Enterprise Cyber Exercises Lead

About this role

Enterprise Cyber Exercises Lead

Capital One is seeking an experienced Cyber Exercise Practitioner to own the end-to-end design, coordination, execution, and evaluation of cyber exercises and postmortem services. This role is built for a practitioner who has earned their craft, someone who can independently lead high-stakes engagements across the full exercise lifecycle while contributing to the continuous maturation of the Enterprise Cyber Exercise Program.

  The successful candidate will serve as a core member of the Enterprise Cyber Exercise Program (ECEP) team, taking full ownership of customer relationships and delivery quality across a portfolio of discussion and operations-based exercises, as well as Cyber Event Postmortem reviews. While their work will equip cyber responders, it will equally focus on partnering with our Lines of Business (LOBs) to simulate, analyze, and solve complex business problems that extend far beyond traditional security operations. By bridging the gap between technical threats and business strategy, they will directly strengthen Capital One’s operational resilience and safeguard our core business functions.They will be expected to work fluidly across team roles, leading their own engagements, supporting peer exercise leads, and stepping into delivery support functions as needed, bringing a one-team mentality that prioritizes program success over individual lanes.

  Key Responsibilities: • Own the full end-to-end delivery of the cyber exercise lifecycle, from initial customer engagement and scoping through planning, execution, and after-action reporting, with minimal delivery support.

• Lead end-to-end delivery of Cyber Event Postmortems by guiding responders through lessons learned discussions following real-world events and producing formal reporting identifying key strengths and opportunities to continually mature how Capital One approaches cyber response.

• Build and maintain independent customer relationships across Cyber, Tech, Risk, and Business stakeholders by managing expectations, driving alignment, and sustaining engagement throughout the delivery lifecycle.

• Design and facilitate discussion-based exercises (tabletops, seminars, workshops) and support operations-based exercises across a range of audience levels, including senior leadership and cross-functional executive teams.

• Contribute to the team the same way the team contributes to you by providing note-taking, documentation, exercise control, and delivery support on peer-led engagements, ensuring every exercise on the program is resourced to succeed.

• Mentor junior associates and contract support through the exercise design and delivery process, helping build team capacity and sustain program quality standards.

• Contribute to program strategy and roadmap discussions through bringing practitioner-level insight into scoping decisions, methodology improvements, and prioritization conversations.

• Apply emerging AI tools and automation approaches to exercise design, inject development, scenario research, and post-exercise analysis to improve team efficiency and output quality.

• Stay current on emerging cyber threats, regulatory reporting requirements across the organizational footprint, and exercise methodology trends to ensure Capital One's exercises remain rigorous and relevant.  

Basic Qualifications: • High School Diploma or GED

• At least 4 years of experience in cyber exercise design and facilitation

• At least 4 years of experience in Cyber Operations, Governance and Risk, or Technology Risk Management within the financial services industry

• At least 3 years of experience facilitating discussion-based tabletop exercises

• At least 3 years of experience coordinating exercise activities with technical cybersecurity teams AND business line stakeholders

• At least 3 years of experience managing client engagement lifecycles from initial scoping through after-action reporting

• At least 2 years of experience analyzing exercise results to identify cyber control gaps and operational risk vulnerabilities

• At least 2 years of experience authoring cyber exercise after-action reports and executive briefings

• At least 1 year of experience applying Homeland Security Exercise and Evaluation Program (HSEEP), NIST Cybersecurity Framework (NIST CSF), OR MITRE ATT&CK frameworks  

Preferred Qualifications: • Bachelor's Degree in Cybersecurity, Information Technology, or Risk Management

• 8+ years of experience in cyber exercise design and facilitation, including operations-based exercises, functional experiments, or full-scale simulations

• 5+ years of experience delivering exercises to executive, VP+, or board-level audiences

• 5+ years of experience briefing C-suite or executive stakeholders on technical cybersecurity risks

• 5+ years of experience leading or supporting cyber event postmortem programs OR structured lessons learned processes

• Working knowledge of AI tools and their application to exercise design, scenario development, or program operations

• Active industry certifications including CISSP, CISM, CRISC, CBCP, or HSEEP

At this time, Capital One will not sponsor a new applicant for employment authorization, or offer any immigration related support for this position (i.e. H1B, F-1 OPT, F-1 STEM OPT, F-1 CPT, J-1, TN, or another type of work authorization).

The minimum and maximum full-time annual salaries for this role are listed below, by location. Please note that this salary information is solely for candidates hired to perform work within one of these locations, and refers to the amount Capital One is willing to pay at the time of this posting. Salaries for part-time roles will be prorated based upon the agreed upon number of hours to be regularly worked.

McLean, VA: $164,800 - $188,100 for Manager, Cyber Risk & Analysis   Plano, TX: $149,800 - $171,000 for Manager, Cyber Risk & Analysis   Richmond, VA: $149,800 - $171,000 for Manager, Cyber Risk & Ana

Similar jobs

• Cyber Exercise Planner Associate — Morgan Stanley · Baltimore, Maryland, United States
• Cyber Operations Lead — Accenturefederalservices · Arlington, VA
• Lead Cyber Effects Joint Operations Planner — Accenturefederalservices · Fort Meade, MD
• Senior Cyber Effects Engineer — Draper · Cambridge, MA | Reston, VA
• Lead Cyber Joint Operations Planner — Accenturefederalservices · Fort Meade, MD
• Cyber Effects Operations Planner — Accenturefederalservices · Fort Meade, MD
• Space Cybersecurity Engineering Lead — The Aerospace Corporation · Los Angeles AFB, CA
• Senior Cyber Engineer — The Aerospace Corporation · Colorado Springs, CO | El Segundo, CA