Director, Card Tech Risk Advisor

About the Role

As a Director, Technology in Capital One’s Card Risk Office, you will apply your risk management, technology, and cyber expertise to the company’s Card Technology division. You will partner across divisional senior leaders for Card Technology, enterprise technology, and Information Security teams to develop and support best-in-class industry risk solutions that support innovation while protecting customers, shareholders, and associates. Your role involves collaborating with second lines of defense to lead and implement risk and control tools, techniques, and frameworks for the Technology organization, as well as providing direct technology risk advisory services to the Card Divisional CIO.

The Risk Office is accountable for identifying and mitigating risks, ensuring compliance with laws, regulations, and policies, and detecting and remediating issues. This requires strong collaboration with business leaders, Legal, Compliance, and other enterprise partners to ensure well-managed operations. You will work in a highly collaborative team environment to deliver value-added risk management services to technology-savvy business partners, with high exposure across lines of business and opportunities to work with senior technology executives on innovative risk solutions.

Responsibilities

• Utilize technology (e.g., AWS environment), cyber (e.g., information security, network security, vulnerability management) skills, and familiarity with risk management and industry standards (e.g., NIST, FFIEC, PCI) to execute technology-related risk consulting for the business and stakeholders.
• Leverage expertise to make sound judgment decisions in technical domains such as information security, vulnerability management, and network security across federated and centralized applications, platforms, and controls.
• Manage other Technology Risk Managers through the implementation of a comprehensive technology risk delivery model.
• Consult strategically with Accountable Executives across Technology.
• Serve as an interdepartmental advisor, interfacing with enterprise technology, Cyber, and other lines of business.
• Collaborate effectively across multiple organizations to achieve objectives.
• Deliver appropriate, succinct, and organized information, tailoring communication style to the audience. Communicate complex issues and implications, incorporating different perspectives and solutions into deliverables.
• Conduct analysis of data extracts to identify trends, patterns, and anomalies, drawing conclusions and escalating key risks and issues.
• Facilitate and ensure compliance with policies through risk assessments and enterprise risk management programs.
• Identify opportunities for continued improvement in the business.
• Identify, document, and track resolution of risk events/issues impacting customers stemming from process breakdowns or other problems, and help develop permanent corrective actions.
• Manage special projects.
• Travel up to 10% when applicable.

Requirements

• Bachelor’s Degree or Military experience.
• At least 7 years of experience in information technology, including resiliency and change management operations, software delivery, access management, information security, or cloud computing.
• At least 5 years of experience in people management.
• At least 4 years of experience analyzing data extracts to identify trends, patterns, and anomalies, including experience in test scripting, writing, reviewing, or assessing code.

Preferred Qualifications

• Master’s Degree.
• 8+ years of experience in information technology management.
• 6+ years of experience in people management.
• Certifications related to Cloud, Cyber, or Technology Operations, such as Cloud provider certifications, Certified Information Systems Security Professional (CISSP), Certified Information Security Manager (CISM), or Certified Information Systems Auditor (CISA).
• PMP, Lean, Agile, or Six Sigma certification.
• 5+ years of experience in Banking and/or Financial Services.
• 5+ years of experience evaluating, implementing, or managing cyber or information security.

Pay

The minimum and maximum full-time annual salaries for this role are listed below by location. Salaries for part-time roles will be prorated based on the agreed-upon number of hours worked.

• McLean, VA: $230,400 - $263,000
• Richmond, VA: $209,500 - $239,100
• Riverwoods, IL: $209,500 - $239,100

Candidates hired to work in other locations will be subject to the pay range associated with that location. This role is also eligible for performance-based incentive compensation, which may include cash bonuses and/or long-term incentives (LTI).

Benefits

Capital One offers a comprehensive, competitive, and inclusive set of health, financial, and other benefits that support your total well-being. Eligibility varies based on full or part-time status, exempt or non-exempt status, and management level. Learn more at the Capital One Careers website.