CrawlJobs Logo
Capital One Logo Capital One · IT - Administration

Risk Manager, Endpoint Security

United States, McLean Employment contract 179400.00 - 245600.00 USD / Year · Job Posted April 16, 2026
Apply Position
Job Link Share

Job Description

The Risk Manager, Endpoint Security represents a unique opportunity for those with hands-on cybersecurity technical and operational experience who have a desire to leverage and enhance that expertise in a risk management organization. This individual will have the ability to use technical skills and cyber subject matter expertise to provide effective oversight, credible challenge, and expert advice to help manage and control risk associated with cyber operations. This position will play a key and influential role in assessing and challenging cybersecurity capabilities and operational effectiveness to drive action against areas of risk and concern. This role will play a key role in the review, risk identification, risk assessment, reporting, and effective challenge of cybersecurity controls, operational capabilities, and associated processes. This individual will provide subject matter expertise and oversight and effective challenge of Capital One’s Endpoint Security domain. This domain includes the deployment and enablement of cyber capabilities for user endpoints and servers across physical and virtual environments.

Job Responsibility

  • Provide advisory, oversight, and effective challenge to the 1st Line of defense
  • Provide technical assessments of cybersecurity controls design and effectiveness
  • Draft assessments for senior management and other stakeholders, to include regulatory agencies and the Board of Directors, as needed
  • Stay current on emerging cyber threats and potential implications to the firm
  • Collaborate effectively with colleagues, stakeholders, and leaders across multiple organizations to achieve objectives
  • Coordinate program-related activities and deliverables to ensure effective collaboration within the team and across stakeholder groups
  • Proven track record of leading, mentoring, and influencing others
  • Ability to communicate clearly in written and verbal form
  • Ability to manage multiple projects while maintaining superior results
  • Ability to work individually and cross-functionally
  • Execution oriented and a self-motivator

Requirements

  • Bachelor’s degree or military experience
  • At least 5 years of experience implementing endpoint detection and response (EDR) tools with anti-malware and anti-virus functionality
  • At least 3 years of experience implementing application whitelisting technologies
  • At least 3 years of experience implementing next-generation endpoint platforms such as virtual desktop infrastructure (VDI) or thin clients or thin platforms
  • At least 3 years of experience implementing tools and processes that remove sensitive data off endpoints
  • At least 3 years of experience with Mobile Device Management (MDM) or Mobile Application Management (MAM)
  • At least 2 years of experience with Privileged Access Management (PAM) tools
  • At least 2 years of consulting, audit, or risk management experience

Nice to have

  • Familiarity with NIST Cybersecurity Framework controls, NIST 800-53, ISO 27000-1
  • Cybersecurity certifications such as: Certified Information Systems Security Professional (CISSP)
  • Certified Information Security Manager (CISM)
  • or Certified in Risk and Information Systems Control (CRISC)
  • Cloud certifications for Amazon Web Services (AWS) or Google Cloud Platform (GCP)

What we offer

  • comprehensive, competitive, and inclusive set of health, financial and other benefits that support your total well-being
  • performance based incentive compensation, which may include cash bonus(es) and/or long term incentives (LTI)
Capital One - All Job Offers

Looking for more opportunities?

Search for other job offers that match your skills and interests.

Suggested Tags: Frontend Developer Secretary Talent Manager Salesforce Administrator Data Analyst
Similar Jobs for

