Top Cybersecurity Jobs in Chicago, IL

Leads Capital One’s third-party cyber and technology risk management team. Responsibilities include improving vendor risk lifecycle processes, advising executives, assessing contracting, operational, information security, and resilience risks, analyzing risk data, ensuring policy compliance, tracking remediation, managing projects, and driving automation and process improvements. The role requires extensive risk management, information technology, third-party risk, cyber or information security, and people leadership experience.

Leads enterprise controls lifecycle management and governance for cyber and technology risk. Oversees control design assessments, data quality metrics, regulatory and audit responses, risk professional teams, automation initiatives, and program delivery. Partners across first- and second-line risk functions to maintain compliant, accurate, and effective controls, while preparing senior leadership and Board reporting.

Leads cybersecurity product strategy and outcome-driven roadmaps for enterprise network security services. Evaluates threats, risks, vendors, and build-versus-buy options; translates security objectives into product requirements, epics, and acceptance criteria; and partners with engineering, operations, executives, and stakeholders to deliver scalable solutions. Establishes metrics, influences strategic decisions, manages cybersecurity projects, and mentors team members.

Lead a team of data science and risk professionals to analyze high-volume transaction data, develop and deploy predictive fraud models and strategies, collaborate with internal and external stakeholders, and continuously improve data extraction and modeling processes to detect and block fraudulent transactions while minimizing false positives.

Lead product strategy and roadmap for an enterprise Secure Foundations platform to automate container and artifact vulnerability detection and remediation. Partner with engineering, cybersecurity, and risk to transform reactive vulnerability management into proactive, automated workflows, measure impact on developer productivity, and drive enterprise adoption and continuous improvement.