Top Cybersecurity Jobs in New York City, NY

Leads technology risk governance and advisory activities for Capital One’s Global Payments Network. Responsibilities include managing risks and issues through their lifecycle, driving risk identification and mitigation, advising technology stakeholders, facilitating executive risk discussions, improving governance processes, and delivering risk reporting and analytics. The role requires expertise in technology GRC, risk assessments, payment networks, resilience, cybersecurity, stakeholder management, and executive communication.

Conduct technology and cybersecurity audits for a global payment network, including risk assessments, control testing, cloud infrastructure, application controls, third-party management, and technology implementations. Document audit work, communicate risks and recommendations, track remediation actions, use data analytics, and collaborate with business partners and Audit teams.

Leads cybersecurity risk advisory and governance for global payment networks. Assesses technology systems, threats, vulnerabilities, controls, and business impact; prioritizes mitigation strategies; advises executives; evaluates regulatory and industry changes; and recommends policy and control improvements. Uses reporting tools and spreadsheets to analyze risk metrics, communicate findings, manage action plans, and escalate issues. The role also supports cyber resilience, vulnerability assessment reporting, stakeholder engagement, and lifecycle program management.

Leads risk strategy and advisory activities for Emerging and B2B businesses, translating complex technology and cybersecurity risks into executive presentations and strategic recommendations. Advises stakeholders across business, technology, cyber, compliance, and lines of defense; identifies risks and process improvements; oversees technology initiatives; leads cross-functional programs; and drives risk reporting, mitigation strategies, and continuous improvement. The role requires strong technical writing, analysis, communication, and technology risk management expertise.

Conduct technology audits covering cloud infrastructure, application controls, cybersecurity, risk management, and third-party management. Perform risk assessments, execute testing, document audit evidence, communicate findings, track remediation, and use data analytics during audit planning and fieldwork. The role requires independent execution, strong stakeholder relationships, continuous learning, and coaching within a collaborative technology audit team.

Leads a people-focused offensive security team conducting penetration tests across enterprise networks, applications, services, and infrastructure. Develops testing strategy, analyzes findings, guides remediation, tracks emerging attack techniques, mentors security professionals, and collaborates with developers on secure CI/CD improvements. Communicates technical risks and recommendations to technical and executive stakeholders.

Leads enterprise cybersecurity governance, risk assessments, capability maturity evaluations, continuous improvement, and risk reduction initiatives. Advises senior stakeholders on cybersecurity controls, threats, vulnerabilities, tooling, metrics, and remediation. Directs cross-functional governance programs, develops cybersecurity frameworks, communicates risk impacts, and manages cybersecurity professionals. Requires extensive cybersecurity experience, people management, multi-cloud expertise, security tooling knowledge, and familiarity with risk governance and compliance frameworks.

Provides cybersecurity consulting and governance for a business function, evaluating architectures, infrastructure, cloud, network, data, access, and resilience risks. Advises engineering and product teams on security capabilities, risk mitigation, and secure development. Manages cyber risks, supports incident analysis, presents security health to executives, and evaluates AI-related security, privacy, compliance, and attack risks.

Owns the vision, roadmap, backlog, and delivery of cryptographic services and data protection cybersecurity products. Translates customer and business needs into engineering objectives, user stories, acceptance criteria, and prioritized features. Partners with product, engineering, architecture, and cross-functional teams in Agile and SAFe ceremonies. Uses expertise in PKI, encryption, cloud security, risk management, analytics, resilience, and emerging technologies such as post-quantum cryptography to improve cybersecurity capabilities.

Leads full-stack engineering projects and developers building cloud-based, distributed microservices and cybersecurity solutions. Defines service boundaries, integration patterns, coding standards, and reusable frameworks; mentors engineers; evaluates emerging technologies; improves system performance and reduces technical debt. Works with product managers, architects, and Agile teams using modern programming languages, databases, containers, cloud platforms, CI/CD, infrastructure as code, automated testing, observability, and AI-assisted development tools.