Risk Manager, Endpoint Security

8 matching positions

New

Product Manager, Endpoint Security

Capital One is seeking a product owner to help deliver game-changing cybersecuri...
Location
Location
United States , New York, New York; McLean, Virginia; Richmond, Virginia; Plano, Texas
Salary
Salary:
179400.00 - 245600.00 USD / Year
capitalone.com Logo
Capital One
Expiration Date
Until further notice
Flip Icon
Requirements
Requirements
  • High School Diploma, GED or equivalent certification
  • At least 4 years of experience working in cybersecurity or information technology
  • At least 2 years of experience in digital product management
  • Bachelor's Degree in Cybersecurity, Systems Engineering, or Computer Science
  • 5+ years of experience solving cyber technical challenges
  • 5+ years of experience translating business strategy and analysis into products
  • 2+ years of Cyber product owner experience
  • 2+ years of experience in technical writing
  • 2+ years of hands-on JIRA experience
  • Experience in regulated financial services organizations or tech companies
Job Responsibility
Job Responsibility
  • Communicate the delivery roadmap to our technology teams by inspiring the team through the product vision
  • Clearly articulate and advocate target persona, customer benefit, and value of features across teams
  • Leverage technical knowledge and skills on how systems work and how code is built to effectively support engineering teams in delivering value
  • Utilize strong cybersecurity background and customer research and insights to represent the voice of the customer to the engineering team(s)
  • Incorporate design thinking and analytics to inform product design
  • Actively participate in research or design sessions for new features
  • Contribute to the development of a healthy product backlog, collaborating with the Product Manager, Engineering, and Solution Architects to break down business epics, document user stories (to also include things like addressing technical debt, SRE, etc.), design details and comprehensive acceptance criteria
  • Lead internal backlog refinement sessions to refine cyber and customer intent, prepare business epics and stories for technical breakdown and planning, and ensure requirements are well understood by the engineering teams
  • Prioritize the Product Backlog to maximize business and customer outcomes by balancing technical and non-technical aspects while also incorporating cyber and operational risk reduction outcomes and activities
  • Act as a technical advisor to the product manager, engineering, and other stakeholders
What we offer
What we offer
  • performance based incentive compensation, which may include cash bonus(es) and/or long term incentives (LTI)
  • health, financial and other benefits that support your total well-being
  • Fulltime
Read More
Arrow Right

Staff Security Risk and Compliance Program Manager

We are seeking a highly experienced and technically proficient Staff Risk & Comp...
Location
Location
United States
Salary
Salary:
213200.00 - 250500.00 USD / Year
confluent.io Logo
Confluent
Expiration Date
Until further notice
Flip Icon
Requirements
Requirements
  • 8+ years of experience in security program management
  • At least 5 years dedicated to Insider Threat, Corporate Security, or Data Loss Prevention (DLP) programs
  • Deep technical understanding of security controls, network architecture, endpoint security, cloud environments (e.g., AWS, Azure, GCP), and User and Entity Behavior Analytics (UEBA) or similar advanced detection technologies
  • Experience with evaluating & implementing identity & access management tools, endpoint security platforms, data loss prevention tools
  • Familiarity with forensic analysis techniques and legal hold processes related to electronic evidence
  • Strong project management and organizational skills
  • Exceptional analytical and problem-solving skills, with a data-driven approach to decision-making
  • Experience in running long-term, complex security programs that deliver iterative improvements and risk reduction
  • Excellent written and verbal communication skills
  • The ability to influence and lead without direct authority
Job Responsibility
Job Responsibility
  • Define and drive the multi-year technical roadmap for the Insider Threat program, focusing on advanced detection methods, behavioral analytics, technical countermeasures, and integration with existing security and IT infrastructure
  • Lead the planning, execution, and delivery of complex, multi-functional technical projects within the Insider Threat domain
  • Act as the primary liaison between Trust & Security and key partners and stakeholders
  • Translate operational needs and intelligence into clear technical requirements and specifications for engineering implementation
  • Drive the selection, deployment, and optimization of technical tools and platforms such as DLP, endpoint security platform, to identify, score, and alert on anomalous or high-risk user behavior
  • Partner with Legal and HR to ensure all technical controls and monitoring capabilities are compliant with global privacy laws, company policies, and ethical guidelines
  • Establish and refine the technical incident response and mitigation processes for insider threats
  • Develop metrics and dashboards to track program effectiveness & and technical control performance
  • Develop training content, ensure employees understand the expectations of Acceptable User Policy
What we offer
What we offer
  • Remote-First Work
  • Robust Insurance Benefits
  • Flexible Time Away
  • The Best Teammates
  • Experience Ambassadors
  • Open and Honest Culture
  • Well-Being and Growth
  • Offers Equity
  • Fulltime
Read More
Arrow Right

Information Systems Security Manager (ISSM)

