cybersecurity program manager

The Emirates Group

<div><h5 class="jobSectionHeader">Job Purpose
</h5>At Emirates, we believe in connecting the world, to and through, our global hub in Dubai; and in constantly innovating to ensure our customers &lsquo;Fly Better&rsquo;. Emirates Group IT thrives on the dynamic nature of technology. Being pioneers in aviation innovation, we're always at the forefront, pushing boundaries. We're on the lookout for exceptional IT professionals to fortify our position as leaders in the industry. Embark on a journey with the world&rsquo;s largest international airline and become a vital part of our cutting-edge information and technology team as Cybersecurity Portfolio Assurance Manager.
<div>Join our CyberSecurity team where we ensure a world class CyberSecurity organisation based on the key principles of People, Process and Technology underpinned with executive endorsement of a multi-year strategy to continuously improve and develop. The team protects our digital assets by monitoring for threats, responding to incidents, managing vulnerabilities, and ensuring compliance with security policies and regulations. If you are passionate about CyberSecurity, we invite you to apply to play a crucial role in shaping the future of our technology initiatives at Emirates Group. 
</div><div></div> 
<div>As a Cybersecurity Portfolio Assurance Manager, you&rsquo;ll lead the strategic direction, oversight, and continuous improvement of the Emirates Group&rsquo;s cybersecurity portfolio assurance program. Ensure the consistent implementation and optimization of security controls across all IT portfolios and product lines, safeguarding information assets in compliance with corporate policies, regulatory requirements, and industry best practices. Drive accountability, foster cross-functional collaboration, and champion innovation to enhance assurance outcomes, process efficiency, and a culture of risk-aware decision-making and continuous improvement. 
 
</div><div> 
In the role, you will:
</div><ul><li>Direct and orchestrate portfolio-wide cybersecurity assurance activities by setting strategic priorities, allocating resources, and establishing performance benchmarks, ensuring the consistent delivery of high-quality security services and alignment with Emirates Group&rsquo;s cybersecurity objectives.
</li><li>Drive and optimize the integration of security controls into IT and business processes, conducting comprehensive evaluations to identify operational inefficiencies, streamline workflows, eliminate redundancies, and implement automation to enhance assurance effectiveness and scalability.
</li><li>Present executive-level metrics and insights that provide a holistic view of the security posture across applications and infrastructure. Translate complex data into actionable strategies, enabling SVP-level and higher-level stakeholders to prioritise remediation efforts and allocate resources effectively.
</li><li>Champion systemic risk identification, mitigation, and escalation by collaborating with senior stakeholders to address emerging threats, resource constraints, and compliance gaps, and by designing and executing robust mitigation roadmaps that promote innovation in assurance methodologies and technologies.
</li><li>Mentor, develop, and empower assurance leads and cross-functional teams through structured leadership programs, coaching, and performance management, fostering a culture of excellence, accountability, and knowledge sharing to ensure high standards across all portfolio assurance activities.
</li></ul><h5 class="jobSectionHeader">Qualification
</h5><div>To be considered for this role, you must meet the below requirements:
</div><ul><li>Degree or Honours (12+3 or equivalent) in Cybersecurity, Information Technology or Computer Science.
</li><li>Experience and understanding of applying ISO/IEC 27001, ISO/IEC 2000 or CBCI, CBCM, Qualification on frameworks such as ITIL.
</li><li>In-depth knowledge of enterprise information security frameworks, risk management, and assurance methodologies (e.g., ISO 27001, NIST).
</li><li>Proven experience in leading and managing cross-functional security assurance programs across large IT Infrastructure portfolios or product lines.
</li><li>Strong leadership, team development, and resource management skills, with the ability to mentor, coach, and empower assurance leads and teams.
</li><li>Expertise in integrating and optimizing security controls within business and IT Infrastructure processes, driving operational efficiency and effectiveness.
</li><li>Advanced analytical skills to interpret security metrics, assess risk trends, and drive strategic improvements and remediation initiatives.
</li><li>Excellent stakeholder engagement, communication, and influencing abilities, with experience presenting to and collaborating with senior management and business leaders.
</li><li>Demonstrated ability to drive innovation, continuous improvement, and the adoption of new security technologies, methodologies, and best practices.
</li><li>Strong problem-solving and decision-making skills, with a focus on proactive risk mitigation, escalation, and cross-functional collaboration.
</li></ul><div>Leadership Role: Yes
</div><h5 class="jobSectionHeader">Salary &amp; benefits
</h5>Join us in a management role and enjoy an attractive tax-free salary. On top of our generous travel benefits, including discounted flights and hotel stays around the world, this managerial role also has an excellent leave and healthcare package. That&rsquo;s on top of transport benefits, life insurance and more. Find out what it&rsquo;s like to live and work in our fast-paced, cosmopolitan home city in the Dubai Lifestyle section of our website www.emirates.com/careers</div>

