Director, Information Security Office Consultant

Capital One Financial

Confirmed live today High trust

Quick summary

Work type: On-site
Location: McLean, VANew York, NYRichmond, VA
Salary: $269,100–$307,200 / yr
Employment: Full-time
Posted: 11 days ago
Freshness: Confirmed live today
Nearby: 99+ roles within 25 mi

Market check

Salary context

Above market

How this pay compares to similar roles

Similar $190k

This role $288k

$128k $326k

below market most similar roles pay here above market

This role pays more than 92% of similar roles. Most pay $151,643–$228,920 — the blue band above. At the midpoint, this role pays about $288k versus about $190k for comparable roles.

Based on 240 similar postings.

Employer

About Capital One Financial

Capital One Financial is a bank holding company specializing in credit cards, auto loans, banking, and savings products, known for its data-driven approach to consumer and commercial finance. Industry: Financial Services & Banking

Capital One Financial currently has 2107 open roles on FindRole.

Listed pay typically runs $197,300–$225,100 across 1107 roles with salary data.

Most-posted roles

View all roles at Capital One Financial

At a glance

TL;DR · Director, Information Security Office Consultant

Role Posting Log in to save

The Director, Information Security Office Consultant joins the cybersecurity team to provide strategic leadership, coaching, and talent development for a high-performing organization. This role involves driving cybersecurity governance, capability maturation, and risk transformation by serving as a subject matter expert on risk reduction through tool configuration. Key responsibilities include developing threat classification frameworks, executing continuous improvement programs, and managing large-scale enterprise risk reduction efforts. The position requires expertise in frameworks like NIST CSF, MITRE ATT&CK, CMMC, and FedRAMP. Candidates must utilize tools such as Splunk, Crowdstrike, Qualys, and AWS Security Hub while managing multi-cloud environments, API security, and data ecosystems. The work focuses on aligning risk management, engineering, and compliance functions with organizational strategy to address operational, compliance, and process gaps.

Skills

NIST CSF MITRE ATT&CK CMMC FedRAMP Splunk Crowdstrike Qualys AWS Security Hub Multi-cloud API Security DataLake SaaS Cybersecurity Governance Risk Management Threat Intelligence Data Analytics Incident Analysis

What you'll do

Provide strategic leadership and coaching to senior managers and associates to build a high-performing cybersecurity organization.
Advise on risk reduction best practices through the configuration of cybersecurity tools and platforms.
Develop and maintain capability, risk, and threat classification frameworks and standardization methodologies.
Execute continuous improvement programs including risk identification, corrective action implementation, and results validation.
Operationalize linkages between threats, controls, capabilities, and data analytics to prioritize spending and resource allocation.
Lead solutioning and manage activities in response to large-scale enterprise risk reduction efforts.
Communicate operational, compliance, and tooling gaps to leadership to support the enhancement of cybersecurity postures.
Oversee enterprise-level cybersecurity risk assessments and maturity evaluations to inform strategic business decision-making.

What we're looking for

At least 9 years of experience in cybersecurity or information technology.
At least 8 years of experience evaluating, contributing to, or supporting development of cybersecurity capabilities.
9+ years of experience with cybersecurity frameworks such as NIST CSF, MITRE ATT&CK, CMMC, or FedRAMP (preferred).
9+ years of experience performing analysis of or developing solutions for cyber threats, vulnerabilities, risks, or events (preferred).
9+ years of experience working on teams and presenting cybersecurity information to stakeholders (preferred).
8+ years of experience working in multi-cloud environments (preferred).
8+ years of experience using security tools like Splunk, Crowdstrike, Qualys, or AWS Security Hub (preferred).
Bachelor's Degree.

Similar roles

Manager, Cyber Security, Information Security Office Consultant

Capital One Financial

New York, NY 5 days ago $215,200–$245,600

NIST CSF MITRE ATT&CK Cloud Security Splunk Crowdstrike Qualys AWS Security Hub AI Cybersecurity Governance Risk Management Security Architecture Threat Intelligence Multi-cloud Security Incident Analysis CMMC FedRAMP

5+ yrs exp

Save

Manager, Cyber Security, Information Security Office Consultant

Capital One Financial

McLean, VA +3 20 days ago $197,300–$225,100

Cybersecurity AWS GCP Azure Splunk Crowdstrike Qualys NIST CSF MITRE ATT&CK CMMC FedRAMP Threat Modeling Penetration Testing Vulnerability Management Application Security Splunk-Fu Network Architecture Data Security

5+ yrs exp

Save

Senior Manager, Cyber Security, Information Security Office Consultant

Capital One Financial

McLean, VA +2 28 days ago $229,900–$262,400

Cybersecurity Cloud Infrastructure NIST CSF MITRE ATT&CK AWS Splunk Crowdstrike Qualys AWS Security Hub Threat Modeling Vulnerability Management Application Security Network Architecture Data Security Infrastructure Security Container Services CMMC FedRAMP Security Risk Assessment

7+ yrs exp

Save

Senior Manager, Cyber Security, Information Security Office Consultant

Capital One Financial

Plano, TX 25 days ago $209,000–$238,500

Cybersecurity Cloud Infrastructure AWS Splunk Crowdstrike Qualys AWS Security Hub Network Architecture Data Security Infrastructure Security Agile Threat Intelligence Risk Management Enterprise Monitoring Third Party Risk Management

7+ yrs exp

Save