FREE ACCESS
5,000–10,000 jobs/day
See all jobs on Scoutfield
Search thousands of fresh jobs every day.
Discover
- Fresh listings
- Fast filters
- No subscription required
Create a free account and start exploring right away.
Director, Information Security Office Consultant
Capital One. Provide strategic leadership and coaching to senior managers and associates .
Core Competencies
Role fitCore Competencies
Use this summary to align your resume positioning with the role.
Demonstrates extensive expertise in cybersecurity frameworks such as NIST CSF, MITRE ATT&CK, and CMMC, along with strong leadership capabilities in managing high-performing teams and driving enterprise risk reduction initiatives. Proficient in utilizing security tools like Splunk and CrowdStrike while ensuring compliance and effective communication of cybersecurity strategies to stakeholders.
Highest-signal resume keywords
Cybersecurity FrameworksRisk ManagementTeam LeadershipSecurity Tools ProficiencyData Ecosystems
ATS Keywords
Tailor your resumeApplicant Tracking System Keywords
Tip: use these terms in your resume and cover letter to boost ATS matches.
Hard Skills
CybersecurityRisk AssessmentData AnalysisAPI SecurityCyber Threat AnalysisCybersecurity MetricsSaaS IntegrationFile Transfer SystemsMulti-Cloud EnvironmentsCybersecurity Capabilities Development
Soft Skills
Strategic LeadershipCoachingCommunicationCollaborationProblem Solving
Tools & Technologies
SplunkCrowdStrikeQualysAWS Security HubDataLake
Industry Keywords
NIST CSFMITRE ATT&CKCMMCFedRAMPCyber Governance
Tech Stack
Tools & technologiesAWSCloudCyber SecuritySplunk
About the role
Key responsibilities & impact- Provide strategic leadership and coaching to senior managers and associates
- Set direction, develop talent, and build a high-performing cybersecurity organization
- Advise on cybersecurity best practices and risk reduction through configuration of cybersecurity tools and platforms
- Support development and use of capability, risk, and threat classification frameworks and standardization methodologies
- Support continuous improvement programs, including risk and issue identification, corrective action implementation, and results validation
- Identify and operationalize linkages among threats, risks, controls, capabilities, tooling, and data analytics
- Lead solutioning and manage activities for large-scale enterprise risk reduction efforts
- Communicate operational, compliance, process, control, and tooling gaps and remediation options to leadership and other audiences
- Oversee enterprise-level cybersecurity risk assessments and maturity evaluations
- Integrate assessment results into strategic planning and business decision-making
- Direct cross-functional cyber governance initiatives aligning risk management, engineering, and compliance with organizational strategy
Requirements
What you’ll need- Bachelor's Degree
- At least 9 years of experience in cybersecurity or information technology
- At least 8 years of experience evaluating, contributing to, or supporting development of cybersecurity capabilities
- 9+ years of experience with cybersecurity frameworks and concepts such as NIST CSF, MITRE ATT&CK, CMMC, and FedRAMP
- 9+ years of experience analyzing or developing solutions for cyber threats, vulnerabilities, risks, or events
- 9+ years of experience working on teams and presenting cybersecurity information to stakeholders
- 8+ years of experience working in multi-cloud environments
- 8+ years of experience using security tools such as Splunk, CrowdStrike, Qualys, or AWS Security Hub
- 6+ years of experience with data ecosystems, applications, privacy, and compliance
- 6+ years of experience with API Security
- 5+ years of experience with DataLake and Consumption Tools
- 5+ years of experience with File Transfer systems
- 5+ years of experience integrating SaaS products into an enterprise environment
- 5+ years of people management experience
- 4+ years of experience developing or interpreting cybersecurity metrics or dashboards
- 4+ years of experience developing and overseeing cybersecurity or technology risk programs
- Demonstrated familiarity with industry risk governance or financial risk governance processes
- Ability to perform security incident analysis and assist with resolution, translating technical findings into clear, actionable reports for technical and non-technical stakeholders
- Capital One will not sponsor a new applicant for employment authorization or provide immigration-related support for this position
Benefits
Comp & perks- Performance-based incentive compensation, including cash bonus(es) and/or long-term incentives (LTI)
- Comprehensive, competitive, and inclusive health, financial, and other benefits supporting total well-being
- Reasonable accommodations for applicants who require them