Senior Associate, Cyber Risk & Analysis (Information Security Office Command Center)

Capital One - Plano, TX

Full-time - Mid Level

Plano, TX

251-500 employees

Credit Intermediation and Related Activities

About the position

As a Senior Associate in Cyber Risk & Analysis at Capital One, you will play a crucial role in enhancing the Cyber Security Posture of the Financial Services line of business. This position involves collaborating with the cyber security team and various technical teams to manage and improve security measures, utilizing the SLQ2CQ management framework to deliver strategic projects. The ideal candidate will be a disciplined project and risk management professional with a strong background in cyber security, capable of working independently while influencing cross-functional partners.

Responsibilities

• Drive cross-functional projects based on defined priorities; ensure scope of deliverables and timelines; identify risks and issues and mitigate or escalate as needed; manage complex project impacts.
• Leverage problem-solving skills to ensure project plans deliver on intent and maintain key project documentation.
• Act as a central Information Security point of contact for the Financial Services line of business.
• Serve as an expert in Capital One's Information Security capabilities, solutions, policies, procedures, and standards.
• Forge relationships with key stakeholders to ensure delivery of commitments.
• Provide ad hoc support on special Information Security hot topics for the business.
• Develop risk management reports and tailor risk reporting and communications to stakeholder audiences.
• Draft agendas, manage risk management action items, and coordinate with stakeholders to develop risk management materials for senior management discussions.
• Provide regular updates to team leadership on the overall Information Security health and risk environment.
• Manage multiple risk management projects while maintaining superior results.

Requirements

• High School Diploma, GED or equivalent certification.
• At least 1.5 years of experience managing, consulting, auditing, or working in information security, technology, or risk management.
• At least 1 year of experience developing, evaluating, or implementing cybersecurity requirements, technology strategy, or governance structures.
• At least 1 year of project management experience.

Nice-to-haves

• Bachelor's Degree
• 2+ years of experience managing, consulting, auditing, or working in information security, technology, or risk management.
• 2+ years of experience with cybersecurity or technology policies.
• 2+ years of experience in securing a public cloud environment (AWS, GCP, or Azure).
• Certified Information Systems Security Professional (CISSP) or Certified Information Security Manager (CISM).

Benefits

• Comprehensive health benefits
• Financial benefits
• Inclusive set of benefits supporting total well-being