We are seeking a highly skilled and motivated Information Systems Security Manag...
Location
Location
United States , Crane
Salary
Salary:
83037.47 - 199537.81 USD / Year
arcfield.com Logo
Arcfield
Expiration Date
Until further notice
Flip Icon
Requirements
Requirements
  • BS 5-7 Years Experience, MS 3-5, PhD 0-2 in Information Technology, Cybersecurity, Computer Science, or a related field (Master’s degree preferred)
  • Experience in information security, cybersecurity, or related roles, with at least 2+ years in a leadership or managerial role
  • A GSLC or CISSP or CISM or CAP or or CASP is required
  • Must possess an active DoD Secret clearance, with the ability to obtain a TS clearance
  • Strong understanding of information security principles, risk management, and vulnerability management
  • Experience with regulatory and compliance frameworks (e.g., NIST, ISO 27001, PCI-DSS, SOX, GDPR, HIPAA)
  • Proficiency in security tools such as eMASS, ACAS, SIEM, firewalls, IDS/IPS, DLP, and endpoint protection platforms
  • Knowledge of cloud security best practices (e.g., Azure, AWS, GCP)
  • Strong problem-solving, decision-making, and analytical skills
  • Excellent verbal and written communication skills to work with technical and non-technical stakeholders
Job Responsibility
Job Responsibility
  • Develop, implement, and maintain the organization's information security policies, strategies, procedures, and guidelines
  • Ensure compliance with industry frameworks (e.g., NIST, ISO 27001, GDPR, CMMC, HIPAA, etc.) and government regulations
  • Establish strong security governance practices and manage risk assessment processes
  • Risk Management and Compliance Oversight for IT infrastructure and program requirements
  • Act as the primary point of contact for audits, assessments, and compliance-related activities
  • Ensure compliance with internal policies, regulatory requirements, and contractual security obligations
  • Lead efforts to achieve and maintain required certifications (e.g., ISO27001, SOC 2, CMMC)
  • Develop and maintain an incident response plan
  • Lead investigation and resolution of security incidents, including root cause analysis and remediation steps
  • Collaborate with external vendors, law enforcement, or forensics teams to address breaches when necessary
What we offer
What we offer
  • Health Insurance
  • Life Insurance
  • Paid Time Off
  • Holiday Pay
  • Short Term and Long-Term Disability
  • Retirement and Savings
  • Learning and Development opportunities
  • Wellness programs
  • Fulltime
Read More
Arrow Right

Global Senior Security Manager

We are seeking a seasoned security leader to partner with our CISO in protecting...
Location
Location
United States , New York
Salary
Salary:
150000.00 - 210000.00 USD / Year
alterdomus.com Logo
Alter Domus
Expiration Date
Until further notice
Flip Icon
Requirements
Requirements
  • 10+ years in cybersecurity with at least 5 years in a leadership role managing global, cross-functional teams
  • Proven track record of representing security at C-suite and board level, translating complex risk into clear business narrative
  • Experience in financial services or a similarly regulated industry (FCA, PRA, DORA, SOX, PCI-DSS)
  • Familiarity with deploying AI security frameworks such as NIST AI RMF 1.0, MITRE ATLAS, and financial services AI governance standards
  • Practical knowledge of implementing AI-powered security tools to automate detection, response, and guardrail enforcement
  • Familiarity with AI model risk, LLM threat surfaces, data poisoning, prompt injection, and adversarial ML attack vectors
  • Familiarity with enterprise security tools
  • Broad exposure to endpoint protection, vulnerability management, CSPM, DLP, and email security platforms
  • CISSP, CISM, or CRISC — one or more preferred
  • CCSP or equivalent cloud security credential
Job Responsibility
Job Responsibility
  • Support CISO in key decision making and regulatory meetings — presenting risk posture, programme status, and strategic recommendations with clarity and confidence
  • Build, mentor, and manage high-performing, globally distributed security teams spanning multiple time zones and functions
  • Define and execute the enterprise security roadmap aligned with business strategy and applicable regulatory requirements (FCA, PRA, DORA, SOX, PCI-DSS)
  • Lead end-to-end transformation of Identity & Access Management (IAM) and Privileged Access Management (PAM), including strategy, tooling selection, and programme delivery
  • Drive implementation of an Identity Governance & Administration (IGA) framework — encompassing joiner/mover/leaver processes, role engineering, access certification, and policy enforcement
  • Oversee deployment and maturation of PAM controls, credential vaulting, just-in-time access, and session monitoring to eliminate over-privileged accounts across the enterprise
  • Establish access management metrics and KPIs reported to executive leadership and regulators
  • Lead the Zero Trust Architecture (ZTA) transformation programme — defining principles, technology roadmap, and phased rollout across on-premises, cloud, and hybrid environments
  • Drive AI-augmented network and security architecture, leveraging machine learning for anomaly detection, automated policy enforcement, and predictive threat modelling
  • Build and operationalise a Network Operations (NetOps) operating model — defining governance, runbooks, escalation paths, and SLA frameworks for a globally resilient network
What we offer
What we offer
  • Support for professional accreditations
  • Flexible arrangements, generous holidays, plus an additional day off for your birthday
  • Continuous mentoring along your career progression
  • Active sports, events and social committees across our offices
  • 24/7 support available from our Employee Assistance Program
  • The opportunity to invest in our growth and success through our Employee Share Plan
  • Plus additional local benefits depending on your location
  • Fulltime
Read More
Arrow Right