Cybersecurity Portfolio Assurance Manager

VINCI

<div>Axians Emirates, an operational entity of Cegelec Abu Dhabi (a subsidiary of VINCI Energies), is a dedicated business unit specializing in the deployment and maintenance of telecom, cybersecurity infrastructure and physical security systems.
With strong capabilities in cybersecurity design and implementation, as well as ICT engineering and construction, Axians Emirates delivers end-to-end solutions tailored to the needs of critical sectors.
&#65039; Our services cover the full project lifecycle &mdash; from engineering, integration, and installation to commissioning and maintenance &mdash; with a focus on security, telecommunications, and information systems for clients in the oil &amp; gas and defense industries.
With the support of the Axians network (VINCI Energies), Axians Emirates delivers reliable, agile, and locally adapted solutions, while embracing a dynamic approach to innovation and sustainable performance.
Job Summary
We are hiring a Cybersecurity Project Manager to coordinate multiple cybersecurity programs related to governance, compliance, awareness, and training. This role ensures timely delivery, budget adherence, and strategic alignment with internal stakeholders.
Responsibilities<ul>
<li>Plan and oversee governance and awareness-related cybersecurity projects end-to-end.</li>
<li>Coordinate delivery of strategic documentation (policies, SoAs), training modules, compliance reviews, and communication campaigns.</li>
<li>Develop project dashboards and track KPIs related to cybersecurity engagement and compliance.</li>
<li>Engage with cross-functional teams and ensure quality control and stakeholder alignment.</li>
<li>Support audits, certifications, and readiness assessments as part of governance deliverables.</li>
<li>Identify risks and manage mitigation plans in the context of awareness or compliance programs.</li>
</ul>
Requirements<ul>
<li>Minimum 5 years in project management roles within cybersecurity or GRC domains.</li>
<li>Strong ability to coordinate teams across policy, awareness, training, and compliance tracks.</li>
<li>Familiarity with project management and oversight tools (e.g., dashboards, compliance trackers).</li>
<li>Fluent English (written and spoken) is mandatory.</li>
</ul>
Preferred Certifications<ul>
<li>PMP or PRINCE2</li>
<li>CISM or CISSP
</li><li>Agile or SAFe certifications are a plus</li>
</ul><ul>
</ul>Why join us ?
Our DNA: Trust, Entrepreneurial Spirit, Solidarity, Autonomy, Responsibility
Joining us means becoming part of a large group while enjoying the agility and warmth of a human-sized company!
A personalized onboarding journey from day one, with tailored career follow-up
Opportunities for growth, training, and mobility within a fast-growing international group
Close and supportive management
Recognition of employee performance through a company savings plan
Pride in shared achievements<ul><li>&#65039; Respect for the environment and local communities in the countries where we operate (Human Rights Guide)</li></ul>
Commitment to the health and safety of our employees
At VINCI Energies Oil &amp; Gas, CSR initiatives are deeply embedded in our activities, our ways of working, and ultimately, in our DNA</div>

Cybersecurity Project Manager (Governance & Awareness)

KAUST (King Abdullah University of Science and Technology)

<div>
 
 
 About the Role
 
 
 
 
 
 
 The Information System Security Principal (ISSP) is responsible for ensuring the overall security and compliance of the organization&rsquo;s supercomputer environment. The ISSP provides leadership and assurance by owning and executing the System Security Plan (SSP), coordinating implementation of required controls, overseeing risk and incident management, and serving as the key liaison between technical teams, cybersecurity, export control, legal, and governance committees. This role requires a senior-level professional with deep expertise in security architecture, Zero Trust principles, and governance frameworks, able to influence cross-functional teams without direct authority. The ISSP does not have direct reports but serves as the system-level security authority, leading by influence and collaborating across IT, cybersecurity, operations, legal, and compliance teams. The role provides executive-level visibility into risks and ensures that the supercomputer remains secure, compliant, and aligned with mission and research objectives to maintain the system's authorization to operate certificate.
 
 
 
 
 
 
 Responsibilities
 
 
 
 
 
