Senior Manager, Methodologies and Practices, Techn

at Capital One in Chicago, Illinois, United States

Job Description

West Creek 3 (12073), United States of America, Richmond, Virginia

Senior Manager, Methodologies and Practices, Technology Risk Management

Capital One is one of the fastest growing organizations in the world today, powered by our passion for our customers. We are serious about technology, we dream big, and we execute: Capital One moved our entire enterprise to the public cloud over the course of five years. Just as we prioritize driving innovation through technology, we equally prioritize cybersecurity, reliability, and managing technology risk.

For years, the cybersecurity community has debated whether the CISO should report to the CIO or not. In regulated financial services, the answer is: both. The first-line CISO has operational responsibilities and reports to the CIO. The second-line Chief Tech Risk Officer (CTRO) and the Technology Risk Management (TRM) organization have broader responsibilities for cybersecurity but also reliability, software quality, resilience, and other technology risks. The CTRO is independent, reports to the Chief Risk Officer, and oversees the work of the CISO and the CIO.

Technology Risk Management (TRM) is a small organization that packs a big punch. The ~100 professionals in TRM are trusted experts who oversee ~14,000 developers at Capital One. We raise the bar for excellence in cybersecurity, reliability, and tech risk. We shape strategy and decisions, challenge activities to ensure they meet our standards, and perform independent tests of our security and technology risk.

Our business leaders must make technology decisions constantly. TRM makes sure they have the tech risk information they need to make good decisions. Associates within TRM are highly-skilled information security, cybersecurity, site reliability engineering, technology, and risk management professionals. They have a wealth of experience and a demonstrated ability to add value with their advice and to deliver high-impact results.

This position - Senior Manager, Cyber Risk and Analysis - will play a high impact role in enhancing the methodology and practices for how the organization assesses cybersecurity and technology risk. This includes leading enhancements to the risk taxonomy, further developing and socializing the assessment methodology, championing adoption of risk quantification practices, and advocating for new practices with our first and second line partners. It will be critical for this role to provide expert guidance and mentorship across TRM, foster strong working relationships with other 2nd Line groups, identify areas for improvement and be able to influence the broader enterprise risk frameworks to reflect technology/cyber risk considerations.

As a member of a growing organization, you are expected to shape and further refine the risk program, and will have the opportunity to operate with both autonomy and empowerment from senior leadership. The successful candidate will be a seasoned leader with strong practical knowledge of risk frameworks and risk assessment methodologies applied to technology/cyber risk, who can think strategically and make data-driven decisions, who is intellectually curious, and who thrives driving change.

Desired Outcomes:

Challenge and reinvent the methodology that the 1st and 2nd Lines of Defense will use to measure cybersecurity and technology risk within the existing ERM framework, including control efficacy

Research and develop data-driven assessment practices that will facilitate deeper risk conversations and surface insights in support of strategic decision-making

Evaluate and standardize various risk scoring methods for tech/cyber domains across the enterprise

Standardize the approach for TRM to prioritize the assessment scope to best focus our team on the areas of the greatest impact

Evolve the existing risk, process, control taxonomies to succinctly frame emerging threats and risks

Distill complex risk, process, and control relationships into simple designs and solutions

Introduce forward-looking risk measures

Demonstrate tech/cyber risk... For full info follow application link.

Capital One is an equal opportunity employer committed to diversity in the workplace. Capital One promotes a drug-free workplace. 

All qualified applicants will receive consideration for employment without regard to gender, race, color, religion, national origin, sexual orientation, protected veteran status, or disability status.

Capital One will consider for employment qualified applicants with a criminal history in a manner consistent with the requirements of applicable laws regarding criminal background inquiries, including, to the extent applicable, Article 23-A of the New York Correction Law; San Francisco, California Police Code Article 49, Sections 4901-4920; Newark, New Jersey Ordinance 12-1630; and other applicable federal, state, and local laws and regulations regarding criminal background inquiries.