Senior Manager, Information Security Office (ISO) Consultant

​

As a Capital One Information Security associate, you will help consult Lines of Business on initiatives, programs, and projects to raise their game and improve their cyber hygiene. You are pragmatic and practical in your understanding of risk and security, but also willing to know when to pull in experts and escalate. You collaborate and innovate with other teams within Capital One to push the envelope. You are well versed with Cloud Service technologies like Storage Services, Security & Access Control Management, Container Services, and API Implementation and Management. You have experience with various Cloud computing models to include IaaS, PaaS, and SaaS along with their architectural differences. Security is essential to what we do here, from protecting our customers to our associates.

​

The Senior Manager, ISO Consultant will provide cyber security architecture advisory to accelerate the data management journey at scale for businesses operating in the cloud.

• Act as a central Information Security point of contact for the Capital One Software line of business
• Coordinate and execute proactive Information Security consulting to the business and technology teams covering Infrastructure Security, Resiliency, Data Security, Network Architecture and Design, and User Access Management
• Serve as an expert in Capital One's Information Security capabilities, solutions, policies, procedures, and standards
• Collaborating with enterprise cyber teams and tech architects in building out strategy and cyber architecture leveraging modern platforms.
• Support security architecture and implementation needs for technology modernization efforts
• Overseeing all cyber related dependencies across the multiple components being built for the modernization effort.
• Influence customers to leverage security capabilities and solutions to shift and integrate security to the left in the development processes
• Escalate and manage cyber security risk
• Support RFP security reviews
• Provide regular updates to executive leadership with your line of business on the overall Information Security health and risk environment
• Work with line of business leadership to anticipate their objectives and needs to better serve the line of business
• Support the team on collectively mapping technologies to a standardized framework in order to identify and execute on best practices in risk reduction through the configuration of cybersecurity tools and platforms.
• Support the development, modification, and use of capability, risk, or threat classification frameworks and standardization methodologies to facilitate the conduct of correlative capability, maturity, and effectiveness evaluations.
• Support data validation and communications on the impact of identified operational, compliance, process, control, and tooling gaps and potential remediation courses of action to multiple audiences, including leadership, to support the enhancement of their cybersecurity postures.

Basic Qualifications:

• High School Diploma, GED or equivalent certification
• At least 6 years of experience working in cybersecurity or information technology
• At least 5 years of experience providing guidance and oversight of cyber security concepts
• At least 5 years of experience performing cyber security risk assessments or security architecture reviews
• At least 4 years of experience with cloud security

​

Preferred Qualifications:

• Bachelor's Degree
• Experience designing, deploying, securing or managing foundational AWS cloud services; to include compute, storage, networking, and identity and access management
• Experience in building or scaling enterprise software products
• Experience working as an independent software vendor
• 8+ years of experience in securing a public cloud environment (e.g. AWS, GCP, Azure)
• Professional certifications such as AWS Certified Solutions Architect and Certified Information Systems Security Professional (CISSP)

Capital One offers a comprehensive, competitive, and inclusive set of health, financial and other benefits that support your total well-being. Learn more at the Capital One Careers website. Eligibility varies based on full or part-time status, exempt or non-exempt status, and management level.

​

At this time, Capital One will not sponsor a new applicant for employment authorization, or offer any immigration related support for this position (i.e. H1B, F-1 OPT, F-1 STEM OPT, F-1 CPT, J-1, TN, or another type of work authorization).

​

This role is expected to accept applications for a minimum of 5 business days.

​

No agencies please. Capital One is an equal opportunity employer committed to diversity and inclusion in the workplace. All qualified applicants will receive consideration for employment without regard to sex (including pregnancy, childbirth or related medical conditions), race, color, age, national origin, religion, disability, genetic information, marital status, sexual orientation, gender identity, gender reassignment, citizenship, immigration status, protected veteran status, or any other basis prohibited under applicable federal, state or local law. Capital One promotes a drug-free workplace. Capital One will consider for employment qualified applicants with a criminal history in a manner consistent with the requirements of applicable laws regarding criminal background inquiries, including, to the extent applicable, Article 23-A of the New York Correction Law; San Francisco, California Police Code Article 49, Sections 4901-4920; New York City's Fair Chance Act; Philadelphia's Fair Criminal Records Screening Act; and other applicable federal, state, and local laws and regulations regarding criminal background inquiries.