 <ul>
 <li>
 Lead the continuous development updates, ownership, and maintenance of the System Security Plan (SSP) for the supercomputing environment, ensuring it accurately reflects the system&rsquo;s architecture, controls, and operating context.
 </li>
 <li>
 Coordinate with IT infrastructure, cybersecurity, HPC administrators, and research program teams to ensure all required security controls in the SSP are implemented, validated, and continuously monitored.
 </li>
 <li>
 Translate regulatory, compliance, and security requirements into clear control ownership assignments across technical and non-technical teams.
 </li>
 <li>
 Track, validate, and report on evidence of control implementation provided by system owners, administrators, and support teams.
 </li>
 <li>
 Manage and maintain Plan of Action and Milestones (POA&amp;Ms), ensuring that gaps identified during audits, assessments, or incidents are remediated on time.
 </li>
 <li>
 Facilitate regular reviews and updates of the SSP to reflect changes in system design, architecture, users, or regulatory requirements.
 </li>
 <li>
 Act as the single point of accountability for ensuring the SSP remains audit-ready, accurate, and aligned with the operational reality of the supercomputer.
 </li>
 <li>
 Drive SSP execution across teams by coordinating activities such as vulnerability management, access control enforcement, logging/monitoring, and patch management, ensuring they are consistent with SSP control requirements.
 </li>
 <li>
 Provide training and guidance to system owners and administrators on their responsibilities related to SSP controls.
 </li>
 <li>
 Ensure executive-level visibility by reporting SSP status, risks, and gaps to the Supercomputer Security Steering Committee, Legal, and Compliance functions.
 </li>
 <li>
 Serve as the liaison to auditors, assessors, and authorizing officials, representing the supercomputer&rsquo;s security posture and SSP implementation progress.
 </li>
 </ul>
 
 
 
 
 
 Qualifications
 
 
 
 
 
 <ul>
 <li>
 Bachelor&rsquo;s degree in Computer Science, Cybersecurity, Information Systems, or related field (or equivalent experience).
 </li>
 <li>
 Preferred: Master&rsquo;s degree in Cybersecurity, Information Assurance, or related field.
 </li>
 <li>
 Professional certifications such as: CISSP, CISM, CCSP, CAP, GDSA, GCCC.
 </li>
 <li>
 Zero Trust&ndash;related certifications (e.g., NIST ZTA training, Microsoft SC-100, vendor-specific ZTNA certifications).
 </li>
 </ul>
 
 
 
 
 
 Required Skills
 
 
 
 
 
 <ul>
 <li>
 Well-rounded senior security expert with both architectural and assurance expertise.
 </li>
 <li>
 Influential communicator who can bridge technical, compliance, and legal perspectives.
 </li>
 <li>
 Calm under pressure, especially in high-visibility incident situations.
 </li>
 <li>
 Forward-looking, with the ability to integrate Zero Trust and modern security approaches into HPC environments.
 </li>
 <li>
 Strategic problem-solver who balances security, performance, and mission-critical research needs.
 </li>
 <li>
 SSP Program Management: Skilled at managing the end-to-end lifecycle of the System Security Plan, ensuring accuracy, execution, and accountability across multiple teams.
 </li>
 <li>
 Control Assurance: Ability to track, validate, and report on implementation of security controls, including evidence collection and POA&amp;M management.
 </li>
 <li>
 Cross-Team Coordination: Effective at driving accountability across IT, HPC, cybersecurity, research, legal, and compliance teams without direct authority.
 </li>
 <li>
 Security Architecture Expertise: Strong knowledge of Zero Trust Architecture, encryption, network segmentation, and identity/access management.
 </li>
 <li>
 Governance and Compliance Knowledge: Deep understanding of NIST SP 800-53, NIST RMF, ISO 27001, FISMA/FedRAMP, and export control requirements.
 </li>
 <li>
 Technical Competence in HPC: Familiarity with Linux/Unix and Windows environments, HPC architecture, and research computing infrastructures.
 </li>
 <li>
 Risk and Incident Management: Skilled in risk assessment, incident response coordination, and integrating lessons learned into continuous monitoring.
 </li>
 <li>
 Executive Communication: Ability to provide clear, concise updates and recommendations to steering committees, auditors, and authorizing officials.
 </li>
 </ul>
</div>

Information System Security Principal

Tap Payments

<div>About Tap
Tap Payments is revolutionizing online payments across the MENA region by connecting businesses with simple, unified payment experiences. We need exceptional talent to help us on this journey. 
The Cybersecurity Team 
Do you get all excited when you hear terms like vulnerability assessment, penetration tests, security verification processes, or intrusion detection? If so, you are in the right place. Our Cybersecurity Team spends every waking (and sleeping) minute detecting security threats before they happen. Join the band and help us build ultra-secure payments technology for our customers. 
 
