Capco
Financial Services
SeniorSecuritySpecialist
Neural analysis suggests this role is
optimal for Senior candidates.
“Senior Security Specialist at Capco. Skills: Cybersecurity transformation, Security consulting, Risk assessment, Cloud security. Lead cybersecurity transformation initiatives. Support cybersecurity transformation initiatives”
Industry & Context.
Structured problem-solving
What They're Looking For.
Must Have
5+ years experience in cybersecurity, 5+ years experience in security consulting, 5+ years experience in security engineering, 5+ years experience in security architecture, 5+ years experience in technology risk, 5+ years experience in IAM, 5+ years experience in cloud security, 5+ years experience in cyber transformation, Cybersecurity foundation, Experience delivering security initiatives, Experience supporting security initiatives, Depth in one or more cybersecurity domains, Experience working with security technologies, Experience working with security controls, Experience working with security platforms, Experience working with architects, Experience working with engineers, Experience working with delivery teams, Understanding of security control design, Understanding of risk reduction, Understanding of remediation planning, Understanding of secure technology delivery, Ability to translate technical concepts, Ability to develop security requirements, Ability to develop control requirements, Ability to develop roadmaps, Ability to develop maturity assessments, Ability to develop process flows, Ability to develop operating models, Ability to develop implementation plans, Consulting acumen, Client relationship management, Executive communication, Facilitation, Structured problem solving, Ability to influence stakeholders
Nice to Have
Previous consulting experience, Experience with Zero Trust, Experience with AI security, Experience with identity threat detection, Experience with attack path management, Experience with ransomware resilience, Experience with DevSecOps, Experience with cloud-native security, Experience with security automation, Experience with secure-by-design engineering, Experience with IAM, Experience with PAM, Experience with IGA, Experience with CIAM, Experience with authentication, Experience with access governance, Experience with identity lifecycle, Experience with secrets management, Experience with non-human identity, Experience with Azure, Experience with AWS, Experience with GCP, Experience with cloud identity, Experience with logging, Experience with monitoring, Experience with encryption, Experience with key management, Experience with secure landing zones, Experience with cloud control frameworks, Knowledge of NIST CSF, Knowledge of NIST 800-53, Knowledge of ISO 27001, Knowledge of CIS Controls, Knowledge of COBIT, Knowledge of PCI-DSS, Knowledge of SOC 2, Knowledge of OSFI guidance, Experience developing executive presentations, Experience developing security roadmaps, Experience developing target operating models, Experience developing maturity assessments, Experience developing business cases, Experience developing transformation plans, CISSP certification, CISM certification, CRISC certification, CISA certification, CCSP certification, CSSLP certification, GIAC certification, Security+ certification, Azure Security certification, AWS Security certification, IAM-related certifications
What You'll Do.
Lead cybersecurity transformation initiatives
Support cybersecurity transformation initiatives
Assess cybersecurity capabilities
Identify control gaps
Identify technology gaps
Define target-state recommendations
Work across security domains
Partner with security architects
Partner with security engineers
Partner with risk partners
Partner with product owners
Partner with business stakeholders
Define security requirements
Define delivery plans
Define implementation roadmaps
Translate requirements into roadmaps
Translate requirements into control designs
Translate requirements into process flows
Translate requirements into technical considerations
Translate requirements into implementation plans
Translate requirements into client deliverables
Apply cyber risk lens
Identify control gaps
Assess security impacts
Prioritize remediation
Align solutions to risk expectations
Facilitate stakeholder interviews
Facilitate technical working sessions
Facilitate executive discussions
Support cyber capability uplift
Develop client-ready materials
Contribute to Capco cyber offerings
Contribute to thought leadership
Contribute to delivery assets
Contribute to practice capability
How You'll Work.
Team & Collaboration
Security architects; Security engineers; Risk partners; Product owners; Business stakeholders; Technical teams; Non-technical audiences
Communication Scope
Executive messaging; Client-ready deliverables; Executive presentations
Process & Methodology
Roadmap planning, Implementation plans
Full Job Description
Help leading organizations transform cybersecurity from strategy into execution. The Role Capco is expanding its cybersecurity practice to support a range of projects across financial services, banking, insurance, capital markets, and other regulated industries. We are looking for Senior Cybersecurity Consultants who bring technical credibility, consulting acumen, and the ability to help clients move from security strategy to execution. Working closely with CISOs, security leaders, architects, engineers, product owners, risk partners, and business stakeholders, you will help assess cybersecurity capabilities, define practical recommendations, support secure technology delivery, and strengthen cyber programs across complex enterprise environments. This is not a purely policy, compliance, or documentation-focused role. Successful candidates will bring depth in one or more cybersecurity domains, the ability to engage technical teams, and the confidence to translate complex security challenges into clear recommendations, roadmaps, and delivery outcomes. What You’ll Do Lead and support cybersecurity transformation initiatives for leading financial services and enterprise clients Assess current-state cybersecurity capabilities, identify control and technology gaps, and define practical target-state recommendations Work across key security domains including IAM, Zero Trust, cloud security, data protection, application security, vulnerability management, security operations, third-party cyber risk, and cyber resilience Partner with security architects, engineers, risk partners, product owners, and business stakeholders to define security requirements, delivery plans, and implementation roadmaps Translate cybersecurity requirements into actionable roadmaps, control designs, process flows, technical considerations, implementation plans, and client-ready deliverables Apply a cyber risk lens to technical security decisions by identifying control gaps, assessing security impacts
Applying for this Senior Security Specialist role?
Most applicants get filtered before a human reads their resume. See if yours makes the cut.
How to Apply on Greenhouse
- Create a Greenhouse profile before applying — it saves time across multiple applications.
- Upload your resume as a PDF; the parser handles it better than Word.
- Answer all knockout questions carefully — wrong answers auto-reject before a human sees you.
- Enable email notifications to track application status in real time.
ANONYMOUS · UNFILTERED
What do employees actually say about Capco?
Real rants from real employees. Read before you apply.