Endpoint Security Engineer

Join our team at AMGEN Capability Center Portugal, consistently recognized among...
Location
Location
Portugal , Lisbon
Salary
Salary:
Not provided
amgen.com Logo
Amgen
Expiration Date
Until further notice
Flip Icon
Requirements
Requirements
  • Master's degree
  • Or Bachelor's degree and 2 years of experience in Information Systems, or Computer Science
  • Or Associate degree and 4 years of experience in Information Systems, or Computer Science
  • Or High school diploma / GED and 6 years of experience in Information Systems, or Computer Science
Job Responsibility
Job Responsibility
  • Be a technical engineer for a very diverse endpoint tools
  • Play a key role in designing, deploying, and maintaining solutions to build our evolving endpoint protection capabilities
  • Operate, lead, and improve multiple endpoint security technologies
  • Protect Amgen from threats inside of the company's environment within both the global corporate network and manufacturing environments
  • Operate, manage, and improve Amgen's endpoint security posture solutions
  • Identify emerging risks related to endpoint protection, advise management, and develop technical remediations to address those risks
  • Be responsible for the development of processes and procedures for multiple solutions Amgen utilizes to deliver to the promise of a secure digital workplace
  • Run multiple projects simultaneously to implement and improve the endpoint security protections and use advanced analytics to demonstrate success
  • Play a key role in educating technologists and business leaders about the security strategies
  • Work daily alongside the digital workforce experience team to specify, implement, and validate security controls for Amgen's workstation and mobile platforms
What we offer
What we offer
  • Work That Matters
  • Modern Tech Stack
  • Global Scale, Agile Mindset
  • Continuous Learning
  • AMGEN Total Rewards Plan
  • Flexibility
  • Fulltime
Read More
Arrow Right

Endpoint Security Specialist

We are seeking an experienced Endpoint Security Specialist to join our Cyber Sec...
Location
Location
India , Pune
Salary
Salary:
Not provided
vodafone.com Logo
Vodafone
Expiration Date
Until further notice
Flip Icon
Requirements
Requirements
  • Minimum of 5 years’ IT experience, including at least 3 years working hands-on with enterprise endpoint security tools such as Antivirus and EDR
  • Experience in Microsoft Defender for Endpoint and Trend Micro Vision One administration, deployment, and operations
  • Skill in policy creation, platform configuration, and recommending future-state improvements
  • Knowledgeable in Windows scripting (PowerShell), Active Directory, LDAP services, and multiple operating systems including Windows, Mac, and Linux
  • Comfortable working with SIEM and monitoring integrations for alert management and automation
  • Familiar with ITIL practices, complex change management, and structured incident handling
  • Collaborative team member with strong communication, presentation, and stakeholder management skills
  • Able to work effectively under pressure while maintaining a customer-focused mindset
Job Responsibility
Job Responsibility
  • Manage and support the end-to-end lifecycle of endpoint security platforms, including Microsoft Defender for Endpoint and Trend Micro Vision One
  • Lead onboarding of endpoints and integrations across Windows, Mac, Linux, UNIX servers, databases, and network devices
  • Design, implement, and maintain security policies aligned with business and security architecture requirements
  • Respond to complex incidents and escalations, restore services, and validate Root Cause Analysis (RCA)
  • Plan, test, and implement client and console upgrades, security patches, and new feature releases
  • Conduct security assessments, identify endpoint vulnerabilities, and implement effective risk mitigation strategies
  • Support BAU operations while managing complex changes and project-based transitions into security operations
  • Integrate endpoint platforms with monitoring and SIEM tools such as Splunk and HP ArcSight to enhance alerting and visibility
  • Collaborate with vendors and internal stakeholders to design solutions aligned with Vodafone security standards
  • Produce and maintain high-quality technical documentation in line with Vodafone and industry standards
What we offer
What we offer
  • Exposure to global-scale endpoint security platforms within a complex, enterprise technology environment
  • Opportunities to influence platform roadmaps and contribute as a subject matter specialist
  • Collaboration with diverse, cross-functional global security and technology teams
  • Continuous learning through hands-on engineering, incident management, and transformation initiatives
  • Fulltime
Read More
Arrow Right

