Manager, Cyber Risk & Analysis

Manager, Cyber Risk & Analysis

At Capital One, we're rethinking the way the world approaches banking by experimenting and innovating how we serve our 65 million customers. We are looking for experienced, pioneering thinkers who will craft the strategies that inspire and guide our cyber security organization. We are drawn to action, inventive and self-motivated, and we're passionate about security. We get excited when building solutions that protect our associates and our customers. It takes a big group of people with a broad range of skills to do that well, and we need to keep all those people aligned, connected and passionate about our work.

That's where you come in - as part of the Strategy and Reporting team, you will support the Chief Information Security Officer (CISO), VP of Strategic Business Enablement, Sr. Director of Cyber Strategy and Cyber Senior Leadership in developing and effectively communicating our overarching cyber strategy, as well as articulating Capital One's cyber risk to executive and Board-level forums. Cyber associates are big-picture strategic thinkers, who work collaboratively across teams and pay close attention to the details. They are self-directed, with excellent communication and project management skills. Cyber values an entrepreneurial attitude and fosters an inclusive environment for professional growth and career development.


Job Description:

As a Manager for the Cyber Strategy and Reporting team, you will be immersed in cyber and technology risks, which will allow our Cyber organization and partners to both pinpoint how cyber risks are connected to other corporate risks, business outcomes and consequences and to ensure business decisions are informed by Cyber. You'll be part of a highly functional team responsible for developing strategy, assessing risk and coordinating reporting to Capital One's Board of Directors, executive leadership, Cyber and Technology organizations. You will work closely with Cyber practitioners to leverage data in articulating and driving understanding of the enterprise cyber risk profile in key reporting forums. You will also spend a lot of time collaborating with peers and using your data analysis skills to support them in drafting copy, slides and talking points. In addition you will collaborate with peers across the organization, including first, second and third line, to enable subject matter experts to leverage data to effectively articulate cyber strategy and cyber risk to Capital One leadership.

As the ideal candidate:

• You are passionate about technology and cybersecurity, and actively seek out first-hand information and research-based insights to ground assertions.
• You have the ability to use data to tell a story in a compelling and forward-thinking way suitable for executive and board-level audiences (in written, oral, dashboard or diagram form).
• You possess and continually seek to expand your knowledge of system and application security threats and vulnerabilities; computer network defense and vulnerability assessment tools and their capabilities; relevant cyber laws, policies, procedures and governance; cyber risk management frameworks and cyber assessment; and industry indicators useful for identifying cyber trends.
• You are a self-starter who works efficiently and effectively to achieve the best possible results by problem solving and collaborating with multiple stakeholders across Cyber.
• You have strategic influencing skills and the ability to drive agreement through intellect, interpersonal and negotiation skills.
• You demonstrate exceptional data analysis and reporting skills, with a high attention to detail and quality in written analysis, presentations and communications.
• You are comfortable presenting information and recommendations to senior executive and board-level audiences.
• You have a history of building and maintaining strong working relationships, with a customer-centric approach that understands higher-level business objectives.
• You are a team player who helps us achieve more than the sum of our parts by collaborating effectively with others and encouraging an inclusive culture with diverse teammates.
• You consistently demonstrate Capital One's values in all your interactions with our teams, customers and stakeholders.

As a Manager on the Cyber Strategy team, you will:

• Independently oversee the development and administration of strategic data analysis within the Cyber Strategy and Reporting team, including development of new reports, strategies and talking points that effectively convey the state of cyber risk.
• Meet with senior business leaders to understand business challenges and priorities and explore strategic solutions leveraging available data sources.
• Work with subject matter experts across the enterprise to understand problems, helping to drive and execute an agenda in an uncertain and fluid environment, and identify and evaluate potential strategic options such as new capabilities.
• Partner with teams on multiple concurrent projects, and provide consultative services to colleagues to align near-term deliverables with the strategic trajectory of enterprise cyber.
• Design and execute analysis, and creatively apply rigorous analytical techniques leveraging a variety of data sources.
• Create and deliver compelling written, visual and oral content for informing and influencing senior business leaders in the company regarding business, cyber risk and technical topics.
• Research and stay abreast of current trends in cyber security, and maintain a broad awareness of the enterprise to develop recommendations grounded in data and a deep understanding of risk.
• Collaborate with peers and stakeholders on reporting to the Capital One Board of Directors, government regulators and other senior stakeholders.

