Senior Manager, Tech Risk & Analysis - Strategic Tech Risk Advisor

Capital One • Plano, TX

2d • $182,500 - $208,300

About The Position

As a Senior Manager, Technology Risk Advisor in Capital One’s Financial Services Risk Office, you will serve as a strategic risk partner to business leaders and senior technology executives, helping shape the company’s technology risk posture. The role focuses on the responsible implementation of AI, risk assessment for acquired-company technology integrations, and large-scale architecture transformation programs. You will use technology engineering and architecture knowledge, risk management expertise, analysis, and problem-solving skills to develop risk-mitigation solutions, influence corporate policies and standards, and support resilient enterprise technology.

You will work in a cross-functional, collaborative environment with exposure across the division, partnering with senior technology, business, and risk office leaders as well as technology, compliance, legal, and operational risk teams. The position applies technology and cybersecurity best practices to assess current states, identify gaps, evaluate risks and business impacts, define mitigation strategies, and support cyber control programs. It also serves as a subject-matter expert in cybersecurity risk frameworks, information security risk assessments and controls, governance, data analysis, metrics, reporting, and customer engagement.

Requirements

• Bachelor’s degree or military experience.
• At least 7 years of experience in technology engineering, technology architecture, or technology risk management, or a combination of these areas.

Nice To Haves

• Master’s degree in Information Technology or Cybersecurity.
• 8 or more years of technology, cyber, or information security risk management experience.
• 8 or more years of cloud computing experience, such as AWS, GCP, or Azure.
• 8 or more years of experience in a second-line or oversight role at a financial institution or regulatory agency.
• Professional security certification or professional risk management certification.
• Certified Information Systems Security Professional (CISSP).
• Certified Information Systems Auditor (CISA).
• Certified in Risk and Information Systems Control (CRISC).
• Open FAIR Certified.

Responsibilities

• Act as a strategic risk partner, providing end-to-end technology and cybersecurity risk advice to senior technology executives and supporting engineering organizations.
• Drive the strategic vision for risk assessment and management programs.
• Assess platform and infrastructure risk, including the security, reliability, and resilience of technical platforms such as multi-cloud GPU orchestration, API gateways, third-party model providers, SaaS integrations, generative AI solutions, and open-source model pipelines.
• Maintain an understanding of operating systems and their vulnerabilities to identify and assess potential issues.
• Lead technology risk assessments for large-scale technology change initiatives, documenting risks and potential noncompliance and planning appropriate remediation.
• Develop risk strategies and lifecycle risk management for technologies in scope.
• Analyze data, assess risk, prioritize threats and potential risks, distinguish critical, high-risk, and low-risk issues, and escalate as appropriate.
• Translate complex technical risk profiles, model performance issues, and mitigation progress into executive insights and reporting for executives, Board Risk Committees, and senior leadership.
• Rationalize technology and cybersecurity controls to align with technology processes and influence updates to enterprise policies, standards, and control descriptions.
• Partner across Engineering, Data Science, Cyber Security, Legal, Compliance, and other Risk disciplines.
• Research and evaluate industry practices and regulatory changes, recommending practical solutions to complex issues.
• Evaluate generative AI system architectures and risks involving LLMs/SLMs, fine-tuning, retrieval-augmented generation, vector databases, prompt injection, hallucination thresholds, model drift, intellectual property infringement, and training-data privacy.

Benefits

• Comprehensive, competitive, and inclusive health, financial, and other benefits supporting total well-being.
• Eligible for performance-based incentive compensation, which may include cash bonuses and/or long-term incentives.

What This Job Offers

• Job Type: Full-time
• Career Level: Senior