Cyber Engineer - ISO Assurance in Nottingham

About the Role

Capital One has committed to an innovative, cloud‑centric approach while prioritising cybersecurity and technology risk. As a Cyber Engineer – ISO Assurance, you will be an independent adviser to senior leaders, shaping decisions and overseeing cybersecurity and technology risk across the business and the central technology organisation. This position offers substantial growth opportunities and requires an expert who can work independently in a fast‑paced environment and contribute immediately.

What You'll Do

• Ensure consistency and develop data‑driven assurance practices that will facilitate deeper technical risk reviews to support strategic decision‑making for Cyber and Technology leadership.
• Take the lead in evaluating and recommending standardised risk scoping & scoring methods across Tech and Cyber domains, including Vulnerability Management, Data Security, and Network Security across the enterprise.
• Stand as the point of contact for ISO Assurance Team service offerings and assist with onboarding junior team members.
• Standardise the review of mitigating factors and controls to support risk management activities so that technology and business teams can prioritise risk reduction activities.
• Work cross‑functionally with Advisory, Assessment, and Risk Operations functions within the Information Security Office to measure cybersecurity and technology risk.
• Act as a key contributor to the Information Security Office leadership team on senior leader initiatives, providing insights and recommendations.
• Demonstrate a strong understanding of Capital One’s Information Security offerings, policies, procedures, and standards.
• Collaborate effectively with colleagues, stakeholders, and leaders across multiple organisations to achieve strategic objectives.
• Effectively communicate findings and recommendations across varying levels of leadership, with the ability to influence stakeholders.

What we’re looking for

• Experience working in cybersecurity or information technology.
• Experience providing guidance and oversight of cybersecurity concepts.
• Experience performing security risk assessments and security architecture reviews.
• Knowledge of Agile methodologies.
• Professional certifications such as AWS Cloud Practitioner, CompTIA Security+.

Where and how you'll work

This is a permanent position that will be based in our Nottingham Head Office. We have a hybrid working model: three days a week in the office (Tuesdays, Wednesdays, Thursdays) and remote work on Monday and Friday. Many associates have flexible working arrangements, and we are open to discussing an arrangement that works for you.

What’s in it for you

You'll be well rewarded with a role contributing to the roadmap of an organisation committed to transformation. High performers will receive strong and diverse career progression, with investment through Capital One University training programmes and appropriate external providers. Immediate access to core benefits including a pension scheme, bonus, generous holiday entitlement, and private medical insurance. Flexible benefits such as season‑ticket loans, cycle‑to‑work scheme, and enhanced parental leave are also available. Open‑plan workspaces and accessible facilities designed to inspire and support you. Our Nottingham head‑office offers a fully‑serviced gym, subsidised restaurant, mindfulness and music rooms.

What you should know about how we recruit

We partner with organisations including the Women in Finance and Race At Work Charters, Stonewall, and upReach to find people from every walk of life and help them thrive with us. Internal networks and support groups you could be involved in include:

• REACH – Race Equality and Culture Heritage group focuses on representation, retention, and engagement for associates from minority ethnic groups and allies.
• OutFront – provides LGBTQ+ support for all associates.
• Mind Your Mind – signposting support and promoting positive mental wellbeing for all.
• Women in Tech – promoting an inclusive environment in tech.
• EmpowHER – network of female associates and allies focusing on developing future leaders, particularly for female talent in our industry.

Capital One is committed to diversity in the workplace. If you require a reasonable adjustment, please contact ukrecruitment@capitalone.com. All information will be kept confidential and will only be used for the purpose of applying a reasonable adjustment.