Director, Risk Management

We need to output HTML fragment with sections: About the role? The posting includes intro paragraphs describing role, responsibilities, qualifications, pay, benefits. We need headings:

for section headings like About the role, Responsibilities, Requirements, Qualifications, Skills, Benefits, Pay, Schedule. We should include only sections with real content. We need to parse content: Intro: "Come be a part of an organization that’s dedicated to helping Capital One identify, manage and effectively mitigate business continuity and operational resilience risk. As a member of the Business Continuity and Resilience Risk Management (BCRM) team within Operational Risk Management (ORM) in the Second Line of Defense, that’s exactly what you’ll do. Working with talented associates in ORM and other key stakeholders across the company, you will apply your organizational and communication skills towards ensuring we have a high performing team who is delivering on our priorities effectively and efficiently. We empower associates to deliver their best by cultivating a culture of inclusion and belonging, where varying perspectives and opinions are valued. We embrace each other’s differences and encourage all team members to lean into their talents and skills to deliver superior experiences. As a Director within BCRM you will be responsible for the oversight and challenge of our First Line of Defense risk taking across the majority of the Businesses within Capital One, including Credit Card, Bank and Auto. Additionally, this role will be responsible for implementation and ongoing oversight of Capital One’s Operational Resilience framework across the Enterprise. Directors at Capital One are highly motivated Risk Management professionals with excellent analytical, organizational, and communication skills. These skills allow the Risk Manager to gain insights and act as a change agent to influence business partners. As Capital One evolves to meet the ever changing landscape, so do our Directors. They are forward thinking, quick to adapt, and technologically adept." That's about the role. Could be "About the role". Then "Responsibilities:" list bullet points. Responsibilities bullet list: - Oversee and challenge the risk-taking by the First Line of Defense across Card, Retail, Commercial, Auto and Enterprise Services Lines of Business - Implement and govern the Operational Resilience Framework across Capital One, including driving compliance with any international regulatory requirements - Respond to and report on crises and incidents, ensuring First Line of Defense response is appropriate and Second Line of Defense Risk Management Leadership remains informed - Understand emerging resiliency risks across the industry and within Capital One, ensuring First Line of Defense is appropriately prepared to respond - Act as a key thought partner on evolving business continuity and resilience methodology changes - Collaborate effectively with stakeholders and leaders across multiple organizations to achieve objectives. Coordinate program-related activities and deliverables to ensure effective collaboration within the team and across stakeholder groups. - Articulate complex technical concepts in a clear, concise, and actionable manner through both written products and verbal communications - Oversee data-driven, risk-based analysis, starting with problem identification or hypothesis development We need to keep all bullet points as

• . Then "Basic Qualifications:" list bullet points: - Bachelor’s Degree or military experience - At least 8 years of experience in risk management, business continuity, disaster recovery, operational resilience, or audit - At least 5 years of financial services industry experience or regulatory environment experience - At least 3 years of experience in people management - At least 3 years of experience consulting with and presenting to senior executive leadership We could put under "Requirements" or "Qualifications". The instruction says headings: About the role, Responsibilities, Requirements, Qualifications, Skills, Benefits, Pay, Schedule. So we can separate Basic Qualifications as "Requirements" maybe, and Preferred Qualifications as "Qualifications" or "Skills". But we need to decide. "Basic Qualifications" likely map to "Requirements". "Preferred Qualifications" could be "Qualifications" or "Skills". The list includes many items: Master's degree, proven experience, deep familiarity, certifications, experience leading data-driven risk analyses, experience overseeing corporate crisis management. Those are qualifications/skills. We could have "Qualifications" for preferred qualifications, and maybe "Skills" for some skill-based items? But we can just put preferred qualifications under "Qualifications". The instruction says we should not create thin sections; we can combine. We also have Pay: salary ranges for locations. That's specific content, so we need a Pay section. Benefits: mention "Capital One offers a comprehensive, competitive, and inclusive set of health, financial and other benefits that support your total well-being. Learn more at the Capital One Careers website. Eligibility varies based on full or part-time status, exempt or non-exempt status, and management level." That's benefits content, so we include Benefits. Schedule: not mentioned, so we omit Schedule. We also need to exclude boilerplate: EEO, equal-opportunity, scam-warning, application instructions, etc. Remove lines about "No agencies please", "Capital One is an equal opportunity employer", etc. Also remove lines about accommodation contact, technical support, third-party disclaimer, etc. Also remove "At this time, Capital One will not sponsor a new applicant for employment authorization for this position." That's maybe not boilerplate but could be considered eligibility; but it's about sponsorship. Might be considered relevant? The instruction says remove cookie/navigation/legal/EEO/equal-opportunity/scam-warning boilerplate, duplicated lines, and application instructions. The sponsorship line is not exactly those categories; but it's about work authorization. Might be considered relevant? However it's not a standard heading; we could incorporate into a short paragraph maybe under "About the role" or as a note. But we could drop it as it's not essential? The instruction says preserve ALL substantive information; do NOT invent or summarize away detail. So we should keep that line if it's substantive. It's about sponsorship. It's not boilerplate; it's a specific condition. So we should keep it. Where to place? Could be under "About the role" or a separate "Eligibility" but we don't have heading for that. Could add a short paragraph after responsibilities maybe. But we only have allowed headings list; we could add a paragraph without heading? The instruction says output ONLY the HTML fragment; we can include

