Manager, Risk Assessment Services, Cyber and Tech Business Unit and Division Risk Assessments - Enterprise Services Risk

Capital One • Richmond, VA

132d • $144,000 - $197,200

About The Position

Capital One is a diversified bank that offers a broad array of financial products and services to consumers, small business and commercial clients. As one of the nation's top 10 banks, we offer a broad spectrum of financial products and services to consumers, small businesses and commercial clients. We nurture a work environment where people with a variety of thoughts, ideas and backgrounds, guided by our shared values, come together to make Capital One a great company and a great place to work. We are hiring! The Enterprise Services Risk organization is expanding with a focus on attracting innovative, pioneering, collaborative, and highly skilled professionals. We operate at the forefront of risk management, providing support for novel and developing technologies, as well as critical business strategies. Diverse perspectives and experiences are valued as we work to redefine the financial sector. As a Manager on the Risk Assessment Services team, you will support delivery of the Business Unit Risk and Control Self-Assessment (RCSAs) and Division Risk Identification for Cyber and Tech. You will be responsible for collaborating with tech and cyber partners to identify, evaluate, consult, and mitigate potential risks associated with technology/cyber areas across Enterprise Services. You will play a vital role in improving risk management assessment results and driving project/program delivery across Capital One.

Requirements

• High School Diploma, GED or Equivalent Certification.
• At least 4 years of experience in Risk Management, Process Management, Project Management, or a combination of these.
• At least 4 years of experience in information security or technology risk management.
• At least 4 years of experience supporting, partnering, and interacting with internal business clients.
• At least 2 years of experience developing, evaluating, or implementing technology, information security controls or performing risk assessments.

Nice To Haves

• Bachelor's Degree or Military Experience.
• Risk Certifications (CRISC, CISM, CRCM, CIPP, ABA Risk Management Certification).
• At least 5 years of experience supporting, partnering and interacting with internal stakeholders.
• At least 7 years of experience in information security or technology risk management.
• At least 5 years of project management experience leading cross functional projects and programs.
• At least 4 years of experience with analysis of information security or technology threats and risks.
• At least 2 years of risk or information security experience in the financial services industry.

Responsibilities

• Spearhead and support delivery of Business Unit Risk and Control Self-Assessment and Division Risk Identification, including project and process management, reporting, and crafting materials for senior management.
• Move the needle on key tech and cyber risks by ensuring appropriate risk scope, grounding risk ratings, improving control ratings, and mitigation decisioning/plans.
• Participate in senior leadership meetings and other governance activities.
• Clearly and concisely communicate complex technical concepts, both verbally and in writing, to stakeholders with varying levels of expertise.
• Partner and coordinate work with ESR Tech and Cyber Risk Guides, Technology and Cyber teams, Lines of Business, and second line of defense risk management teams to ensure successful collaboration.
• Serve as a trusted advisor, guiding relevant and impactful Tech and Cyber risk discussions.
• Collaborate and provide guidance and direction for enterprise risk management activities.
• Analyze data to identify and report on risks, trends, and areas for process improvement to management.
• Stay informed about emerging cyber and tech threats and their potential impact on the company.
• Stay informed about the evolving regulatory environment and its effects on our work.
• Participate in risk and other management forums to contribute to the ongoing improvement of risk and project/program management practices.
• Collaborate and respond to inquiries from Internal Audit and Regulatory agencies regarding our work, as necessary.

Benefits

• Comprehensive, competitive, and inclusive set of health, financial and other benefits that support your total well-being.
• Performance based incentive compensation, which may include cash bonus(es) and/or long term incentives (LTI).

What This Job Offers

• Job Type: Full-time
• Industry: Credit Intermediation and Related Activities
• Education Level: High school or GED