Manager, Cyber Security – Information Security Office Consultant

Capital One

. Act as an Information Security point of contact for a business function within the Card line of business .

Posted 10/7/2026full-timeUnited StatesMid-LevelSenior💰 $179,400 - $245,600 per yearWebsite

Core Competencies

Role fit

Core Competencies

Use this summary to align your resume positioning with the role.

Demonstrates expertise in cybersecurity frameworks, risk management, and security architecture, with a strong focus on cloud security and AI integration. Capable of translating complex technical findings into actionable insights for diverse stakeholders.

Highest-signal resume keywords

Cybersecurity FrameworksCloud Security EngineeringSecurity Risk AssessmentsSecurity Architecture ReviewsArtificial Intelligence in Cybersecurity

ATS Keywords

Tailor your resume

Applicant Tracking System Keywords

Tip: use these terms in your resume and cover letter to boost ATS matches.

Hard Skills

CybersecurityRisk ManagementSecurity ArchitectureCloud InfrastructureApplication SecurityThreat ModelingPenetration TestingVulnerability ManagementSecurity Incident AnalysisData Security

Soft Skills

CollaborationCommunicationProblem SolvingInfluencing StakeholdersTranslating Technical Findings

Tools & Technologies

SplunkCrowdStrikeQualysAWS Security HubPublic Cloud (AWS, GCP, Azure)

Certifications & Qualifications

AWS Certified Solutions ArchitectCertified Information Systems Security Professional (CISSP)

Industry Keywords

NIST CSFMITRE ATT&CKCMMCFedRAMPGovernance Processes

Tech Stack

Tools & technologies

AWSAzureCloudCyber SecurityGoogle Cloud PlatformSplunk

About the role

Key responsibilities & impact

Act as an Information Security point of contact for a business function within the Card line of business
Coordinate and execute proactive Information Security consulting for business and technology teams across infrastructure security, resiliency, data security, network architecture and design, and user access management
Serve as an expert in Capital One’s Information Security capabilities, solutions, policies, procedures, and standards
Review architecture as a security subject-matter expert, provide risk mitigation solutions, and drive overall risk management
Partner with engineers, product managers, and cross-functional partners to solve complex problems and break down organizational silos
Influence customers to leverage security capabilities and integrate security earlier in development processes
Escalate and manage cybersecurity risk
Provide ad hoc support on special Information Security topics for the business
Provide regular updates to executive leadership on Information Security health and the risk environment

Requirements

What you’ll need

Bachelor's Degree
At least 5 years of experience in cybersecurity or information technology
At least 4 years of experience evaluating, contributing to, or supporting development of cybersecurity capabilities
At least 5 years of experience performing security risk assessments and security architecture reviews
At least 5 years of experience with architecture, software design, networking, or cloud infrastructure
At least 4 years of experience with cloud security engineering
At least 1 year of experience implementing Artificial Intelligence (AI) in cybersecurity
5+ years of experience with cybersecurity frameworks and concepts such as NIST CSF, MITRE ATT&CK, CMMC, and FedRAMP
5+ years of experience analyzing or developing solutions for cyber threats, vulnerabilities, risks, or events
5+ years of experience working on teams and presenting cybersecurity information to stakeholders
4+ years of experience using security tools such as Splunk, CrowdStrike, Qualys, or AWS Security Hub
Familiarity with industry governance or financial governance processes
Ability to perform security incident analysis and assist with resolution
Ability to translate technical findings into clear, actionable reports for technical and non-technical stakeholders
2+ years of experience evaluating AI technologies and integrations for security, privacy, and compliance risks
Knowledge of AI attack vectors, model vulnerabilities, prompt injection, data leakage, model abuse, and supply chain risks
7+ years of experience in application security, threat modeling, penetration testing, and vulnerability management
5+ years of experience securing a public cloud environment such as AWS, GCP, or Azure
2+ years of experience building software utilizing public cloud
1+ years of experience securing container services
1+ years of experience with Splunk-Fu and enterprise monitoring
1+ years of experience with offensive or defensive security techniques
AWS Certified Solutions Architect or Certified Information Systems Security Professional (CISSP) certification
Capital One will not sponsor a new applicant for employment authorization or provide immigration-related support

Benefits

Comp & perks

Performance-based incentive compensation, which may include cash bonuses and/or long-term incentives (LTI)
Comprehensive, competitive health, financial, and other benefits supporting total well-being
Reasonable accommodation support for applicants with disabilities