​

If you have visited our website in search of information on employment opportunities or to apply for a position, and you require an accommodation, please contact Capital One Recruiting at 1-800-304-9102 or via email at RecruitingAccommodation@capitalone.com. All information you provide will be kept confidential and will be used only to the extent required to provide needed reasonable accommodations.

​

For technical support or questions about Capital One's recruiting process, please send an email to Careers@capitalone.com

​

Capital One does not provide, endorse nor guarantee and is not liable for third-party products, services, educational tools or other information available through this site.

​

Capital One Financial is made up of several different entities. Please note that any position posted in Canada is for Capital One Canada, any position posted in the United Kingdom is for Capital One Europe and any position posted in the Philippines is for Capital One Philippines Service Corp. (COPSSC).

Company Description

​

Wavestone is a global consulting powerhouse dedicated to empowering businesses to navigate today's dynamic and competitive landscape. With a presence in 17 countries and a team of over 5,500 experts, we combine first-class sector expertise with a 360° transformation portfolio of high-value consulting services.

​

At Wavestone, we go beyond simply offering solutions – we strive to build lasting partnerships with our clients. Our collaborative approach ensures we understand your unique challenges and tailor our strategies to achieve your specific goals. We are passionate about fostering a culture of positive transformation – empowering businesses to not only survive but thrive in the ever-evolving world of technology, digitalization, and artificial intelligence.

​

As a leading global consulting firm, Wavestone is deeply rooted in the vibrant business landscapes of the United States. With offices in New York City and Dallas, we leverage the innovation and entrepreneurial spirit of these cities to deliver exceptional consulting services. With a deep understanding of industries like Financial Services, Energy, Life Sciences, Healthcare, Transportation, and Retail, we offer a comprehensive range of IT transformation and business consulting services. From Cybersecurity and Operational Resilience to Data Strategy and Artificial Intelligence, Wavestone is a trusted partner in driving positive outcomes and setting new standards of excellence. We support CEOs and tech leaders (CDO, CTO, CISO, etc.) in crafting their IT strategy and optimizing their sourcing models to maximize the value of IT services and business processes.

​

Our 3 Business Circles and areas of expertise:

• Digital and Artificial Intelligence Transformation (DAT) – GenAI adoption, maturity benchmarking, cloud strategy, data strategy, service provider & solution selection, IT governance design & implementation
• Cybersecurity (CYB) - Identity and access management, regulatory remediation, incident response, resilience & crisis management, Strategy & roadmap, 360 OpRes Maturity Assessments
• Sourcing & Service Optimization (SSO) - Resource model strategy​, vendor rationalization​, go-to-market strategy​, performance delivery valuation​, services continuity strategy​, functional sourcing strategy​

​

Join us for a rewarding career in management consulting, offering competitive compensation, continuous learning, and many opportunities for professional growth. Shape the future of consulting and make a lasting impact - Apply now to join our team!

​

Read more at www.wavestone.com

• Deliver engagements managed by more experienced consultants from whom you will learn the basics of consulting core competencies.
• Work with teams on projects for the business lines, functional teams, and technology departments of our clients from strategy definition to implementation
• Bring strong learning abilities and be proactive to better develop consulting skills and become more autonomous.
• Perform accurate assessments and analysis of client activities, manage day-to-day client relationships at peer client levels and assist clients in the effective use of management systems, tools, techniques, group problem-solving, and team building.
• Structure, write, and deliver quality work documents with oversight from others, ensure all information related to the assignments is circulated correctly, and alert colleagues/superiors of any difficulties.
• Collaborate/Coordinate across the different Wavestone teams to participate in local and global firm development.
• Continue to up-skill and stay current with the market, through our apprenticeship style coaching and our learning and development programs.
• Contribute to the firm’s development activities such as business development (i.e. proposals, market offers, white papers, etc.) and/or team development activities (i.e. recruitment, training, social events, office culture, etc.)

