Sr. Manager, Technology Risk Management

The Sr. Manager, Technology Risk Management role is a critical position within the Technology Risk Management team at Capital One's Business Risk Office.

This role requires a unique blend of analytical, risk management, and project management skills to support the company's technology risk profile.

The successful candidate will work with key stakeholders across the organization, delivering results that have a direct impact on the company's overall risk posture.

Responsibilities:

• Manage end-to-end tech and cyber risk management from defining policies and procedures, performing assessments, tracking remediation activities, to closing risk findings.

• Rationalize tech and cyber controls focusing on key risks and alignment with technology processes.

• Influence updates to policies, standards, control descriptions to enhance risk management activities.

• Drive projects based on defined priorities; ensure scope of deliverables and timelines.

• Partner with project customers to provide risk and controls thought partnership to devise effective risk identification and mitigation strategies.

• Forge relationships with key stakeholders to ensure delivery of commitments.

• Identify ways to improve and streamline risk identification, assessment, and mitigation processes.

• Exhibit a proven track record of project management, bringing the ability to quickly put structure in place to manage the work.

• Demonstrate outstanding communication and partnership skills which are essential for interacting and communicating with key stakeholders across all levels to manage, inform, and influence outcomes.

• Demonstrate organizational agility to adapt to changing demands.

• Display strong consulting and collaboration skills.

• Promote strategic vision and execute tactical operations to implement overarching risk assessment and risk management programs.

• Partner with Cyber and other Risk Management functions across the company.

• Interact with business counterparts and other IT colleagues to ensure appropriate coverage of shared controls and/or shared processes.

• Proactively engage team members and project leads to ensure that system changes or enhancements consider Audit controls and IT standards before implementation.

• Create and disseminate reporting and metrics related to the risk environment to key stakeholders and leadership.

• Meet professional obligations through efficient work habits such as meeting deadlines, honoring schedules, coordinating resources and meetings in an effective and timely manner, and demonstrating respect for others.

• Point of contact for compliance and audit engagements.

• Prepare for, coordinate, and respond to internal and external audits.

• Identify opportunities and work with business stakeholders and partners to embed risk management practices into the daily operations and business processes across the organization.

Qualifications:

• At least 5 years of experience in Cybersecurity, Technology, Audit, or Risk Management.

• At least 3 years of People Management experience.

Candidates hired to work in locations outside of McLean, VA or Richmond, VA will be subject to the pay range associated with that location. This role is also eligible to earn performance-based incentive compensation, which may include cash bonus(es) and/or long-term incentives (LTI). Incentives could be discretionary or non-discretionary depending on the plan.