Represent the second line risk management function in many cloud and architecture councils to ensure an appropriate risk lens is applied to major cloud initiatives and strategic programs.
Bring a passion to stay on top of cloud trends, experiment with and learn new technologies, participate in internal & external technology communities, and mentor other members of the risk management and engineering community.
Lead a small but mighty team of trusted technical cloud risk advisors.
Partner broadly across the enterprise to identify and assess continually evolving threats in a fast moving and complex environment.
Advise architecture decisions and roadmaps across topics such as account segmentation and blast-radius containment, cloud-native service adoption, and cloud security posture management.
Build and maintain relationships with technical leaders, engineers, architects, and other stakeholders to understand and evaluate implementation plans, business priorities and technical solutions to ensure risks are well communicated and understood by the key stakeholders.
Identify cloud-specific threat scenarios (control plane vs. data plane, IAM abuse paths, service misconfiguration) and evaluate proposed and approved cloud technical solutions for automation, resiliency, scalability, and security including appropriate tradeoffs, risks and opportunities.
Draft and communicate independent reports to inform broad audiences including engineers, executives, business leaders, product managers, board of directors, and regulators on the current cloud risk environment.

Requirements

Bachelor’s Degree or military experience
At least 5 years of public cloud experience or public cloud architecture or operations or security
At least 10 years experience of cybersecurity, software development, architecture, or infrastructure operations
At least 8 years direct hands on experience with Amazon Web Services architecture, operations, security, or deployments
At least 5 years of people leadership experience
Master’s Degree in Computer Science or in an Engineering discipline
Experience leading large-scale migrations to the Public Cloud (i.e. Load Balancing, DNS, Interconnect, CDN, Compute, Networking, Storage, Security, Monitoring, etc.)
Ability to communicate clearly and to interact effectively at all levels of the organization, and to influence as warranted and appropriate to drive to consensus
Experience with identifying and communicating key risks related to cloud implementations and architectures to executives
Familiarity with controls and control frameworks (NIST Cybersecurity Framework, NIST 800-53, CIS Top 20, ISO, COBIT)
Prior experience working in financial services or other highly-regulated sectors.

Benefits

Capital One offers a comprehensive, competitive, and inclusive set of health, financial and other benefits that support your total well-being.

Applicant Tracking System Keywords

Tip: use these terms in your resume and cover letter to boost ATS matches.

Hard Skills & Tools

cloud architecturecloud securityAmazon Web Servicescybersecuritysoftware developmentinfrastructure operationspublic cloud experiencecloud-native service adoptionrisk managementautomation

Soft Skills

communicationleadershipmentoringrelationship buildinginfluencingcollaborationproblem-solvingreportingstakeholder engagementconsensus driving

Certifications

Bachelor's DegreeMaster's Degree in Computer ScienceMaster's Degree in EngineeringNIST Cybersecurity FrameworkNIST 800-53CIS Top 20ISOCOBIT