Basic Qualifications:

• High School Diploma, GED or equivalent certification
• At least 4 years of experience in Project or Program Management, Consulting, Strategy or a combination
• At least 4 years of experience in data analytics, reporting or similar function
• At least 4 years of experience in information technology or cybersecurity
• At least 2 years experience communicating and presenting to senior management

Preferred Qualifications:

• Bachelor's Degree
• 5+ years of cyber strategy or strategy consulting experience
• 5+ years of experience working in the fields of information security, cyber engineering or technology
• 2+ years of experience working in the financial services industry
• 1+ year of experience with cyber risk frameworks or information security risk frameworks
• Certified Information Systems Security Professional (CISSP), Certified Information Systems Auditor (CISA), or Certified Information Security Manager (CISM)

At this time, Capital One will not sponsor a new applicant for employment authorization, or offer any immigration related support for this position (i.e. H1B, F-1 OPT, F-1 STEM OPT, F-1 CPT, J-1, TN, or another type of work authorization).

The minimum and maximum full-time annual salaries for this role are listed below, by location. Please note that this salary information is solely for candidates hired to perform work within one of these locations, and refers to the amount Capital One is willing to pay at the time of this posting. Salaries for part-time roles will be prorated based upon the agreed upon number of hours to be regularly worked.

McLean, VA: $164,800 - $188,100 for Manager, Cyber Risk & Analysis

Richmond, VA: $149,800 - $171,000 for Manager, Cyber Risk & Analysis

Candidates hired to work in other locations will be subject to the pay range associated with that location, and the actual annualized salary amount offered to any candidate at the time of hire will be reflected solely in the candidate's offer letter.

This role is also eligible to earn performance based incentive compensation, which may include cash bonus(es) and/or long term incentives (LTI). Incentives could be discretionary or non discretionary depending on the plan.

Capital One offers a comprehensive, competitive, and inclusive set of health, financial and other benefits that support your total well-being. Learn more at the Capital One Careers website. Eligibility varies based on full or part-time status, exempt or non-exempt status, and management level.

This role is expected to accept applications for a minimum of 5 business days.

No agencies please. Capital One is an equal opportunity employer (EOE, including disability/vet) committed to non-discrimination in compliance with applicable federal, state, and local laws. Capital One promotes a drug-free workplace. Capital One will consider for employment qualified applicants with a criminal history in a manner consistent with the requirements of applicable laws regarding criminal background inquiries, including, to the extent applicable, Article 23-A of the New York Correction Law; San Francisco, California Police Code Article 49, Sections 4901-4920; New York City's Fair Chance Act; Philadelphia's Fair Criminal Records Screening Act; and other applicable federal, state, and local laws and regulations regarding criminal background inquiries.

If you have visited our website in search of information on employment opportunities or to apply for a position, and you require an accommodation, please contact Capital One Recruiting at View phone number on click.appcast.io or via email at View email address on click.appcast.io. All information you provide will be kept confidential and will be used only to the extent required to provide needed reasonable accommodations.

For technical support or questions about Capital One's recruiting process, please send an email to View email address on click.appcast.io

Capital One does not provide, endorse nor guarantee and is not liable for third-party products, services, educational tools or other information available through this site.

Capital One Financial is made up of several different entities. Please note that any position posted in Canada is for Capital One Canada, any position posted in the United Kingdom is for Capital One Europe and any position posted in the Philippines is for Capital One Philippines Service Corp. (COPSSC).