Security Risk Officer

Techland is one of the biggest video game companies in Poland, with over 30 year...
Location
Location
Poland , Warszawa; Wrocław
Salary
Salary:
Not provided
techland.net Logo
Techland S.A.
Expiration Date
Until further notice
Flip Icon
Requirements
Requirements
  • Proven experience in cybersecurity, IT governance or enterprise risk management
  • Familiarity with security frameworks (ISO 27001, NIST CSF, SOC 2) and risk management standards (e.g. ISO 31000)
  • Understanding of security controls in cloud, endpoint, infrastructure and application environments
  • Experience participating in or coordinating security incident response efforts
  • Ability to assess business impact during security events and help prioritize response actions
  • Familiarity with incident response processes, escalation paths and post-incident reviews (RCA, lessons learned)
  • Comfortable working under pressure and facilitating structured communication between stakeholders during incidents
  • Understanding of incident lifecycle, from detection to containment, recovery and root cause analysis
  • Excellent communication skills – ability to work across departments and present risk contextually
  • Comfortable with documentation, controls tracking, audit evidence and policy management
Job Responsibility
Job Responsibility
  • Identifying, assessing, and monitoring risks related to IT, cybersecurity, data protection, and business continuity
  • Advising cross-functional teams on risk-aware decision-making in projects and operations
  • Coordinating audits, security reviews, compliance checks, and data protection impact assessments (DPIAs)
  • Overseeing implementation and tracking of security, IT, and data governance controls
  • Maintaining risk registers, control matrices, and mitigation plans
  • Managing third-party risk through vendor assessments and reviews
  • Ensuring compliance with relevant standards and regulations (e.g., ISO 27001, GDPR, NIST)
  • Supporting and coordinate incident response, including internal communication during critical events
  • Leading post-incident reviews and ensure integration of findings into risk management plans
  • Acting as liaison between Security, IT, Legal, and Executives during high-impact incidents
What we offer
What we offer
  • A wide array of benefits: private medical care, life insurance, pro-health campaigns, gifts for different occasions
  • An outstanding work atmosphere in a highly-skilled team of professionals, with flexible working hours, no dress code, and full support of the dedicated HR Business Partner
  • Many opportunities for personal development: a dedicated development budget for each employee, extra two paid days for training and CSR, stable career paths, extensive internal and external training, and financing of English and Polish language classes
  • State-of-the-art offices filled with chillout zones, a fully equipped kitchen, a gym (Wrocław office), and a free car park (Warsaw limited amount of space)
Read More
Arrow Right

Senior Product Manager - Endpoint Protection

About the Role: As a Senior Product Manager Endpoint Protection, you will own Cy...
Location
Location
Israel , Tel Aviv
Salary
Salary:
Not provided
cyera.io Logo
Cyera
Expiration Date
Until further notice
Flip Icon
Requirements
Requirements
  • 5+ years of Product Management experience, with a proven track record in B2B Endpoint Security
  • Experience or a deep interest in applying AI/ML models to security use cases
  • Technical experience with Operating Systems and complex low level internals
  • A solid grasp of the modern cyber security, threat landscape, risk management and compliance frameworks
  • Proven success in driving innovative products from ideation to launch
  • Proficiency in using product data analytics to extract actionable insights
  • The ability to move seamlessly between high-level strategic discussions with executives and deep-dive technical reviews with expert engineers
Job Responsibility
Job Responsibility
  • Strategy & Vision: Own the end-to-end product lifecycle and strategy, from ideation to execution - ensuring alignment with customer needs and business goals
  • Technical Leadership: Collaborate with Engineering and Data Science to build high performance technical solutions that are scalable, secure, and easy to use
  • Cross-Functional Execution: Partner with R&D, UX, Sales, Marketing and Customer Success to translate complex technical challenges into intuitive, user-centric security workflows
  • Roadmap Prioritization: Own the product roadmap, prioritize features, and drive execution while balancing speed and quality
  • Go-to-Market: Lead GTM efforts by equipping Sales & Marketing with the technical storytelling and product proof points needed to win a competitive landscape
  • Data-Driven Optimization: Establish and monitor rigorous KPIs to refine user experience and relentlessly drive security efficacy toward industry-leading excellence
  • Fulltime
Read More
Arrow Right