Required Qualifications:

• Bachelor’s degree in business management, engineering, economics, or other analytical major
• Strong interest in Management Consulting and digital technologies
• Analytical mindset with a developing business acumen

​

Preferred Qualifications:

• Strong entrepreneurial mindset, with a passion for innovation and driving growth
• Exceptional teamwork skills, with a collaborative and supportive approach to working with colleague
• Ability to complete structured problem solving with senior management support
• Ability to learn quickly and work through critical business and/or technology challenges
• Customer centric mindset and excellent interpersonal and communication skills
• Strong Microsoft Office skills

Our Commitment

Wavestone values and Positive Way

At Wavestone, we believe our employees are our greatest ambassadors. By embodying our shared values, vision, mission, and corporate brand, you'll become a powerful force for positive change. We are united by a shared commitment to making a positive impact, no matter where we are. This is better defined by our value base, "The Positive Way," which serves as the glue that binds us together:

​

• Energetic - A positive attitude gives energy to lead projects to success. While we may not control the circumstances, we can always choose how we respond to them.
• Responsible - We act with integrity and take ownership of our decisions and actions, considering their impact around us.
• Together - We want to be a great team, not a team of greats. The team's strength is each individual member, each member's strength is the team.

​

We are Energetic, Responsible and Together!

​

Benefits

• 25 PTO / 6 Federal Holidays / 4 Floating Holidays
• Great parental leave (birthing parent: 4 months | supporting parent: 2 months)
• Medical / Dental / Vision coverage
• 401K Savings Plan with Company Match
• HSA/FSA
• Up to 4% bonus based on personal and company performance with room to grow as you progress in your career
• Regular Compensation increases based on performance
• Employee Stock Options Plan (ESPP)

​

Travel and Location

This full-time position is based in our New York office. You must reside or be willing to relocate within commutable distance to the office.

Travel requirements tend to fluctuate depends on your projects and client needs.

​

Diversity and Inclusion

Wavestone seeks diversity among our team members and is an Equal Opportunity Employer.

At Wavestone, we celebrate diversity and inclusion. We have a strong global CSR agenda and an active Diversity & Inclusion committee with Gender Equality, LGBTQ+, Disability Inclusion and Anti-Racism networks.

If you need flexibility, assistance, or an adjustment to our recruitment process due to a disability or impairment, you may reach out to us to discuss this.

​

Go see our Wavestone website, our US specific page and LinkedIn page to see our most trending insights!

Also, check our Introduction Booklet to read more about Wavestone; and get a feel of our culture hearing what Wavestone employees have to say in our video testimonials!

Company Description

​

At Western Digital, we are on a mission to unlock the potential of data so people, companies and organizations everywhere can create what’s next. To fulfill our vision, we are always on the lookout for potential team members who share our passion for solving problems to empower others.

​

When you join Western Digital, you join a legacy more than 50 years in the making. Across our Western Digital®, SanDisk®, SanDisk® Professional, WD® and WD_BLACK™ brands, we have brought some of the most storied advancements in memory and data storage technology to market—and our best, most innovative work is yet to come.

​

From energizing gaming platforms, to enabling systems to make cities safer and cars smarter and more connected, to powering the data centers behind many of the world’s biggest companies and public cloud, Western Digital is fueling a brighter, smarter future.

​

Here’s how you can help.

• Implement enterprise-wide risk management frameworks that aligns with industry standards (e.g. ISO27001, NIST, etc).
• Lead technical and business process risk assessment activities to identify, evaluate, and prioritize information security risks across the organization, including threats, vulnerabilities, and potential impacts to information and technology assets.
• Develop and drive implementation of effective risk management strategies to mitigate identified risks, ensuring alignment with industry best practices and regulatory requirements.
• Collaborate across the organization to ensure the integration of risk management practices into organizational processes and projects.
• Generate comprehensive reports and metrics to communicate the status of information security risks to stakeholders and leadership.
• Analyze security data to identify trends, vulnerabilities, and areas for improvement.
• Collaborate with internal and external auditors to facilitate security audits and assessments.
• Stay current with industry trends, emerging threats, and best practices for information security and risk management.
• Provide expert guidance and support in developing and maintaining information security policies, standards, and procedures.

REQUIRED:

• Bachelor's degree in Information Security, Computer Science, or equivalent work experience.
• 8+ years of experience in information security, including risk management, risk assessments, reporting, and metrics analysis, and hands-on with at least one of the following: security engineering, network security, identity and access management, security operations, and/or software development security.
• 4+ years of experience in technical roles, or similar technical proficiency are highly desirable.
• Proficiency in risk assessment methodologies, tools, and techniques.
• Experience in conducting risk assessments, vulnerability assessments, and compliance audits.
• Strong understanding of information security frameworks, standards, and best practices (e.g., ISO 27001, NIST, GDPR).
• Experience in generating and interpreting information security metrics and reports.

