Director, Cyber Risk & AI Governance

Capital One National Association; McLean (VA); On-site; USD 230,400 - 263,000; Full time

Job summary

Capital One is seeking a Director, Cyber Risk and Analysis to lead state-of-the-art risk assessments and control programs within the Retail Risk Office. You will define mitigation strategies, prioritize risks, and drive innovations in risk management across technology domains.

The role emphasizes deep expertise in technology and cyber risk, governance, and data analysis, with opportunities to influence policy and drive measurable risk resilience.

Qualifications

• Bachelor's Degree or military experience.
• At least 10 years of experience with Technology or Cyber Security Risk Management.
• At least 10 years of experience building control environments.
• At least 10 years of experience in People Management.
• At least 2 years of experience in leading AI programs and governance.

Responsibilities

• Possesses understanding of technology systems and topology across networks, apps, infrastructure, cloud, data.
• Leverages risk frameworks to identify processes and controls.
• Identifies major risk categories and safeguarding measures in new environments.
• Uses reporting tools to analyze data and inform policies and risk metrics.
• Analyses data quickly to prioritize high-risk issues and escalate as needed.
• Researches industry practices and regulatory changes affecting risk management policies.
• Recommends changes to policies, procedures and control programs to mitigate risks.
• Self-challenges tech and cyber control programs and escalates risks when appropriate.
• Documents action plans, impediments, risks and stakeholder engagement in lifecycle programs.
• Advises executives on tech/cyber risk in risk forums and through existing processes.

Skills

Technology risk management

Cyber risk assessments

People management

AI governance

Regulatory understanding

Education

Bachelor's Degree or military experience

Master’s Degree

Job description

Capital One is seeking a Director, Cyber Risk and Analysis to lead state-of-the-art risk assessments and control programs within the Retail Risk Office. You will define mitigation strategies, prioritize risks, and drive innovations in risk management across technology domains.

The role emphasizes deep expertise in technology and cyber risk, governance, and data analysis, with opportunities to influence policy and drive measurable risk resilience.