Job Information

Capital One Manager, Technology Risk Guide - Enterprise Services Risk in Richmond, Virginia

West Creek 4 (12074), United States of America, Richmond, Virginia

Manager, Technology Risk Guide - Enterprise Services Risk

As a Technology Risk Guide Manager in Capital One’s Enterprise Services (ES) Risk organization, you will apply your risk management skills to the company’s Technology organization. You will partner across Technology, Divisional CIO, and Cyber Security teams to develop and support best-in-class industry risk solutions in a manner that supports innovation and protects our customers, shareholders and associates. You will collaborate with second lines of defense to lead and implement risk and control tools, techniques, and frameworks for the Technology organization, as well as provide direct tech risk guide services into our first line Divisional CIO teams. Your contributions will drive organizational change through risk identification, measurement, analysis and reporting in order to better manage the company’s risk in an open and collaborative environment.

Technology Risk Guide Managers are experienced and progressive individuals that operate within a highly collaborative team environment to deliver value-added risk management services to our Technology savvy business partners. You will have a high level of exposure across lines of business and have the opportunity to work with Executives to create and implement innovative solutions to identify and mitigate potential risks to the Company. Proficiency in risk management program (ideally Technology risk-driven program) development and management are key to success in this role. The successful candidate will be an experienced risk management professional who understands technology functions and organizations, with strong analytical, planning, strategic thinking, organizational and communication skills. This role will primarily provide first line risk advisory and challenge for our US Card business, with significant interaction with other areas within all three lines of defense.


  • Serve as the primary Technology Risk Guide for Divisional CIO Leadership Team and respective software engineering teams to propel technology risk agenda and help DCIO LT make informed decisions in supporting their business partners.

  • Build successful relationships with Card Tech, business risk offices and team members to understand the impact of technology risk on critical business processes

  • Support Risk Identification processes such as Risk Control and Self Assessments (RCSAs), and Targeted Risk Assessment.

  • Evaluate new products and initiatives from the technology risk perspective through the new product governance process

  • Influence leaders within US Card, Business Risk Offices, Compliance, Cyber Security, second line risk organizations, and Internal Audit on key technology risks and actions needed

  • Conduct periodic risk reviews with the executives and support reporting for technology risk metrics

  • Manage, and govern deliverables for enterprise programs and initiatives.

  • Develop risk analysis, perform deep dive investigations, and drive specific risk initiatives to minimize risk posture and strengthen overall control suite effectiveness

  • Design and support internal risk and control governance processes

  • Develop and perform Process Level Assessments (PLA), tools, templates, and job aides.

  • Identify and implement continual tech risk program enhancements based on industry standards and best practices in alignment with Capital One’s strategic risk direction

Basic Qualifications:

  • Bachelor’s Degree or Military experience

  • At least 3 years of Risk Management Experience

  • At least 2 years of Project Management experience

  • At least 2 years of experience in a leadership capacity

Preferred Qualifications:

  • 5 years of Project Management experience

  • CISA, CRISC, CISSP, CEH or other Industry Risk Professional Certification

  • Experience managing risks, governance, and controls for technology, digital products, and solutions

  • Experience with Risk Management frameworks, ITGC, cloud environments

  • Cloud risk, governance, control, and security experience

At this time, Capital One will not sponsor a new applicant for employment authorization for this position.