As a Tapster you will:<ul>
<li>
 Take ownership of cybersecurity programs related to security policies, vendor risk and compliance management, regulatory audits and compliance management, metrics, risk and performance indicators, management reporting, security awareness and training</li>
<li>Be responsible for the development of security risk management using continuous self-assessments and executive reporting</li>
<li>Ensure that robust information security programs and strategies are developed and maintained for compliance with the organisation's information security policies, applicable laws, regulatory requirements and best practices.</li>
<li>Develop and maintain the information security strategy for the organisation and ensure alignment with the enterprise strategy and goals through robust risk management of IT business.</li>
<li>Coordinate the activities of the CyberSecurity Steering Committee and ensure that the activities and decisions of the committee are documented, implemented and monitored for compliance.</li>
<li>Monitor projects (change initiatives) to identify and fix security gaps as well as improve system availability and usability.</li>
<li>Work closely with business partners to understand business drivers and market requirements and provide leadership to the technology group in order to create the required protection for the solutions in the required timeframes.</li>
<li>Coordinate the development, maintenance and monitoring of security policies and procedures across the organisation while ensuring that such policies conform to regulatory standards and other relevant information security frameworks such as the SAMA Cybersecurity Framework, NCA, NIST (National Institute of Standards and Technology), COBIT (Control Objectives for Information and Related Technologies), and ISO/IEC 27K series.</li>
<li>Carry out other duties, as assigned based on the demands of the business and growth of the role.</li></ul> 
What you will bring to the party:<ul>
<li>
 6-8 years experience in leading a cybersecurity or similar function</li>
<li>Degree in Engineering or Computer Science</li>
<li>Certification in CISSP, CISM, CISA, OSCP, CEH, and/or other technical certifications</li>
<li>Track record of leading distributed teams and leading delivery of complex, multi-faceted technology assessment and compliance initiatives</li>
<li>Experience managing large cybersecurity teams with a global presence</li>
<li>Deep experience in understanding regulatory and industry standards such as PCI, SOX 404, GLBA ISO standards, FFIEC exams, NIST framework, SSAE, etc</li>
<li>Hands-on leadership experience in authoring security policies, developing standards, and deploying GRC solutions to effectively manage and measure on the cyber risk posture</li>
<li>Technical ability to understand and solve complex cybersecurity challenges, with a track record of leading the delivery of complex, multi-faceted technology initiatives</li>
<li>Excellent written and verbal communication skills, having worked with executive management</li>
<li>Experience in presenting security risks to non-technical executives</li>
<li>Attested ability to establish and sustain effective, professional relationships with product and business managers; work closely with business partners to understand business drivers and market requirements; and provide leadership to the technology group in order to create the required protection for the solutions in the required time frames.</li>
<li>High degree of technical complexity and conservancy and familiarity with complex global information security infrastructures</li>
<li>Experience with a wide array of security platforms, protocols, tools, and technologies.</li>
<li>Knowledge of/experience with international compliance requirements/standards</li>
<li>Fluency in spoken and written English is essential, Arabic is a plus</li></ul> 
 
Are you ready to shape the future of payments in MENA?</div>

Head, Cybersecurity

OnIT

<div><h2 class="jobSectionHeader">About Onit</h2><h2 class="jobSectionHeader">
We're redefining the future of legal operations through the power of AI. Our cutting-edge platform streamlines enterprise legal management, matter management, spend management and contract lifecycle processes, transforming manual workflows into intelligent, automated solutions.</h2><h2 class="jobSectionHeader">
We&rsquo;re a team of innovators using AI at the core to help legal departments become faster, smarter, and more strategic. As we continue to grow and expand the capabilities of our new AI-centric platform, we&rsquo;re looking for bold thinkers and builders who are excited to shape the next chapter of legal tech.</h2><h2 class="jobSectionHeader">
If you're energized by meaningful work, love solving complex problems, and want to help modernize how legal teams operate, we&rsquo;d love to meet you.</h2><h2 class="jobSectionHeader">
Position Summary</h2>
Onit is seeking a Technical Program Manager to lead the delivery of world-class security and compliance solutions across our SaaS platforms. This role will collaborate closely with Security &amp; Compliance, Infrastructure, and Product teams to drive initiatives that ensure our systems and services meet the highest standards of security and regulatory compliance 
 
Key Responsibilities<ul><li>
Project Leadership: Drive cross-functional initiatives to deliver security and compliance solutions, including resource planning, timeline management, and coordination with external vendors.</li><li>
Remediation Tracking: Monitor and manage remediation efforts across applications and infrastructure for issues identified via scans, assessments, and customer feedback.</li><li>
Managed Security and Compliance BAU activities: Manage and track the execution of key security and compliance such as access reviews, WAF reviews, and other quarterly and yearly BAU activities required by our security and compliance certifications and customer contracts.</li><li>
Security Champion Program: Facilitate the rollout and adoption of the program across teams to level up security knowledge for security champions, increase security visibility with tooling, and other key practices.</li><li>
Vanta Adoption and Implementation: Oversee the continued adoption and integration of Vanta for automated compliance monitoring.</li><li>
Vendor Management: Support selection, onboarding, and coordination of vendors for penetration testing, audits, and other security services.</li><li>
Security Reviews: Facilitate and participate in technical discussions and evaluate system designs for security strengths and weaknesses.</li><li>
Product Ownership: Act as product owner for security and compliance initiatives. This includes creating user stories, prioritizing work, and guiding teams through grooming and delivery.</li><li>
Global Collaboration: Work with teams across India, the U.S., and other regions to define, design, and deliver secure SaaS solutions.</li><li>
Process Improvements: Assist with process improvements with incident response, training, runbook definition, and other key areas of the security and compliance program.</li><li>
Security and Compliance Reporting: Maintain, track and report key performance indicators/metrics for various activities in security and compliance.</li><li>
Documentation and Training: Assist with documenting key practices within the security and compliance function to improve visibility and adoption</li></ul>
<h2 class="jobSectionHeader">
Required Skills</h2><ul><li>
10+ years in technical project management or similar leadership roles.</li><li>
5+ years in security and compliance domains.</li><li>
Strong technical background in the cybersecurity domain which includes experience with security tooling, vulnerability management, 3rd party penetration testing, incident response, thread detection, etc.</li><li>
Proven track record executing security and compliance projects for Enterprise SaaS solutions.</li><li>
Extensive experience managing the security of cloud-based applications (AWS preferred)</li><li>
Ability to navigate trade-offs and prioritize across multiple teams.</li><li>
Proficiency in agile methodologies and tools (e.g., Jira, Scrum, Kanban).</li><li>
Experience with security and compliance frameworks such as SOC2, NIST, and ISO 27001.</li><li>
Strong communication, problem-solving, and collaboration skills.</li><li>
Experience with EDR, CSPM, and SEIM security tooling</li><li>
Relevant certifications (CISSP, CCSP, CISM, AWS Security Specialty) are a plus</li><li>
Regulatory, compliance, or legal experience is a plus</li><li>
Experience with containerized applications is a plus</li></ul>
hjdhmUSf5U</div>

