Cyber Risk & Analysis Manager
Capital One
full-time
Posted on:
Location Type: Hybrid
Location: Chicago • Illinois, Texas, Virginia • 🇺🇸 United States
Visit company websiteSalary
💰 $144,000 - $180,800 per year
Job Level
Mid-LevelSenior
Tech Stack
CloudCyber Security
About the role
- Effectively challenge the status quo across the organization to ensure the appropriate management of personnel and Cybersecurity and Third Party risks.
- Actively participate in ensuring the security of Third Party systems and applications, including Third Party Cybersecurity framework, program optimization, vulnerability remediation, metrics reporting, performance analysis and mitigation of cyber and Third Party risk.
- Require high-level critical thinking to perform duties related to projects, compliance, metrics, assurance, vulnerabilities, or threats.
- Apply knowledge of procedure-based controls of a cybersecurity program including qualitative risk analysis steps, vulnerability and patch management, threat modeling, Identity and Access Management (IAM), cybersecurity frameworks (NIST CSF, PCI-DSS and CIS).
- Compile professional security assessment reports, slides, and lead discussions to effectively communicate the risks and remediation options to partners.
- Demonstrate sound knowledge of Incident Management Respond and Recover functions from a cyber resiliency perspective.
Requirements
- High school diploma, GED or equivalent certification
- At least 4 years of Cybersecurity experience
- At least 2 years of Third Party Risk Management or Risk Management experience
- At least 2 years of management experience
- Bachelor’s Degree (Preferred)
- 6+ years in cybersecurity (Preferred)
- 4+ years in Third Party Risk Management (Preferred)
- 2+ years of experience with establishing Third Party Connections, API, SFTP, and VPN (Preferred)
- 2+ years of experience assessing security for cloud platforms, SaaS, PaaS, and IaaS (Preferred)
- 2+ years of experience in network, OS, and Database security administration (Preferred)
- 2+ years managing Third Party monitoring solutions (Preferred)
- CISM Certification (Preferred)
- CISSP Certification (Preferred)
Benefits
- Comprehensive, competitive, and inclusive set of health, financial and other benefits that support your total well-being.
- Performance-based incentive compensation, which may include cash bonus(es) and/or long-term incentives (LTI).
Applicant Tracking System Keywords
Tip: use these terms in your resume and cover letter to boost ATS matches.
Hard skills
CybersecurityThird Party Risk ManagementVulnerability RemediationMetrics ReportingThreat ModelingIdentity and Access Management (IAM)Vulnerability ManagementIncident ManagementAPISFTP
Soft skills
Critical ThinkingCommunicationLeadership
Certifications
CISMCISSP