  paragraphs anywhere. So we can keep that line as a

  after responsibilities or before qualifications. Similarly, the line about "This role is also eligible to earn performance based incentive compensation..." is benefits/compensation; we could include in Benefits or Pay? It's about incentive compensation; could be part of Benefits. We'll include in Benefits. Also line: "Capital One offers a comprehensive, competitive, and inclusive set of health, financial and other benefits that support your total well-being. Learn more at the Capital One Careers website. Eligibility varies based on full or part-time status, exempt or non-exempt status, and management level." That's benefits. Also line: "This role is expected to accept applications for a minimum of 5 business days." That's application instruction; should be removed. Also lines about "No agencies please." remove. Also EEO lines remove. Also lines about accommodation contact remove? That's maybe not boilerplate but it's about accommodation; could be considered legal? Might be considered boilerplate; but it's about providing accommodation. The instruction says remove cookie/navigation/legal/EEO/equal-opportunity/scam-warning boilerplate. Accommodation contact could be considered legal/EEO? Might be safer to remove. Also lines about technical support email remove. Also lines about third-party disclaimer remove. Also lines about Capital One Financial made up of entities remove. Thus we keep: intro/about role, responsibilities, basic qualifications, preferred qualifications, pay, benefits, sponsorship note, incentive compensation note (maybe part of benefits). Also maybe note about "Candidates hired to work in other locations will be subject to the pay range associated with that location, and the actual annualized salary amount offered to any candidate at the time of hire will be reflected solely in the candidate’s offer letter." That's part of pay details; keep. Now structure:

  About the role

  Come be a part of an organization that’s dedicated to helping Capital One identify, manage and effectively mitigate business continuity and operational resilience risk. As a member of the Business Continuity and Resilience Risk Management (BCRM) team within Operational Risk Management (ORM) in the Second Line of Defense, that’s exactly what you’ll do. Working with talented associates in ORM and other key stakeholders across the company, you will apply your organizational and communication skills towards ensuring we have a high performing team who is delivering on our priorities effectively and efficiently. We empower associates to deliver their best by cultivating a culture of inclusion and belonging, where varying perspectives and opinions are valued. We embrace each other’s differences and encourage all team members to lean into their talents and skills to deliver superior experiences. As a Director within BCRM you will be responsible for the oversight and challenge of our First Line of Defense risk taking across the majority of the Businesses within Capital One, including Credit Card, Bank and Auto. Additionally, this role will be responsible for implementation and ongoing oversight of Capital One’s Operational Resilience framework across the Enterprise. Directors at Capital One are highly motivated Risk Management professionals with excellent analytical, organizational, and communication skills. These skills allow the Risk Manager to gain insights and act as a change agent to influence business partners. As Capital One evolves to meet the ever changing landscape, so do our Directors. They are forward thinking, quick to adapt, and technologically adept.

  Then maybe a paragraph about sponsorship:

  At this time, Capital One will not sponsor a new applicant for employment authorization for this position.

  Then Responsibilities heading.

  Responsibilities

  • Oversee and challenge the risk-taking by the First Line of Defense across Card, Retail, Commercial, Auto and Enterprise Services Lines of Business
  • Implement and govern the Operational Resilience Framework across Capital One, including driving compliance with any international regulatory requirements
  • Respond to and report on crises and incidents, ensuring First Line of Defense response is appropriate and Second Line of Defense Risk Management Leadership remains informed
  • Understand emerging resiliency risks across the industry and within Capital One, ensuring First Line of Defense is appropriately prepared to respond
  • Act as a key thought partner on evolving business continuity and resilience methodology changes
  • Collaborate effectively with stakeholders and leaders across multiple organizations to achieve objectives. Coordinate program-related activities and deliverables to ensure effective collaboration within the team and across stakeholder groups.
  • Articulate complex technical concepts in a clear, concise, and actionable manner through both written products and verbal communications
  • Oversee data-driven, risk-based analysis, starting with problem identification or hypothesis development
  Then Requirements heading for Basic Qualifications.

  Requirements

  • Bachelor’s Degree or military experience
  • At least 8 years of experience in risk management, business continuity, disaster recovery, operational resilience, or audit
  • At least 5 years of financial services industry experience or regulatory environment experience
  • At least 3 years of experience in people management
  • At least 3 years of experience consulting with and presenting to senior executive leadership
  Then Qualifications heading for Preferred Qualifications.

  Qualifications

  • Master’s Degree in Business Administration (MBA), Finance, Risk Management, or a related analytical field.
  • Proven experience in a 2nd Line of Defense risk management role, with a strong track record of effectively challenging 1st Line of Defense business decisions across diverse lines of business (e.g., Card, Retail, Commercial, Auto).
  • Deep familiarity with US and international operational resilience and risk management regulatory standards (such as Federal Reserve SR 20-24, OCC guidelines, DORA, or Basel Committee principles).
  • Certified Business Continuity Professional (CBCP/MBCP)
  • Certified in Risk and Information Systems Control (CRISC)
  • Certified Information Security Manager (CISM)
  • Other operational risk or resilience