Technical Program Manager – Security & Compliance

Information Technology Senior Management Forum

<div><div>Posted Date
11/10/2025
</div><div>Description
<div>Director, Integration Program Planning - ES Risk
The Enterprise Services Risk organization is expanding with a focus on attracting innovative, pioneering, collaborative, and highly skilled professionals. We operate at the forefront of risk management, providing support for novel and developing technologies, as well as critical business strategies. Diverse perspectives and experiences are valued as we work to redefine the financial sector.
As a Director of our Integration Program Planning team, you will lead and oversee Integration efforts for a large scale company merger. This role will be responsible for driving cross functional alignment across multiple lines of business and key partners, managing complex workstreams, mitigating risk, and ensuring successful post merger integration across people, process and technology. This is an exciting opportunity for a well-rounded candidate to help boldly model the future of Capital One.
As part of the Enterprise Services Risk Integration Program Planning team, you will demonstrate a unique blend of analytical and communications skills. You will lead horizontal strategy and problem solving across the Integration program, including creating updates for senior executives. You will identify dependencies, key decisions, and strategic questions to be answered across business, technology, and other key partners. You will also drive the design of an integrated program, leading through influence to ensure the team meets our fast-paced deadlines while bringing the broader organization along.
In this role, you will:<ul><li>
Lead the end-to-end planning and delivery of an integration program; providing clarity, structured problem solving, and results driven execution</li><li>
Establish and manage program governance structure, interaction model, operating cadence, and executive reporting</li><li>
Translate and communicate complex information into clear, actionable insights for stakeholders at all levels, providing regular updates and progress dashboards</li><li>
Assist and drive project and program delivery, including project and process management, reporting, engagement in senior leadership meetings, and drafting and reviewing materials for senior management</li><li>
Monitor and manage key integration risks, issues, and interdependencies</li><li>
Manage and synthesize input from multiple directions and drive organized execution</li><li>
Be a trusted advisor and drive effective and relevant business, technology, and cyber risk conversations to execute program delivery</li><li>
Support direction, manage expectations, and lead cross-functional teams through various initiatives, including oversight of third party resources</li><li>
Display an intense focus on achieving both short and long term goals; drive and execute an agenda in an uncertain and fluid environment</li><li>
Participate in risk and other management forums and contribute to continuous improvement of risk and program management practices</li><li>
Support interactions with Internal Audit and Regulatory agencies related to our work, as applicable</li></ul>
Basic Qualifications:<ul><li>
High School Diploma, GED or Equivalent Certification</li><li>
At least 7 years of experience in project, process, or program management</li><li>
At least 7 years of experience supporting, partnering, and interacting with internal business clients</li></ul>
Preferred Qualifications<ul><li>
Bachelor's Degree or Military Experience</li><li>
At least 10 years of experience in Cybersecurity, Technology, Risk Management or External Audit, or a combination</li><li>
At least 10 years of experience in project, process, or program management</li><li>
At least 3 years of experience delivering large and complex programs, where you own the business or technical vision, collaborate with large cross-functional teams, secure commitments on deliverables and unblock teams to land business impact</li><li>
At least 3 years of Financial Services industry experience, including familiarity with regulatory practices</li><li>
At least 7 years of experience consulting with senior executives or strategy building</li><li>
At least 4 years of People Management experience</li><li>
Consulting experience with a Big 4 firm</li><li>
Excellent verbal presentation and written communication skills to confidently interact at all levels of the organization (e.g., technology, cyber organizations, enterprise business stakeholders, and executive leadership)</li><li>
Excellent problem-solving, analytical, and critical thinking skills to effectively respond to shifting priorities, demands and timelines</li><li>
Strong relationship building skills, customer focus, and ability to collaborate and influence across teams to deliver</li><li>
Ability to set direction, delegate tasks, manage multiple stakeholder expectations, and coordinate a cross-functional team</li><li>
Cybersecurity and technology risk and/or project management certifications such as Certified Information Systems Security Professional (CISSP), Certified Information Security Manager (CISM), AWS Security certification, Certified Information Systems Auditor (CISA), Certified in Risk and Information Systems Control (CRISC), Project Management Professional (PMP) Certification, or Masters Certificate of Project Management (CPM) or related certifications</li></ul>
At this time, Capital One will not sponsor a new applicant for employment authorization for this position.
The minimum and maximum full-time annual salaries for this role are listed below, by location. Please note that this salary information is solely for candidates hired to perform work within one of these locations, and refers to the amount Capital One is willing to pay at the time of this posting. Salaries for part-time roles will be prorated based upon the agreed upon number of hours to be regularly worked.
Chicago, IL: $181,800 - $207,500 for Director, Project Management 

