Manager, Tech Risk & Analysis

Capital One•McLean, VA

1d•$149,800 - $205,100

About The Position

Do you love navigating complex technology landscapes and safeguarding critical systems? Do you enjoy solving complex business problems in a fast-paced, collaborative, inclusive, and risk-conscious delivery environment? At Capital One, you'll be part of a big group of makers, breakers, doers and disruptors who love to solve real problems and meet real customer needs. We are seeking Tech Risk & Analysis Professionals who are passionate about cyber best practices, threat analysis, and risk mitigation to join our team. In this role, you’ll have the opportunity to be on the forefront of driving cybersecurity governance, resilience, and risk transformation across Capital One. The Enterprise Services Risk Operations (ESRO) organization is expanding with a focus on attracting innovative, pioneering, collaborative, and highly skilled professionals. We operate at the forefront of risk management, providing support for novel and developing technologies, as well as critical business strategies. Diverse perspectives and experiences are valued as we work to redefine the financial sector. As a Manager on the Process Risk Optimization (PRO) Team, you will be responsible for working with business partners to proactively identify and lead risk mitigation solutions for Capital One. We are the first line of defense to help ensure our Company remains well-managed and strengthens its risk posture. Our team delivers strategic, value-added, and risk-based analysis to drive executive leadership decision-making. Summary: Support process-based assessments to identify and evaluate risks across various Enterprise Services functional areas, such as cyber, cloud operations, network connectivity, enterprise product management, development, data management, resiliency, and third party functions Learn about Capital One’s internal operations as you develop subject matter expertise while collaborating with business partners to identify, assess, measure, monitor, control, and report process-level risks Lead stakeholder interactions, facilitating assessments and completing deliverables in a fast-paced environment, working across multiple teams to drive successful project outcomes

Requirements

Bachelor’s Degree or military experience
At least 5 years of experience in technology (software delivery, distributed systems, cloud-native architecture, infrastructure as code), cybersecurity (identity and access management, application security, cloud security, data protection), technology auditing, systems risk management, technology risk assessments, resilience engineering (operational resilience, business continuity, disaster recovery, high availability), chaos engineering (fault injection, blast radius mitigation, automated security validation), site reliability engineering (SLAs or SLOs, observability, incident response), or a combination

Nice To Haves

At least 1 year of Financial Services industry experience
Experience with regulatory practices (governance, risk, compliance, and information and network security), AWS cloud, machine learning and artificial intelligence data management, third party and contingent workforce, and incident response.
Process development, documentation, or improvement experience
Experience in controls development, controls management, and reporting activities
Holds one or more certifications in: any security, technology, or risk certifications (e.g., CompTIA Security+, CompTIA Tech+, Systems Security Certified Practitioner (SSCP), ISACA Certified in Risk and Information Systems Control (CRISC), Certified Information Systems Security Professional (CISSP), technology vendor certifications (e.g., AWS, Microsoft, Google))
Ability to communicate and influence clearly and to interact effectively at all levels of the organization
Ability to navigate a complex, dynamic organization and prioritize deliverables in an multi-national, expanding business environment
Excellent problem-solving, analytical and critical thinking skills to effectively respond to shifting priorities, demands and timelines

Responsibilities

Perform the role of a process management risk advisor and leverage subject matter knowledge and critical thinking to drive value during assessments to ultimately improve our processes and reduce risk for Enterprise Services lines of business
Research novel trends in an ever-changing regulatory environment, as well as internal process changes, to improve existing risks and identify emerging risks
Lead stakeholders in applying risk management principles in accordance with Enterprise frameworks
Research new and emerging areas of risk and the dynamic regulatory environment to understand impacts on process areas
Lead and support project and program delivery, execute deliverables in fast paced environment, and work across multiple workstreams
Prioritize simultaneous projects and assessments, manage timelines independently, keep key stakeholders informed, and recognize when to escalate appropriately
Participate in risk and other management forums and contribute to continuous improvement of risk and project / program management practices
Deliver assessment outcomes to senior leadership with strong communication skills and ability to influence stakeholders
Lead initiatives to drive efficiency and process improvements within and across teams