Director, Risk Advisory – Global Payment Networks

Capital One

. Apply cyber best practices to assess current state, identify gaps, and assess cyber risk, threats, and business impact .

Posted 11/3/2026full-timeUnited StatesLead💰 $209,500 - $286,900 per yearWebsite

Core Competencies

Role fit

Core Competencies

Use this summary to align your resume positioning with the role.

Demonstrates expertise in cybersecurity risk management, including risk assessments, mitigation strategies, and the implementation of cyber control programs. Proficient in analyzing data and technology systems to identify vulnerabilities and inform policy changes.

Highest-signal resume keywords

Cybersecurity Risk ManagementRisk AssessmentsCloud Computing (AWS, GCP, Azure)Professional Security CertificationVulnerability Assessment

ATS Keywords

Tailor your resume

Applicant Tracking System Keywords

Tip: use these terms in your resume and cover letter to boost ATS matches.

Hard Skills

Cyber Risk AssessmentData AnalysisVulnerability AnalysisMitigation StrategiesInformation Security StandardsRegulatory ComplianceTechnology Risk ManagementChaos EngineeringSite Reliability EngineeringResilience Engineering

Soft Skills

Stakeholder EngagementCommunicationProblem SolvingAnalytical ThinkingCollaboration

Tools & Technologies

ExcelGoogle SheetsCyber Control ProgramsReporting ToolsData Visualization Tools

Certifications & Qualifications

CISSPCISACRISCOpen FAIR CertifiedProfessional Risk Management Certification

Industry Keywords

CybersecurityInformation SecurityRisk FrameworksRegulatory GovernanceFinancial Institution Oversight

Tech Stack

Tools & technologies

AWSAzureCloudCyber SecurityGoogle Cloud Platform

About the role

Key responsibilities & impact

Apply cyber best practices to assess current state, identify gaps, and assess cyber risk, threats, and business impact
Define mitigation strategies, prioritize and escalate recommendations
Participate in the design and implementation of cyber control programs
Serve as a cybersecurity area-specific subject matter expert in risk frameworks, information security risk assessments, information risk controls, regulatory and internal governance, data analysis, metrics, reporting, and customer engagement
Assess technology systems at an aggregate level, including networks, applications, cloud computing, and data
Evaluate operating-system vulnerabilities and identify the severity of potential issues
Analyze cyber threats and required enterprise safeguards
Use reporting and tools to analyze projects, efforts, and datasets and inform policies and change
Analyze data and create charts using tools such as Excel and Google Sheets
Analyze data, assess risk, prioritize vulnerabilities and potential risks, and escalate issues appropriately
Research industry practices and regulatory changes affecting cybersecurity policies or programs and recommend practical solutions
Recommend changes to policies, procedures, and control programs to mitigate evolving risks
Challenge cyber control programs as part of first-line duties and escalate risks when appropriate
Manage program lifecycles, including documenting and communicating action plans, impediments, risks, and stakeholder engagement
Report on vulnerability assessments for functionality and alignment with Information Security Standards
Advise Accountable Executives on cyber-related risk through risk forums, exception management, and issue management
Monitor the evolving cyber threat landscape to maintain relevant cyber risk mitigation

Requirements

What you’ll need

Bachelor’s Degree or military experience
At least 9 years of experience in technology, cybersecurity, technology auditing, systems risk management, technology risk assessments, resilience engineering, chaos engineering, site reliability engineering, or a combination
Preferred: Master’s Degree in Information Technology, Cybersecurity, or equivalent
Preferred: 9+ years of Risk Management experience in Cyber or Information Security practice
Preferred: 9+ years of experience in cloud computing (AWS, GCP, or Azure)
Preferred: 9+ years of experience in a second-line or oversight role at a financial institution or regulatory agency
Preferred: Third party risk management experience
Preferred: Professional Security Certification or Professional Risk Management Certification
Preferred: CISSP
Preferred: CISA
Preferred: CRISC
Preferred: Open FAIR Certified
Capital One will not sponsor a new applicant for employment authorization or offer immigration-related support for this position
No agencies please

Benefits

Comp & perks

Performance based incentive compensation, which may include cash bonus(es) and/or long term incentives (LTI)
Comprehensive, competitive, and inclusive health, financial and other benefits supporting total well-being
Reasonable accommodations for applicants who require them