McLean, VA: $200,100 - $228,400 for Director, Project Management 

New York, NY: $218,300 - $249,100 for Director, Project Management 

Richmond, VA: $181,800 - $207,500 for Director, Project Management 
Candidates hired to work in other locations will be subject to the pay range associated with that location, and the actual annualized salary amount offered to any candidate at the time of hire will be reflected solely in the candidate&rsquo;s offer letter.
This role is also eligible to earn performance based incentive compensation, which may include cash bonus(es) and/or long term incentives (LTI). Incentives could be discretionary or non discretionary depending on the plan.
Capital One offers a comprehensive, competitive, and inclusive set of health, financial and other benefits that support your total well-being. Learn more at the Capital One Careers website. Eligibility varies based on full or part-time status, exempt or non-exempt status, and management level.
This role is expected to accept applications for a minimum of 5 business days.No agencies please. Capital One is an equal opportunity employer (EOE, including disability/vet) committed to non-discrimination in compliance with applicable federal, state, and local laws. Capital One promotes a drug-free workplace. Capital One will consider for employment qualified applicants with a criminal history in a manner consistent with the requirements of applicable laws regarding criminal background inquiries, including, to the extent applicable, Article 23-A of the New York Correction Law; San Francisco, California Police Code Article 49, Sections 4901-4920; New York City&rsquo;s Fair Chance Act; Philadelphia&rsquo;s Fair Criminal Records Screening Act; and other applicable federal, state, and local laws and regulations regarding criminal background inquiries.
If you have visited our website in search of information on employment opportunities or to apply for a position, and you require an accommodation, please contact Capital One Recruiting at 1-800-304-9102 or via email at RecruitingAccommodation@capitalone.com. All information you provide will be kept confidential and will be used only to the extent required to provide needed reasonable accommodations.
For technical support or questions about Capital One's recruiting process, please send an email to Careers@capitalone.com
Capital One does not provide, endorse nor guarantee and is not liable for third-party products, services, educational tools or other information available through this site.
Capital One Financial is made up of several different entities. Please note that any position posted in Canada is for Capital One Canada, any position posted in the United Kingdom is for Capital One Europe and any position posted in the Philippines is for Capital One Philippines Service Corp. (COPSSC).
Director, Integration Program Planning - ES Risk
The Enterprise Services Risk organization is expanding with a focus on attracting innovative, pioneering, collaborative, and highly skilled professionals. We operate at the forefront of risk management, providing support for novel and developing technologies, as well as critical business strategies. Diverse perspectives and experiences are valued as we work to redefine the financial sector.
As a Director of our Integration Program Planning team, you will lead and oversee Integration efforts for a large scale company merger. This role will be responsible for driving cross functional alignment across multiple lines of business and key partners, managing complex workstreams, mitigating risk, and ensuring successful post merger integration across people, process and technology. This is an exciting opportunity for a well-rounded candidate to help boldly model the future of Capital One.
As part of the Enterprise Services Risk Integration Program Planning team, you will demonstrate a unique blend of analytical and communications skills. You will lead horizontal strategy and problem solving across the Integration program, including creating updates for senior executives. You will identify dependencies, key decisions, and strategic questions to be answered across business, technology, and other key partners. You will also drive the design of an integrated program, leading through influence to ensure the team meets our fast-paced deadlines while bringing the broader organization along.
In this role, you will:<ul><li>
Lead the end-to-end planning and delivery of an integration program; providing clarity, structured problem solving, and results driven execution</li><li>
Establish and manage program governance structure, interaction model, operating cadence, and executive reporting</li><li>
Translate and communicate complex information into clear, actionable insights for stakeholders at all levels, providing regular updates and progress dashboards</li><li>
Assist and drive project and program delivery, including project and process management, reporting, engagement in senior leadership meetings, and drafting and reviewing materials for senior management</li><li>
Monitor and manage key integration risks, issues, and interdependencies</li><li>
Manage and synthesize input from multiple directions and drive organized execution</li><li>
Be a trusted advisor and drive effective and relevant business, technology, and cyber risk conversations to execute program delivery</li><li>
Support direction, manage expectations, and lead cross-functional teams through various initiatives, including oversight of third party resources</li><li>
Display an intense focus on achieving both short and long term goals; drive and execute an agenda in an uncertain and fluid environment</li><li>
Participate in risk and other management forums and contribute to continuous improvement of risk and program management practices</li><li>
Support interactions with Internal Audit and Regulatory agencies related to our work, as applicable</li></ul>
Basic Qualifications:<ul><li>
High School Diploma, GED or Equivalent Certification</li><li>
At least 7 years of experience in project, process, or program management</li><li>
At least 7 years of experience supporting, partnering, and interacting with internal business clients</li></ul>
Preferred Qualifications<ul><li>
Bachelor's Degree or Military Experience</li><li>
At least 10 years of experience in Cybersecurity, Technology, Risk Management or External Audit, or a combination</li><li>
At least 10 years of experience in project, process, or program management</li><li>
At least 3 years of experience delivering large and complex programs, where you own the business or technical vision, collaborate with large cross-functional teams, secure commitments on deliverables and unblock teams to land business impact</li><li>
At least 3 years of Financial Services industry experience, including familiarity with regulatory practices</li><li>
At least 7 years of experience consulting with senior executives or strategy building</li><li>
At least 4 years of People Management experience</li><li>
Consulting experience with a Big 4 firm</li><li>
Excellent verbal presentation and written communication skills to confidently interact at all levels of the organization (e.g., technology, cyber organizations, enterprise business stakeholders, and executive leadership)</li><li>
Excellent problem-solving, analytical, and critical thinking skills to effectively respond to shifting priorities, demands and timelines</li><li>
Strong relationship building skills, customer focus, and ability to collaborate and influence across teams to deliver</li><li>
Ability to set direction, delegate tasks, manage multiple stakeholder expectations, and coordinate a cross-functional team</li><li>
Cybersecurity and technology risk and/or project management certifications such as Certified Information Systems Security Professional (CISSP), Certified Information Security Manager (CISM), AWS Security certification, Certified Information Systems Auditor (CISA), Certified in Risk and Information Systems Control (CRISC), Project Management Professional (PMP) Certification, or Masters Certificate of Project Management (CPM) or related certifications</li></ul>
At this time, Capital One will not sponsor a new applicant for employment authorization for this position.
The minimum and maximum full-time annual salaries for this role are listed below, by location. Please note that this salary information is solely for candidates hired to perform work within one of these locations, and refers to the amount Capital One is willing to pay at the time of this posting. Salaries for part-time roles will be prorated based upon the agreed upon number of hours to be regularly worked.
Chicago, IL: $181,800 - $207,500 for Director, Project Management 

