Manager, Tech and Product Risk - Enterprise Services Risk

Capital One • New York, NY

29d • $144,000 - $197,200

About The Position

The Enterprise Services Risk organization is expanding with a focus on attracting innovative, pioneering, collaborative, and highly skilled professionals. We operate at the forefront of risk management, providing support for novel and developing technologies, as well as critical business strategies. Diverse perspectives and experiences are valued as we work to redefine the financial sector. As a Manager in Capital One's Technology and Product Risk Office, you will apply your risk management, cyber and technical expertise to the company's Cyber Organization. Our team serves as the first line of defense to help ensure our Company remains well-managed and avoids unnecessary risk. In this position, you will play a key role in enhancing our risk management processes and cyber risk profile across Capital One. Your contributions will drive organizational and strategic change through risk identification, measurement, analysis, and reporting in order to better manage the company's risk in an open and collaborative environment. In this role, you will: Support assessments of cybersecurity risk management practices across Capital One Collaborate with stakeholders in Cyber Governance and Risk to draft, manage, and validate risk objects from their inception to their closure Consult with teams on incremental program enhancements to improve the maturity and effectiveness of cybersecurity risk management processes within the organization Support the execution of risk assessment and risk management processes like Process Level Assessments (PLA), LAUNCH initiatives, and Material Technology and Cybersecurity Changes (MTC) / Targeted Risk Assessments (TRA) Partner with cross-functional teams to evaluate cybersecurity scanning tools to determine their effectiveness Conduct periodic risk reviews with stakeholders and support reporting for and/or changes to risk metrics Collaborate with cross-functional teams to address regulatory responses and action as needed Serve as a trusted advisor to stakeholders in the Cyber organization for risk management best practices and enterprise risk management processes

Requirements

• High School Diploma, GED or Equivalent Certification
• At least 4 years of experience in Cybersecurity, Technology, Risk Management, External Audit, or a combination of these
• At least 4 years of experience in Process Management, Project Management, or a combination of these

Nice To Haves

• Bachelor's Degree or Military Experience
• Excellent verbal presentation and written communication skills to confidently interact with and lead meetings at all levels
• At least 5 years of experience in Cybersecurity, Technology, Risk Management, External Audit, or a combination of these
• At least 5 years of experience in Process Management, Project Management, or a combination of these
• Problem-solving, analytical and critical thinking skills to effectively respond to shifting priorities, demands and timelines
• Risk Certifications (CRISC, CISM, CRCM, CIPP, ABA Risk Mgmt Certification)

Responsibilities

• Support assessments of cybersecurity risk management practices across Capital One
• Collaborate with stakeholders in Cyber Governance and Risk to draft, manage, and validate risk objects from their inception to their closure
• Consult with teams on incremental program enhancements to improve the maturity and effectiveness of cybersecurity risk management processes within the organization
• Support the execution of risk assessment and risk management processes like Process Level Assessments (PLA), LAUNCH initiatives, and Material Technology and Cybersecurity Changes (MTC) / Targeted Risk Assessments (TRA)
• Partner with cross-functional teams to evaluate cybersecurity scanning tools to determine their effectiveness
• Conduct periodic risk reviews with stakeholders and support reporting for and/or changes to risk metrics
• Collaborate with cross-functional teams to address regulatory responses and action as needed
• Serve as a trusted advisor to stakeholders in the Cyber organization for risk management best practices and enterprise risk management processes

What This Job Offers

• Job Type: Full-time
• Career Level: Manager
• Industry: Credit Intermediation and Related Activities
• Education Level: High school or GED
• Number of Employees: 5,001-10,000 employees