform and/or automate analysis and repeatable tasks, but not a baseline requirement for the role
- Leverages tools to analyze data and create charts to support cyber risk management efforts
- Quickly and accurately analyzes data, assesses risk, and prioritizes published vulnerabilities and potential risks to differentiate critical, high-risk, and low-risk issues, and escalates as appropriate
- Researches, assembles, and/or evaluates information regarding industry practices or applicable regulatory changes affecting cybersecurity policies or programs; recommends sound, practical solutions to complex issues
- Makes recommendations regarding changes to policies, procedures, and control programs to mitigate evolving risks
- Effectively self-challenges cyber control programs as part of first-line duties and escalates risks where appropriate
- Demonstrates sound lifecycle program management to include documenting and communicating action plans, impediments and risks, and stakeholder engagement
- Reports on vulnerability assessments to ensure proper functionality and alignment with Information Security Standards
- Advises Accountable Executives of cyber-related risk on a consistent basis via relevant risk forums and through existing processes such as exception and issue management
- Keeps pace with the evolving cyber threat landscape to ensure ongoing relevance of cyber risk mitigation
Basic Qualifications:
- Bachelor’s Degree or military experience
- At least 9 years of experience in technology, cybersecurity, technology auditing, systems risk management, or a combination
Preferred Qualifications:
- Master’s Degree in Information Technology, Cybersecurity, or equivalent
- 9+ years of Risk Management experience in Cyber or Information Security practice
- 9+ years of experience in cloud computing (AWS, GCP, or Azure)
- 9+ years of experience in a second-line or oversight role at a financial institution or regulatory agency
- Third party risk management experience
- Professional Security Certification or Professional Risk Management Certification
- Certified Information Systems Security Professional (CISSP)
- Certified Information Systems Auditor (CISA)
- Certified in Risk and Information Systems Control (CRISC)
- Open FAIR Certified
Salary: Chicago, IL: $209,500 - $239,100 for Director, Tech Risk & Analysis McLean, VA: $230,400 - $263,000 for Director, Tech Risk & Analysis New York, NY: $251,400 - $286,900 for Director, Tech Risk & Analysis Richmond, VA: $209,500 - $239,100 for Director, Tech Risk & Analysis Riverwoods, IL: $209,500 - $239,100 for Director, Tech Risk & Analysis
Benefits: Capital One offers a comprehensive, competitive, and inclusive set of health, financial and other benefits that support your total well-being.