Senior Manager, Tech Risk & Analysis - Strategic Tech Risk Advisor

About the Role

As a Sr. Manager, Technology Risk Advisor in the Financial Services Risk Office, you will be a strategic risk partner to business leaders and senior technology executives, directly shaping our technology risk posture. This is a high-impact leadership role where you will be on the front lines of technology innovation, specifically responsible for designing and governing the responsible implementation of AI, risk assessment for integration of acquired company technology, and other large-scale architecture transformation programs. You will leverage your analytical and risk management expertise to drive meaningful outcomes, influence corporate policies and standards, and ensure the resilience of our enterprise technology. You will thrive in a cross-functional and collaborative environment that values unique perspectives, rewards innovation, and challenges the status quo.

Responsibilities

• Act as the Strategic Risk partner, providing end-to-end tech and cyber risk advice and partnership for senior technology executives, supporting engineering organizations while driving the strategic vision for risk assessment and management programs.
• Understand platform & infrastructure Risk, assessing the security, reliability, and resilience of underlying technical platforms, including multi-cloud GPU orchestration, API gateways, third-party model providers, SaaS integrations, generative AI solutions, and open-source model pipelines.
• Maintain a broad understanding of relevant operating systems and their vulnerabilities to quickly identify the severity of potential issues.
• Lead technology risk assessments for large-scale technology change initiatives, ensuring all risks and potential areas of non-compliance are identified, documented, and remediated.
• Develop risk strategy and lifecycle risk management for technologies in scope, analyzing data, assessing risk, and prioritizing threats.
• Create executive advisory & reporting, synthesizing complex technical risk profiles, model performance issues, and mitigation progress into strategic insights for executives and senior leadership.
• Rationalize tech and cyber controls to align with technology processes, influencing updates to enterprise policies, standards, and control descriptions.
• Demonstrate cross-functional influence & engagement by partnering with Engineering, Data Science, Cyber Security, Legal, Compliance, and other Risk disciplines.
• Research and evaluate industry practices and regulatory changes, recommending practical solutions to complex issues.
• Deep-dive into Gen AI system architectures, evaluating risks specific to LLMs/SLMs, model fine-tuning, RAG, vector databases, prompt injection, hallucination rate thresholds, model drift, IP infringement, and training data privacy.

Qualifications

• Bachelor’s Degree or military experience.
• At least 7 years of experience in technology engineering, technology architecture, or technology risk management.

Preferred Qualifications

• Master’s Degree in Information Technology or Cybersecurity.
• 8+ years of Risk Management experience in Technology, Cyber, or Information Security practice.
• 8+ years of experience in cloud computing (AWS, GCP, or Azure).
• 8+ years of experience in a second-line or oversight role at a financial institution or regulatory agency.
• Professional Security Certification or Professional Risk Management Certification (CISSP, CISA, CRISC, Open FAIR Certified).

Pay

The minimum and maximum full-time annual salaries for this role in Plano, TX, are $182,500 - $208,300. This role is also eligible for performance-based incentive compensation, including cash bonuses and/or long-term incentives (LTI).

At this time, Capital One will not sponsor a new applicant for employment authorization or offer immigration-related support for this position.