McLean, VA: $200,100 - $228,400 for Director, Project Management 

New York, NY: $218,300 - $249,100 for Director, Project Management 

Richmond, VA: $181,800 - $207,500 for Director, Project Management 
Candidates hired to work in other locations will be subject to the pay range associated with that location, and the actual annualized salary amount offered to any candidate at the time of hire will be reflected solely in the candidate&rsquo;s offer letter.
This role is also eligible to earn performance based incentive compensation, which may include cash bonus(es) and/or long term incentives (LTI). Incentives could be discretionary or non discretionary depending on the plan.
Capital One offers a comprehensive, competitive, and inclusive set of health, financial and other benefits that support your total well-being. Learn more at the Capital One Careers website. Eligibility varies based on full or part-time status, exempt or non-exempt status, and management level.
This role is expected to accept applications for a minimum of 5 business days.No agencies please. Capital One is an equal opportunity employer (EOE, including disability/vet) committed to non-discrimination in compliance with applicable federal, state, and local laws. Capital One promotes a drug-free workplace. Capital One will consider for employment qualified applicants with a criminal history in a manner consistent with the requirements of applicable laws regarding criminal background inquiries, including, to the extent applicable, Article 23-A of the New York Correction Law; San Francisco, California Police Code Article 49, Sections 4901-4920; New York City&rsquo;s Fair Chance Act; Philadelphia&rsquo;s Fair Criminal Records Screening Act; and other applicable federal, state, and local laws and regulations regarding criminal background inquiries.
If you have visited our website in search of information on employment opportunities or to apply for a position, and you require an accommodation, please contact Capital One Recruiting at 1-800-304-9102 or via email at RecruitingAccommodation@capitalone.com. All information you provide will be kept confidential and will be used only to the extent required to provide needed reasonable accommodations.
For technical support or questions about Capital One's recruiting process, please send an email to Careers@capitalone.com
Capital One does not provide, endorse nor guarantee and is not liable for third-party products, services, educational tools or other information available through this site.
Capital One Financial is made up of several different entities. Please note that any position posted in Canada is for Capital One Canada, any position posted in the United Kingdom is for Capital One Europe and any position posted in the Philippines is for Capital One Philippines Service Corp. (COPSSC).</div>
</div><div>Salary
181,800.00 - 207,500.00 Annual
</div><div></div><div><div>Type<div>
Full-time</div></div></div></div>

