Senior Manager, Tech Risk & Analysis - Strategic Tech Risk Advisor

Capital One • Plano, TX

1d • $182,500 - $208,300

About The Position

As a Senior Manager, Technology Risk Advisor in the Financial Services Risk Office, you will serve as a strategic risk partner to business leaders and senior technology executives, shaping the company’s technology risk posture. The role focuses on governing the responsible implementation of AI, assessing technology risks associated with acquired-company integrations, and supporting large-scale architecture transformation programs. You will use technology engineering and architecture expertise, risk management, analysis, and problem-solving skills to identify and deploy solutions that mitigate risk, influence corporate policies and standards, and strengthen enterprise technology resilience.

You will work in a cross-functional, collaborative environment and partner with senior technology, business, and risk leaders, as well as technology, compliance, legal, and operational risk teams. The position applies technology and cybersecurity best practices to assess current states, identify gaps and business impacts, define mitigation strategies, prioritize and escalate recommendations, and participate in cyber control program design and implementation. It also serves as a subject-matter expert in cybersecurity risk frameworks, information security risk assessments and controls, governance, data analysis, metrics, reporting, and customer engagement.

The role requires evaluating platform and infrastructure risks, including cloud and AI-related architectures, and leading risk assessments for major technology changes. It includes developing lifecycle risk strategies, synthesizing technical risk and mitigation information for executives and board risk committees, rationalizing controls, influencing enterprise policies and standards, and assessing risks specific to generative AI systems and their data, models, and supporting components.

Requirements

• Bachelor’s degree or military experience.
• At least 7 years of experience in technology engineering, technology architecture, or technology risk management, or a combination of these.
• Expertise in technology and cybersecurity best practices, risk assessment, threat analysis, business impact assessment, mitigation, and escalation.
• Knowledge of cybersecurity risk frameworks, information security risk assessments and controls, regulatory and internal governance, data analysis, metrics, reporting, and customer engagement.
• Ability to assess the security, reliability, and resilience of technology platforms and infrastructure.
• Ability to analyze and prioritize threats and risks and communicate complex technical risk information to senior leaders.

Nice To Haves

• Master’s degree in Information Technology or Cybersecurity.
• 8+ years of technology, cyber, or information security risk management experience.
• 8+ years of experience in cloud computing, such as AWS, GCP, or Azure.
• 8+ years of experience in a second-line or oversight role at a financial institution or regulatory agency.
• Professional security certification or professional risk management certification.
• Certified Information Systems Security Professional (CISSP).
• Certified Information Systems Auditor (CISA).
• Certified in Risk and Information Systems Control (CRISC).
• Open FAIR Certified.

Responsibilities

• Act as a strategic risk partner to senior technology executives, providing end-to-end technology and cyber risk advice and supporting engineering organizations.
• Help drive the strategic vision for risk assessment and management programs.
• Assess the security, reliability, and resilience of technology platforms and infrastructure, including multi-cloud GPU orchestration, API gateways, third-party model providers, SaaS integrations, generative AI solutions, and open-source model pipelines.
• Maintain broad knowledge of relevant operating systems and vulnerabilities to identify and assess potential issues.
• Lead technology risk assessments for large-scale technology change initiatives, identifying and documenting risks and potential non-compliance and planning appropriate remediation.
• Develop risk strategy and lifecycle risk management for technologies in scope.
• Analyze data, assess risk, prioritize threats and potential risks by severity, and escalate as appropriate.
• Translate complex technical risk profiles, model performance issues, and mitigation progress into strategic reporting for executives, Board Risk Committees, and senior leadership.
• Rationalize technology and cyber controls to align with technology processes and influence updates to enterprise policies, standards, and control descriptions.
• Partner across Engineering, Data Science, Cyber Security, Legal, Compliance, and other Risk disciplines.
• Research and evaluate industry practices and regulatory changes and recommend practical solutions to complex issues.
• Evaluate generative AI system architectures for risks involving LLMs/SLMs, fine-tuning, retrieval-augmented generation, vector databases, prompt injection, hallucination thresholds, model drift, intellectual property infringement, and training-data privacy.
• Participate in the design and implementation of cyber control programs.

Benefits

• Comprehensive health, financial, and other benefits supporting total well-being.
• Eligible for performance-based incentive compensation, which may include cash bonuses and/or long-term incentives.

What This Job Offers

• Job Type: Full-time
• Career Level: Senior