Capital One · 5 days ago

Senior Associate, Cyber Risk Manager

McLean, VA

Full-time

Onsite

Mid Level

1+ years exp

Wonder how qualified you are to the job?

Maximize your interview chances

BankingCredit Cards

Actively Hiring

Comp. & Benefits

Insider Connection @Capital One

Discover valuable connections within the company who might provide insights and potential referrals, giving your job application an inside edge.

Responsibilities

Serve as an Information Security Risk Management subject matter expert and advise on best practices in risk reduction through the configuration of cybersecurity tools and platforms.

Leverage capability, risk, and/or threat classification frameworks and standardization methodologies to facilitate evaluations of cybersecurity tool effectiveness.

Through the periodic re-evaluation of cybersecurity tools and suites, support the implementation and execution of a continuous improvement program, inclusive of risk and issue identification, corrective action implementation, and results validation.

Articulate operations, compliance, and cybersecurity objectives for engineering and products to inform prioritized risk reduction.

Effectively communicate the impact of identified operational, compliance, process, control, and tooling gaps and potential remediation courses of action to multiple audiences, including leadership, to support the enhancement of their cybersecurity postures.

Lead solutioning for, and manage activities in response to, large-scale enterprise risk reduction efforts.

Qualification

Find out how your skills align with this job's requirements. If anything seems off, you can easily click on the tags to select or unselect skills to reflect your actual expertise.

CybersecurityRisk ManagementIT OperationsSecurity MonitoringOperational ComplianceIT AuditSystems AdministrationNetwork AdministrationApplication Security ScanningAgile MethodologiesSecurity+CRISCCISSPCISMCSAAWS Cloud PractitionerAWS Certified Solutions Architect Associate

Required

High School Diploma, GED, or equivalent certification

At least 1 year of experience in cybersecurity

At least 1 year of experience with technology or cybersecurity risk management frameworks

Preferred

Bachelor’s Degree

1+ years of experience with IT operations

1+ years of experience with monitoring, gathering, and assessing artifacts as part of continuous security monitoring (C&A, POA&M, NIST 800-37, MITRE ATT&CK or MITRE D3FEND)

1+ years of experience in operational compliance or IT audit

1+ years of experience as a Systems Administrator or Network Administrator

1+ years of experience with static and dynamic application security scanning tools and processes

1+ years of experience utilizing Agile methodologies

Security +, CRISC, CISSP, CISM, CSA, AWS Cloud Practitioner, or AWS Certified Solutions Architect Associate Certification