This list contains only the countries for which job offers have been published in the selected language (e.g., in the French version, only job offers written in French are displayed, and in the English version, only those in English).
Senior Manager, Risk Advisor, Technology and Data Risk Management at Capital One. This position will play a key role in shaping the second line's independent point of view on cybersecurity, reliability, and tech risk with a focus on emerging technologies and risks, and analyzing the outcomes of the first line's analysis to enable robust challenge across assessments.
Job Responsibility
Lead independent risk analysis workshops
Apply quantitative and qualitative risk assessment methodologies
Understand the stack of controls
Identify new approaches to reducing risk
Systematically review, analyze, aggregate and compare outputs of different assessments
Influence 1st Line to drive definition and prioritization of high leverage risk reduction initiatives
Provide expert guidance and mentorship across TDRM
Foster strong working relationships with other 1st and 2nd Line groups
Expertly navigate the Enterprise Risk Management framework
Shape and further refine the risk program
Requirements
Bachelor's degree or military experience
At least 6 years of experience managing, consulting, or auditing in the fields of risk management, information security or technology
At least 5 years of experience performing or challenging risk assessments leveraging qualitative and quantitative methodologies (COSO Framework, quantitative analysis, Factor Analysis Information Risk (FAIR), Process, Risk & Control (PRC) library, Risk and Control Self Assessment (RCSA), scenario analysis, new initiative risk assessments)
Professional security management certification (Open FAIR, Certified Information Systems Security Professional (CISSP), Certified Information Security Manager (CISM), Certified Information Systems Auditor (CISA), or Certified in Risk and Information Systems Control (CRISC))
Nice to have
Master's degree in Information Technology, Cybersecurity, or equivalent
5+ years of experience communicating and presenting data to both technical and non-technical audiences
5+ years of experience applying risk quantification methodologies and rolling out risk framework changes
4+ years of experience interacting with different stakeholders and leaders across multiple organizations
4+ years of experience in a second-line or oversight role at a financial institution or regulatory agency
Experience implementing risk and controls framework for GenAI or other emerging technologies and risks
What we offer
Performance based incentive compensation, which may include cash bonus(es) and/or long term incentives (LTI)
Comprehensive, competitive, and inclusive set of health, financial and other benefits