Senior Manager, Tech And Product Risk Guide - Enterprise Services Risk

Capital One

Chicago, IL, United States
Base: chicago $182,500-$208,300; mclean $200,700-$...
7 years it or technical risk management experience
5 years risk management process management project management
Vulnerability management security testing tools sast dast sca
The role involves leading risk oversight for a suite of security testing capabilities including SAST, DAST, SCA, container and infrastructure scanning to ensure comprehensive coverage across the development lifecycle

Job Summary

  • The role involves leading risk oversight for a suite of security testing capabilities including SAST, DAST, SCA, container and infrastructure scanning to ensure comprehensive coverage across the development lifecycle.
  • Candidates will partner with engineering leads to prioritize and escalate recommendations for mitigating critical vulnerabilities and configuration compliance gaps while leveraging deep IT experience.
  • Capital One offers a comprehensive, competitive, and inclusive set of health, financial and other benefits that support total well-being, along with performance-based incentive compensation.

Matching Summary

The role involves leading risk oversight for a suite of security testing capabilities including SAST, DAST, SCA, container and infrastructure scanning to ensure comprehensive coverage across the development lifecycle.

Salary

Base: Chicago $182,500-$208,300; McLean $200,700-$229,100; New York $219,000-$249,900; Richmond $182,500-$208,300; Bonus/Equity: Performance based incentive compensation including cash bonuses and/or long term incentives; Benefits: Comprehensive health, financial and other benefits supporting total well-being

Skills & Requirements

Must-have

  • 7 years IT or technical risk management experience
  • 5 years Risk Management Process Management Project Management
  • Vulnerability Management Security Testing tools SAST DAST SCA
  • Process Level Assessments PLA LAUNCH initiatives MTC
  • Stakeholder collaboration and risk object validation

Nice-to-have

  • Offensive Cyber Security programs Responsible Disclosure Bug Bounty
  • 3 years Financial Services industry experience
  • CRISC CISSP CISM CRCM CIPP certifications
  • Working knowledge of Networking Cloud Environments
  • High context critical thinking problem solving skills

Key Requirements

  • Bachelor's Degree or military experience
  • At least 7 years in information technology or technical risk management
  • At least 5 years in Risk Management, Process Management, or Project Management
  • Not specified (US work authorization required)
  • No sponsorship available for new applicants

Work Rights

Must have US work authorization

Tailored Resume

Cover Letter