About this Role

At Capital One, you will consult on initiatives, programs, and projects to enhance Information Security and Risk Management across the organization. You collaborate with cross‑functional teams to integrate security into development processes and advise on secure architecture for infrastructure, data, network, and access management. The role requires practical knowledge of cloud services, containers, microservices, serverless, DevOps, and a strong threat‑modeling mindset.

Responsibilities

- Act as a central point of contact between your line of business and Capital One’s Information Security and Risk Management organization.
- Coordinate and execute proactive information security consulting covering infrastructure security, resiliency, data security, network architecture and design, and user access management.
- Serve as an expert in Capital One’s security capabilities, solutions, policies, procedures, and standards.
- Influence customers to leverage security capabilities, shift security left in development processes, and embed security into their architecture.
- Work with line of business leadership to anticipate objectives and needs, providing strong conceptual thinking and communication.
- Operate independently with minimal supervision while collaborating with a broad range of stakeholders, including upper management, IT leaders, and technology vendors.
- Apply deep understanding of strategic business objectives to drive results that support organizational goals.

Basic Qualifications

- At least 6 years of experience providing guidance and oversight of security concepts.
- At least 6 years of experience performing security risk assessments and security architecture reviews.




- At least 6 years of experience with architecture, software design, networking, and cloud infrastructure.
- Proven experience managing industry‑standard security audit and certification programs such as ISO27001, PCIDSS, SOC1 or2 (TypeI/II).
- Proven experience managing Canadian regulators (OPC, OSFI).

Preferred Qualifications

- Bachelor’s degree in a related technical field or equivalent experience.
- Experience securing a public cloud workplace (AWS, GCP, Azure).
- Experience building software on public cloud platforms.
- Experience with Agile methodologies.
- Experience with software application security and secure architecture.
- Experience with penetration testing and/or vulnerability management.
- Professional certifications such as AWS Certified Solutions Architect, CISSP, Lead Security Auditor, or similar.
- Experience in offensive and/or defensive security techniques.
- Experience in a regulated environment.
- Prior experience at Capital One.

Benefits

- Hybrid work model: three days in office with a one‑time work‑from‑home allowance.
- Full coverage for spouses, domestic partners, and dependents.
- Up to $3,000 in mental‑health coverage.
- Up to $5,000 in tuition subsidies per year.

Salary and Incentives

Expected annual salary range: $157,400 – $179,600. Eligible for performance‑based incentive compensation, which may include cash bonuses.

Equal Opportunity Employer

Capital One Canada is an equal‑opportunity employer committed to fostering a diverse and inclusive work environment. All qualified applicants are considered and reasonable accommodations are provided for applicants with disabilities.

#J-18808-Ljbffr

📌 Manager, Cyber Technical (Toronto)
🏢 Capital One
📍 Toronto