Capital One
Senior Manager, Methodologies and Practices, Technology Risk Management
Capital One, Chicago, Illinois, United States, 60290
West Creek 3 (12073), United States of America, Richmond, VirginiaSenior Manager, Methodologies and Practices, Technology Risk Management
Capital One is one of the fastest growing organizations in the world today, powered by our passion for our customers. We are serious about technology, we dream big, and we execute: Capital One moved our entire enterprise to the public cloud over the course of five years. Just as we prioritize driving innovation through technology, we equally prioritize cybersecurity, reliability, and managing technology risk.Technology Risk Management (TRM) is a small organization that packs a big punch. The ~100 professionals in TRM are trusted experts who oversee ~14,000 developers at Capital One. We raise the bar for excellence in cybersecurity, reliability, and tech risk. We shape strategy and decisions, challenge activities to ensure they meet our standards, and perform independent tests of our security and technology risk.This position - Senior Manager, Cyber Risk and Analysis - will play a high impact role in enhancing the methodology and practices for how the organization assesses cybersecurity and technology risk. This includes leading enhancements to the risk taxonomy, further developing and socializing the assessment methodology, championing adoption of risk quantification practices, and advocating for new practices with our first and second line partners.Desired Outcomes:Challenge and reinvent the methodology that the 1st and 2nd Lines of Defense will use to measure cybersecurity and technology risk within the existing ERM framework, including control efficacy.Research and develop data-driven assessment practices that will facilitate deeper risk conversations and surface insights in support of strategic decision-making.Evaluate and standardize various risk scoring methods for tech/cyber domains across the enterprise.Standardize the approach for TRM to prioritize the assessment scope to best focus our team on the areas of the greatest impact.Evolve the existing risk, process, control taxonomies to succinctly frame emerging threats and risks.Distill complex risk, process, and control relationships into simple designs and solutions.Introduce forward-looking risk measures.Demonstrate tech/cyber risk measurement advocacy and thought leadership, and train and mentor peers and executives across the enterprise to enable adoption of more modern analysis and assessment techniques.Mentor peers to meet their professional development goals.Basic Qualifications:Bachelor's degree or military experience.At least 6 years of experience managing, consulting, or auditing in the fields of risk management, information security or technology.At least 5 years of experience developing and implementing industry risk frameworks, quantitative analysis, tools, and methodologies.Professional security management certification (Open FAIR, CISSP, CISA, or CRISC).Preferred Qualifications:Master's degree.Critical analytical thinker, including the ability to express a point of view supported by data.Excellent communication and teaching skills, proven record teaching complex concepts to large audiences.Passion and expertise in technology and cybersecurity domains.Experience implementing risk quantification frameworks.At this time, Capital One will not sponsor a new applicant for employment authorization for this position.The minimum and maximum full-time annual salaries for this role are listed below, by location. Please note that this salary information is solely for candidates hired to perform work within one of these locations.This role is also eligible to earn performance based incentive compensation, which may include cash bonus(es) and/or long term incentives (LTI).Capital One offers a comprehensive, competitive, and inclusive set of health, financial and other benefits that support your total well-being. Learn more at the Capital One Careers website.This role is expected to accept applications for a minimum of 5 business days. No agencies please. Capital One is an equal opportunity employer committed to diversity and inclusion in the workplace.
#J-18808-Ljbffr
Capital One is one of the fastest growing organizations in the world today, powered by our passion for our customers. We are serious about technology, we dream big, and we execute: Capital One moved our entire enterprise to the public cloud over the course of five years. Just as we prioritize driving innovation through technology, we equally prioritize cybersecurity, reliability, and managing technology risk.Technology Risk Management (TRM) is a small organization that packs a big punch. The ~100 professionals in TRM are trusted experts who oversee ~14,000 developers at Capital One. We raise the bar for excellence in cybersecurity, reliability, and tech risk. We shape strategy and decisions, challenge activities to ensure they meet our standards, and perform independent tests of our security and technology risk.This position - Senior Manager, Cyber Risk and Analysis - will play a high impact role in enhancing the methodology and practices for how the organization assesses cybersecurity and technology risk. This includes leading enhancements to the risk taxonomy, further developing and socializing the assessment methodology, championing adoption of risk quantification practices, and advocating for new practices with our first and second line partners.Desired Outcomes:Challenge and reinvent the methodology that the 1st and 2nd Lines of Defense will use to measure cybersecurity and technology risk within the existing ERM framework, including control efficacy.Research and develop data-driven assessment practices that will facilitate deeper risk conversations and surface insights in support of strategic decision-making.Evaluate and standardize various risk scoring methods for tech/cyber domains across the enterprise.Standardize the approach for TRM to prioritize the assessment scope to best focus our team on the areas of the greatest impact.Evolve the existing risk, process, control taxonomies to succinctly frame emerging threats and risks.Distill complex risk, process, and control relationships into simple designs and solutions.Introduce forward-looking risk measures.Demonstrate tech/cyber risk measurement advocacy and thought leadership, and train and mentor peers and executives across the enterprise to enable adoption of more modern analysis and assessment techniques.Mentor peers to meet their professional development goals.Basic Qualifications:Bachelor's degree or military experience.At least 6 years of experience managing, consulting, or auditing in the fields of risk management, information security or technology.At least 5 years of experience developing and implementing industry risk frameworks, quantitative analysis, tools, and methodologies.Professional security management certification (Open FAIR, CISSP, CISA, or CRISC).Preferred Qualifications:Master's degree.Critical analytical thinker, including the ability to express a point of view supported by data.Excellent communication and teaching skills, proven record teaching complex concepts to large audiences.Passion and expertise in technology and cybersecurity domains.Experience implementing risk quantification frameworks.At this time, Capital One will not sponsor a new applicant for employment authorization for this position.The minimum and maximum full-time annual salaries for this role are listed below, by location. Please note that this salary information is solely for candidates hired to perform work within one of these locations.This role is also eligible to earn performance based incentive compensation, which may include cash bonus(es) and/or long term incentives (LTI).Capital One offers a comprehensive, competitive, and inclusive set of health, financial and other benefits that support your total well-being. Learn more at the Capital One Careers website.This role is expected to accept applications for a minimum of 5 business days. No agencies please. Capital One is an equal opportunity employer committed to diversity and inclusion in the workplace.
#J-18808-Ljbffr