Hybrid Cyber Risk & Analysis Manager

at Capital One

• Job title: Cyber Risk & Analysis Manager
• Job type: Full Time
• Experience level: Mid level, Senior
• Salary: $144,000 - $180,800 per year
• Degree requirement: High School Diploma
• Tech skills: Cloud, Cyber Security
• Location requirements: Hybrid, Chicago, United States

About the role

• Cyber Risk & Analysis Manager at Capital One managing cybersecurity and Third Party risks. Engaging with teams to ensure security for Third Party systems and applications.

Responsibilities

• Effectively challenge the status quo across the organization to ensure the appropriate management of personnel and Cybersecurity and Third Party risks.
• Actively participate in ensuring the security of Third Party systems and applications, including Third Party Cybersecurity framework, program optimization, vulnerability remediation, metrics reporting, performance analysis and mitigation of cyber and Third Party risk.
• Require high-level critical thinking to perform duties related to projects, compliance, metrics, assurance, vulnerabilities, or threats.
• Apply knowledge of procedure-based controls of a cybersecurity program including qualitative risk analysis steps, vulnerability and patch management, threat modeling, Identity and Access Management (IAM), cybersecurity frameworks (NIST CSF, PCI-DSS and CIS).
• Compile professional security assessment reports, slides, and lead discussions to effectively communicate the risks and remediation options to partners.
• Demonstrate sound knowledge of Incident Management Respond and Recover functions from a cyber resiliency perspective.

Requirements

• High school diploma, GED or equivalent certification
• At least 4 years of Cybersecurity experience
• At least 2 years of Third Party Risk Management or Risk Management experience
• At least 2 years of management experience
• Bachelor’s Degree (Preferred)
• 6+ years in cybersecurity (Preferred)
• 4+ years in Third Party Risk Management (Preferred)
• 2+ years of experience with establishing Third Party Connections, API, SFTP, and VPN (Preferred)
• 2+ years of experience assessing security for cloud platforms, SaaS, PaaS, and IaaS (Preferred)
• 2+ years of experience in network, OS, and Database security administration (Preferred)
• 2+ years managing Third Party monitoring solutions (Preferred)
• CISM Certification (Preferred)
• CISSP Certification (Preferred)

Benefits

• Comprehensive, competitive, and inclusive set of health, financial and other benefits that support your total well-being.
• Performance-based incentive compensation, which may include cash bonus(es) and/or long-term incentives (LTI).