Manager, Risk Program Management

Capital One•McLean, VA

About The Position

Technology & Data Risk Management (TDRM) is a small organization that packs a big punch. The ~200 professionals in TDRM are trusted experts who oversee ~14,000 developers at Capital One. We raise the bar for excellence in cybersecurity, reliability, tech risk, and data management risk. We shape strategy and decisions, challenge activities to ensure they meet our standards, and perform independent tests of our security and technology risk. For years, the cybersecurity community has debated whether the CISO should report to the CIO or not. In regulated financial services, the answer is: both. The first-line CISO has operational responsibilities and reports to the CIO. The second-line Chief Tech Risk Officer (CTRO) and the Tech & Data Risk Management (TDRM) organization have broader responsibilities for cybersecurity but also reliability, software quality, resilience, and the risk of failing to manage our data. The CTRO is independent and oversees the work of the CISO, the CIO/CTO, and the Chief Data Officer. The CTRO reports to the Chief Risk Officer, who reports directly to the CEO. Our business leaders must constantly make technology decisions. TDRM makes sure they have the tech and data risk information they need to make good decisions. Associates within TDRM are highly-skilled information security, cybersecurity, site reliability engineering, technology, data analyst, data scientist, and risk management professionals. They have a wealth of experience and a demonstrated ability to add value with their advice and to deliver high-impact results. As a Manager, Risk Program Management on TDRM’s Product, Risk Innovation Solutions, and Methodology (PRISM) team, you will coordinate large scale enterprise solutions and programs. Responsibilities include driving capacity planning, drafting / coordinating portfolio integration and maturation program plans, as well as creating and managing sequences for product releases. The successful candidate will champion better agile use across the team. This role will be responsible for developing tools/templates to help the team be more efficient in projecting and tracking their work, and leading the team to further levels of agile maturity. You’ll collaborate closely with senior leadership, and leverage your expertise in program management to drive transformative initiatives that propel Capital One’s technology risk management forward. Expect to oversee a complex portfolio of assessment, product release and reporting activities, foster a culture of continuous improvement and maturation, and play a pivotal role in shaping the future of well managed technology risk management within the organization. As a member of a growing organization, you are expected to shape and further refine the risk program, and will have the opportunity to operate with both autonomy and empowerment from senior leadership. The demands and high-visibility nature of this position require an expert with a proven ability to work independently in a fast-paced environment and who can begin contributing immediately.

Requirements

Deep focus on execution, follow-through, accountability, and results
Strong communication to stakeholders at all levels across the company to enable transparency and timely information sharing
Proven critical thinking skills, including and the ability to express a point of view supported by data
Comfort raising concerns early and knows when to escalate, including the ability to raise issues and facilitate constructive problem solving at all levels of the organization
Ability to collaborate effectively with colleagues, stakeholders, and leaders across multiple organizations to get consensus, socialize strategy, and achieve objectives
Personal resilience - the ability to stay optimistic and keep people focused during times of change
Willingness to learn and an intellectual curiosity to better understand technology risk management processes to identify areas for improvement
Experience creating customer focused solutions that tailor agile delivery methodologies versus purely applying textbook solutions
Adept at providing structure and organization in a complex environment
A Bachelor’s degree or military experience
At least 5 years of experience managing technical programs or consulting engagements

Nice To Haves

5+ years of experience with Agile delivery
4+ years experience delivering large and complex projects or managing operations
Experience in a technology, product or cybersecurity oversight function
Experience working in the financial services industry or a technology start-up
Experience with Governance, Risk, and Compliance (GRC) software tools
Scaled Agile Framework (SAFe) certification or experience
Project Management Professional (PMP) certification, or Lean 6 Sigma certification

Responsibilities

Building relationships, collaborating, and communicating directly with practice leads and senior leaders to manage the intake, prioritization and slotting of new work
Designing, developing, and managing capacity & demand views within a complex and dynamic environment - helping to create visibility for our work and surface dependencies
Partnering with agile teams to bring deeper analytics to planning and delivery
Partnering cross-functionally with team members and stakeholders to understand pain points and implement tailored process improvement solutions that address those pain points
Implementing, maintaining and providing key metrics that further inform the health of the portfolio and leadership decision making, including as the team’s champion for OKRs (Objectives and Key Results)
Streamline reporting against team objectives and KPIs (Key Performance Indicators) in monthly reports to senior leadership
Build and champion well-managed agile delivery practices that enable seamless flow/delivery of work, including reporting, tracking and status mechanisms
Partner with team members to ensure appropriate escalation when things are past due or there are obstacles, providing an early warning when things are off track
Establish a mechanism for operational continuous improvement (e.g., lessons learned)
Execute annual coverage planning analysis of the risk assessment portfolio with team leads
Lead a quarterly review of changes in risk factors that will drive prioritization decisions for the team