Senior Manager, Cyber Risk & Controls Governance

ITSMF; McLean (VA); On-site; USD 201,000 - 229,000; Full time

Job summary

Capital One is seeking a Sr. Manager, Tech Risk & Analysis to lead the controls governance program across ESRO, driving end-to-end lifecycle management and data-driven reporting.

You will collaborate with technology, cyber, and risk partners to enhance control environments and implement automation opportunities. Requires 7+ years in technology and cybersecurity risk, with strong governance, design assessment, and cross-functional leadership capabilities.

Qualifications

• Bachelor’s degree or military experience.
• At least 7 years of experience in technology, cybersecurity, and risk management.
• Experience with automation in risk management is a plus.

Responsibilities

• Manage end to end controls lifecycle management along with ensuring adherence to Enterprise Control Standard.
• Oversee the comprehensive design assessment for new controls to ensure they are well-built and ready for testing.
• Lead a team of risk professionals as they help lines of business create and update controls that duly manage the risk in the system.
• Work with Enterprise Services Risk Partners to assess impact of control changes on processes and documentation.
• Build metrics around data quality and monitor control data in the system of record.
• Partner with Enterprise Services Risk Analytics to identify and implement automated risk management solutions.
• Support development of content in response to Internal Audit and Regulatory agencies.

Skills

Tech risk

Cybersecurity

Risk assessment

Resilience eng

Site reliability

Education

Bachelor’s Degree or military experience

Tools

AWS

GCP

Azure

Job description

Capital One is seeking a Sr. Manager, Tech Risk & Analysis to lead the controls governance program across ESRO, driving end-to-end lifecycle management and data-driven reporting.

You will collaborate with technology, cyber, and risk partners to enhance control environments and implement automation opportunities. Requires 7+ years in technology and cybersecurity risk, with strong governance, design assessment, and cross-functional leadership capabilities.