​

SKILLS:

• Excellent analytical and problem-solving skills with attention to detail.
• Strong communication and interpersonal skills, with the ability to explain complex security concepts to non-technical stakeholders.
• Ability to work independently and collaboratively in a fast-paced environment.
• Experience in building and maturing information security risk management practices.

​

PREFERRED:

• Relevant certifications such as CISSP, CISM, CRISC, GSNA or similar are highly desirable.
• Technical certifications such as GCIH, GPEN, CEH, OSCP or similar are highly desirable.

Western Digital is committed to providing equal opportunities to all applicants and employees and will not discriminate against any applicant or employee based on their race, color, ancestry, religion (including religious dress and grooming standards), sex (including pregnancy, childbirth or related medical conditions, breastfeeding or related medical conditions), gender (including a person’s gender identity, gender expression, and gender-related appearance and behavior, whether or not stereotypically associated with the person’s assigned sex at birth), age, national origin, sexual orientation, medical condition, marital status (including domestic partnership status), physical disability, mental disability, medical condition, genetic information, protected medical and family care leave, Civil Air Patrol status, military and veteran status, or other legally protected characteristics. We also prohibit harassment of any individual on any of the characteristics listed above. Our non-discrimination policy applies to all aspects of employment. We comply with the laws and regulations set forth in the “Know Your Rights: Workplace Discrimination is Illegal” poster. Our pay transparency policy is available here: Pay Transparency Nondiscrimination Provision (dol.gov)

​

Western Digital thrives on the power and potential of diversity. As a global company, we believe the most effective way to embrace the diversity of our customers and communities is to mirror it from within. We believe the fusion of various perspectives results in the best outcomes for our employees, our company, our customers, and the world around us. We are committed to an inclusive environment where every individual can thrive through a sense of belonging, respect and contribution.

​

Western Digital is committed to offering opportunities to applicants with disabilities and ensuring all candidates can successfully navigate our careers website and our hiring process. Please contact us at [email protected] to advise us of your accommodation request. In your email, please include a description of the specific accommodation you are requesting as well as the job title and requisition number of the position for which you are applying.

​

Based on our experience, we anticipate that the application deadline will be 01/08/2025 (3 months from posting), although we reserve the right to close the application process sooner if we hire an applicant for this position before the application deadline. If we are not able to hire someone from this role before the application deadline, we will update this posting with a new anticipated application deadline.

​

#LI-AS1

​

Compensation & Benefits Details

• An employee’s pay position within the salary range may be based on several factors including but not limited to (1) relevant education; qualifications; certifications; and experience; (2) skills, ability, knowledge of the job; (3) performance, contribution and results; (4) geographic location; (5) shift; (6) internal and external equity; and (7) business and organizational needs.
• The salary range is what we believe to be the range of possible compensation for this role at the time of this posting. We may ultimately pay more or less than the posted range and this range is only applicable for jobs to be performed in California, Colorado, New York or remote jobs that can be performed in California, Colorado and New York. This range may be modified in the future.
• You will be eligible to participate in Western Digital’s Short-Term Incentive (STI) Plan, which provides incentive awards based on Company and individual performance. Depending on your role and your performance, you may be eligible to participate in our annual Long-Term Incentive (LTI) program, which consists of restricted stock units (RSUs) or cash equivalents, pursuant to the terms of the LTI plan. Please note that not all roles are eligible to participate in the LTI program, and not all roles are eligible for equity under the LTI plan. RSU awards are also available to eligible new hires, subject to Western Digital’s Standard Terms and Conditions for Restricted Stock Unit Awards.
• We offer a comprehensive package of benefits including paid vacation time; paid sick leave; medical/dental/vision insurance; life, accident and disability insurance; tax-advantaged flexible spending and health savings accounts; employee assistance program; other voluntary benefit programs such as supplemental life and AD&D, legal plan, pet insurance, critical illness, accident and hospital indemnity; tuition reimbursement; transit; the Applause Program, employee stock purchase plan, and the Western Digital Savings 401(k) Plan.
• Note: No amount of pay is considered to be wages or compensation until such amount is earned, vested, and determinable. The amount and availability of any bonus, commission, benefits, or any other form of compensation and benefits that are allocable to a particular employee remains in the Company's sole discretion unless and until paid and may be modified at the Company’s sole discretion, consistent with the law.