Director, Integration Program Planning - ES Risk

ALSTOM

<div>Req ID:501483 

At Alstom, we understand transport networks and what moves people. From high-speed trains, metros, monorails, and trams, to turnkey systems, services, infrastructure, signalling and digital mobility, we offer our diverse customers the broadest portfolio in the industry. Every day, more than 80 000 colleagues lead the way to greener and smarter mobility worldwide, connecting cities as we reduce carbon and replace cars. 


Your future role

&quot;Take on a new challenge and apply your cybersecurity architecture and engineering expertise in a new cutting-edge field. You&rsquo;ll work alongside collaborative and forward-thinking teammates. 
You'll play a pivotal role in ensuring the security and resilience of Alstom's solutions, protecting them against evolving cyberthreats. Day-to-day, you&rsquo;ll work closely with teams across the business (engineering, project management, and third-party vendors), conducting cybersecurity risk assessments, defining security requirements, and providing technical guidance to project teams, and much more.&quot;

We&rsquo;ll look to you for:
<ul>
<li>Understanding the solution to be delivered and secured. ,
</li>
<li>Designing and documenting reliable security architecture resilient against cyber threats (CADRA). ,
</li>
<li>Leading or contributing to cybersecurity risk assessments. ,
</li>
<li>Support and deploy cybersecurity knowledge and processes. ,
</li>
<li>Conducting cybersecurity evaluations of developed solutions. ,
</li>
<li>Managing third parties on cybersecurity aspects. ,
</li>
<li>Overseeing cybersecurity vulnerability management. ,
</li>
<li>Providing technical guidance and supervision for project/program teams. ,
</li>
<li>Supporting engineering teams to address design and technical challenges related to cybersecurity implementation. ,
</li>
<li>Acting as a key reference for management and third parties on cybersecurity architecture and technical implementation.</li> 
</ul>
 
All about you

We value passion and attitude over experience. That&rsquo;s why we don&rsquo;t expect you to have every single skill. Instead, we&rsquo;ve listed some that we think will help you succeed and grow in this role:
<ul>
<li>Degree in Computer Science, Cybersecurity, Information Technology, or a related field. ,
</li>
<li>Experience or understanding of cybersecurity risk assessment and management practices. ,
</li>
<li>Knowledge of cybersecurity architecture design and implementation. ,
</li>
<li>Familiarity with cybersecurity standards and frameworks (e.g., ISO 27001, NIST). ,
</li>
<li>Technical proficiency in the following field 
<ul><li>Architecture concepts and techniques of systems and networks, operating systems and associated programming languages.</li>
<li>Knowledge of the main techniques for evaluating systems security</li>
<li>Knowledge of tools of tools such as Wireshark, Nmap, OpenVAS, Nexpose, Metasploit, nessus, BURP</li>
</ul>
</li><li>Strong technical problem-solving skills with a focus on resilience and adaptability. ,
</li>
<li>Continuous learning mindset to stay updated on emerging cybersecurity threats and technologies.</li></ul> 

Things you&rsquo;ll enjoy

Join us on a life-long transformative journey &ndash; the rail industry is here to stay, so you can grow and develop new skills and experiences throughout your career. You&rsquo;ll also:
<ul>
<li>Collaborate with transverse teams and helpful colleagues ,
</li>
<li>Progress towards becoming a key contributor to Alstom&rsquo;s cybersecurity strategy and gaining recognition as a technical expert in the field ,
</li>
<li>Utilise our inclusive and collaborative working environment, designed to foster growth, resilience, and continuous learning&quot; ,
</li>
<li>Contribute to innovative projects,
</li>
<li>Benefit from a fair and dynamic reward package that recognises your performance and potential, plus comprehensive and competitive social coverage (life, medical, pension)</li></ul> 

You don&rsquo;t need to be a train enthusiast to thrive with us. We guarantee that when you step onto one of our trains with your friends or family, you&rsquo;ll be proud. If you&rsquo;re up for the challenge, we&rsquo;d love to hear from you! 

Important to note
As a global business, we&rsquo;re an equal-opportunity employer that celebrates diversity across the 63 countries we operate in. We&rsquo;re committed to creating an inclusive workplace for everyone. 

Job Type:Experienced 
 
Job Segment: Computer Science, Project Manager, Technology</div>

Cybersecurity Engineer

Search 10000+ Cybersecurity program manager jobs near you this November. New roles added regularly across leading industries. Apply today.