Manager, Cyber Technical

Voyager (94001), India, Bangalore, Karnataka

Manager, Cyber Technical

As a Manager in Capital One's Cyber Information Security Office (ISO), you will work closely with our cybersecurity team and with extended technical teams to manage and improve the cybersecurity posture. You will help consult on initiatives, strategy, programs, and projects to raise the game in Information Security. You are pragmatic and practical in your understanding of risk and security, but also willing to know when to pull in experts and escalate. You collaborate and innovate with other teams within Capital One to push the envelope.

We are seeking a dedicated and disciplined cyber professional who excels in a team environment, displays strong leadership skills, and motivates others. They must be proficient in managing their own work independently, while influencing partners across the company. This person will have excellent communication skills, attention to detail, strong analytical skills, the ability to quickly adapt to change, and be self motivated. As part of the ISO team, you will have the opportunity to work with cross functional teams. You will do this in a collaborative environment that values your insight, encourages you to take on new responsibilities, promotes strategic thinking, and supports continuous learning and growth.

• Act as a central Information Security point of contact for the line of business
• Coordinate and execute proactive Information Security consulting to the business and technology teams covering Infrastructure Security, Resiliency, Data Security, Network Architecture and Design, and User Access Management
• Serve as an expert in Capital One's Information Security capabilities, solutions, policies, procedures and standards
• Influence customers to leverage security capabilities and solutions to shift and integrate security to the left in the development processes
• Escalate and manage cyber security risk
• Provide ad hoc support on special Information Security hot topics for the business
• Provide regular updates to executive leadership with your line of business on the overall Information Security health and risk environment
• Work with line of business leadership to anticipate their objectives and needs to better serve the line of business
• Develop information security strategy. Collaborate with various teams to drive the execution of the strategy to improve and validate requirements, processes, and metrics to measure process efficiency and effectiveness. Will drive projects end to end, which will include the creation and maintenance of formal process documents (such as procedures and diagrams), and supporting artifacts.
• Proficiently tailor verbal and written communications to the audience's needs and levels.
• Manage the issue resolution process by proactively identifying and mitigating risk related to the delivery of the projects and mergers. Resolve complex problems, where expertise is required to interpret against policies, guidelines, requirements or processes; escalate breakdowns in the process by asking probing questions and identify and involve the right stakeholders to correct breakdowns.

• Strong technical background with the ability to proactively identify and mitigate technical risks throughout delivery life-cycle
• Exceptional communication and collaboration skills
• Excellent problem solving and influencing skills
• Ability to work well under minimal supervision
• Ability to simplify the technically complex and drive well-educated decisions across product, engineering, design, and enterprise risk representatives
• You have a deep understanding of strategic business objectives and the ability to drive results toward those objectives
• Exceptional cross-team collaboration; able to work across different functions, organizations, and reporting boundaries to get the job done.

• College or high school diploma in a related field
• At least 6 years of experience working in cybersecurity or information technology
• At least 3 years of experience providing guidance and oversight of Security concepts
• At least 3 years of experience performing security risk assessments and security architecture reviews
• At least 3 years of experience with architecture, software design, networking, and cloud infrastructure
• At least 3 years of experience with cloud security engineering

• Bachelor's degree in Computer Science, Computer Engineering or a technical field
• 3 years of experience in securing a public cloud environment (e.g. AWS, GCP, Azure)
• 2 years Experience supporting software utilizing public cloud (e.g. AWS, GCP, Azure)
• Familiarity with Cloud patch management practices such as system rehydration and image management
• 2 years experience utilizing Agile methodologies
• 2 years experience with Artificial Intelligence (development, project management, securing)
• 2 years experience with Software Security Architecture
• 2 years experience with Application Security
• 2 years experience with Threat Modeling
• 2 years experience with Penetration Testing and/or Vulnerability Management
• 2 years experience with integrating SaaS products into an Enterprise Environment
• 2 years experience with securing Container services
• Financial services industry experience
• Professional certifications such as AWS Certified Solutions Architect and Certified Information Systems Security Professional (CISSP)
• 2 years experience in Offensive and/or Defensive Security techniques
• Experience in a regulated environment