Senior Cyber Risk Monitoring Analyst

Senior Cyber Risk Monitoring Analyst

Capital One is on a mission to help our customers succeed by bringing ingenuity, simplicity, and humanity to banking. We measure our efforts by the success our customers enjoy and the advocacy they exhibit. We are succeeding because they are succeeding.      

                                        

As a candidate for this role, you’re able to seamlessly switch from executive-level risk conversations to diving deep into controls and technology to driving high level, strategic discussions around metrics, data, and risk analytic reporting solutions. You are naturally curious and stay on top of emerging trends and threats. You are a clear thinker, thrive in working across teams, and an expert in dealing with ambiguity. 

About You...

• You have strong consulting and analytical skills

• You have demonstrated clear communication skills and ability to interact effectively at all levels of an organization, and to influence senior management and executives (Including translating technical information based on specific audiences)

• You have experience managing multiple high-visibility and high-impact enterprise cybersecurity initiatives with cross-functional teams while maintaining superior results through risk analytics, data governance, and insight generation

• You have passion and expertise in one or more of the following areas: risk analytics, data analytics, executive reporting, technical writing, cybersecurity risk management / assessments, NIST CSF, NIST 800-53. 

• You have passion and expertise in one or more of the following areas: risk analytics, data analytics, machine learning, SQL, Python, cloud security, network security, vulnerability management, data protection, threat intelligence and investigations, or identity and access management

What you’ll do:  

• Develop and communicate risk-based and data-driven metrics, reporting and insights for enterprise security services and solutions, in partnership with threat intel, engineering and operations partners, customers, and other stakeholders

• Build relationships with Information Security Officers, product managers, and business requirement stakeholders to generate new or improved value streams using data and insights

• Advise executive decision makers based on business and technology risk grounded in threat and risk analytics

• Work with key stakeholders to anticipate their objectives and needs to better execute the cyber strategy

• Proactively identify information security risk and partner with key stakeholders to reduce or eliminate risk

• Coordinate and execute proactive consulting to both internal and external teams as it relates to Cyber analytics

• Support Cyber related projects and initiatives and influence customers to make solid risk decisions 

• Provide regular updates to executive leadership through effective metrics and reporting

• Escalate and manage cyber security risk through data analytics

• Provide ad hoc support on special departmental goals, objectives, and initiatives

• You’re heavily into problem solving, and love diving deep into data sets to draw out actionable insights and recommendations

• You understand how to set a data roadmap and prioritize decision making around what’s most critical for the team and business

• You will drive current and future team’s metrics strategy by leveraging your analytical skills  

• Collaborate across the Cyber organization in defining the metrics and analytics ecosystem

• Work with top talent in a fast paced, entrepreneurial environment where analytics and good data are a top priority

 

On any given day you will be: 

• You work well with data engineer teams to help build a robust and world-class data environment

• You effectively partner with other teams, technical and non-technical, to understand business needs, use cases and priorities

• You seek out opportunities to bring new ideas, techniques, and approaches to improve existing products and services

• Identifying gaps, proposing improvements, implementing processes, and reporting progress  

• Mining data to arrive at specific and crucial information for the organization  

• Identifyin