Center 3 (19075), United States of America, McLean, VirginiaSr. Manager, Abstracted Compute
Capital One is one of the fastest growing organizations in the world today, powered by our passion for our customers. We are serious about technology, we dream big, and we execute : Capital One moved our entire enterprise to the public cloud over the course of five years.
Just as we prioritize driving innovation through technology, we equally prioritize cybersecurity, reliability, and managing technology risk.
For years, the cybersecurity community has debated whether the CISO should report to the CIO or not. In regulated financial services, the answer is : both.
The first-line CISO has operational responsibilities and reports to the CIO. The second-line Chief Tech Risk Officer (CTRO) and the Technology Risk Management (TRM) organization have broader responsibilities for cybersecurity but also reliability, software quality, resilience, and other technology risks.
The CTRO is independent, reports to the Chief Risk Officer, and oversees the work of the CISO and the CIO.
Technology Risk Management (TRM) is a small organization that packs a big punch. The 100 professionals in TRM are trusted experts who oversee 14,000 developers at Capital One.
We raise the bar for excellence in cybersecurity, reliability, and tech risk. We shape strategy and decisions, challenge activities to ensure they meet our standards, and perform independent tests of our security and technology risk.
Our business leaders must make technology decisions constantly. TRM makes sure they have the tech risk information they need to make good decisions.
Associates within TRM are highly-skilled information security, cybersecurity, site reliability engineering, technology, and risk management professionals.
They have a wealth of experience and a demonstrated ability to add value with their advice and to deliver high-impact results.
This position Senior Manager, Abstracted Compute will play a key role in the review, risk identification, risk assessment, reporting, and effective challenge of technology processes, controls, and capabilities across our serverless infrastructure and compute domain.
This individual will provide subject matter expertise, oversight, and effective challenge of the design, implementation and management of serverless computing solutions on the AWS Platform.
As part of the second line of defense, this position will also collaborate closely with associates in first line Cyber, Technology, the Lines of Business, as well as other second line of defense risk management offices to perform and support evaluations of the effectiveness of the firm’s controls infrastructure and offer independent advice and recommendations regarding ways to further mature the firm’s technology risk management capabilities.
Finally, as a member of a growing organization, you will have the opportunity to shape and further refine your portfolio commensurate with the priorities of the organization and the company.
The demands and high-visibility nature of this position requires an expert with a proven ability to work independently in a fast-paced environment and who can begin contributing immediately.
Basic Qualifications :
Bachelor’s Degree or military experience
At least 3 years of experience working with serverless and containerization technologies ( Docker, Amazon Elastic Container Service (Amazon ECS), Amazon Elastic Kubernetes Service (Amazon EKS), Fargate )
At least 3 years of experience working with Amazon Web Services (AWS)
At least 3 years of experience with Infrastructure as Code (IaC) tools (AWS CloudFormation, Terraform, AWS Cloud Development Kit (CDK), AWS CodePipeline)
At least 5 years of experience in Enterprise IT (EIT)
Preferred Qualifications :
Professional certification (AWS Certified Solutions Architect, AWS Certified DevOps Engineer, AWS Certified Security Specialty)
Strong knowledge of risk management methods, standards, processes, governance models, and industry standard risk analysis approach.
Strong understanding of Agile models and methodology
Prior experience working in financial services or other highly-regulated sectors
Passion and expertise in cloud and modern technology trends with an ability to be confident, respectful, and articulate when registering dissenting or unpopular opinions
Ability to manage multiple high-visibility and high-impact projects while maintaining superior result
Ability to communicate clearly and to interact effectively at all levels of the organization, and to influence as warranted and appropriate to drive to consensus
Excellent verbal and written communication skills
Execution oriented and a self-motivator
At this time, Capital One will not sponsor a new applicant for employment authorization for this position.
The minimum and maximum full-time annual salaries for this role are listed below, by location. Please note that this salary information is solely for candidates hired to perform work within one of these locations, and refers to the amount Capital One is willing to pay at the time of this posting.
Salaries for part-time roles will be prorated based upon the agreed upon number of hours to be regularly worked.
New York City (Hybrid On-Site) : $234,700 - $267,900 for Sr Manager, Cyber Technical