Director, Risk Management

About the role

Come be a part of an organization that’s dedicated to helping Capital One identify, manage and effectively mitigate business continuity and operational resilience risk. As a member of the Business Continuity and Resilience Risk Management (BCRM) team within Operational Risk Management (ORM) in the Second Line of Defense, you will work with talented associates in ORM and other key stakeholders across the company, applying organizational and communication skills to ensure a high‑performing team delivering on priorities efficiently. The culture emphasizes inclusion, belonging, and diverse perspectives, encouraging team members to lean into their talents to deliver superior experiences. As a Director within BCRM you will oversee and challenge First Line of Defense risk‑taking across most Capital One businesses, implement and govern the Operational Resilience framework enterprise‑wide, and act as a change agent influencing business partners.

Responsibilities

• Oversee and challenge risk‑taking by the First Line of Defense across Card, Retail, Commercial, Auto and Enterprise Services lines of business.
• Implement and govern the Operational Resilience Framework across Capital One, driving compliance with international regulatory requirements.
• Respond to and report on crises and incidents, ensuring appropriate First Line response and keeping Second Line leadership informed.
• Understand emerging resiliency risks within the industry and Capital One, preparing the First Line to respond effectively.
• Serve as a key thought partner on evolving business continuity and resilience methodology changes.
• Collaborate with stakeholders and leaders across multiple organizations to achieve objectives.
• Coordinate program‑related activities and deliverables to ensure effective collaboration within the team and across stakeholder groups.
• Articulate complex technical concepts clearly in written products and verbal communications.
• Oversee data‑driven, risk‑based analysis, starting with problem identification or hypothesis development.

Basic Qualifications

• Bachelor’s degree or military experience.
• At least 8 years of experience in risk management, business continuity, disaster recovery, operational resilience, or audit.
• At least 5 years of experience in the financial services industry or regulatory environment.
• At least 3 years of people‑management experience.
• At least 3 years of experience consulting with and presenting to senior executive leadership.

Preferred Qualifications

• Master’s degree in Business Administration (MBA), Finance, Risk Management, or a related analytical field.
• Proven experience in a 2nd Line of Defense risk management role with a strong track record of challenging 1st Line decisions across diverse lines of business (e.g., Card, Retail, Commercial, Auto).
• Deep familiarity with US and international operational resilience and risk management regulatory standards (e.g., Federal Reserve SR 20‑24, OCC guidelines, DORA, Basel Committee principles).
• Certified Business Continuity Professional (CBCP/MBCP), Certified in Risk and Information Systems Control (CRISC), Certified Information Security Manager (CISM), or other operational risk/resilience designations.
• Experience leading data‑driven risk analyses, building risk‑based hypotheses, and translating complex technical data into clear executive reports.
• Experience overseeing corporate crisis management or incident response frameworks during high‑impact, real‑time events.

Pay

• McLean, VA: $206,000 – $235,100 for Director, Risk Management
• Plano, TX: $187,300 – $213,700 for Director, Risk Management
• Richmond, VA: $187,300 – $213,700 for Director, Risk Management
• Candidates hired in other locations will receive the pay range associated with that location.
• Eligible for performance‑based incentive compensation, which may include cash bonuses and/or long‑term incentives (LTI). Incentives may be discretionary or non‑discretionary depending on the plan.

Benefits

Capital One offers a comprehensive, competitive, and inclusive set of health, financial, and other benefits that support total well‑being. Eligibility varies based on full‑ or part‑time status, exempt or non‑exempt status, and management level.