Senior Risk Manager, Card Risk

Capital One; Richmond (VA); Hybrid; USD 162,000 - 184,000; Full time

Benefits offered by this job

Health benefits

Incentives

Job summary

Capital One's Card Risk team seeks a Senior Risk Manager to act as a primary 1LoD SME, applying deep risk judgment to identify and mitigate operational risks across card initiatives. You will partner with business leaders to build robust control environments and lead RCSAs, ensuring tests and controls meet enterprise standards.

You will also serve as a trusted advisor for audits and exams, guiding remediation and issue management with a strong focus on design and testing of controls in a hybrid

Qualifications

• Bachelor’s Degree or Military experience required.
• Minimum 5 years in 1LoD Operational Risk, Business Risk, Control Execution or Internal Audit.
• At least 4 years partnering with internal business clients.
• At least 2 years with ERM frameworks and risk advisory.

Responsibilities

• Serve as 1LoD Risk SME for assigned card units with strong risk judgment.
• Lead and execute Risk and Control Self-Assessments (RCSAs).
• Collaborate on new product strategy and workflow changes for risk readiness.
• Advise on control environment optimization and KRIs.
• Defend audits and regulatory inquiries; guide remediation strategies.
• Partner with Issue Management to close root-cause gaps before closure.

Skills

1LoD risk SME

RCSA ownership

risk assessment

control design

audit defense leadership

Education

Bachelor’s Degree or Military experience

Master’s Degree

Job description

Senior Risk Manager, Card Risk

As a Senior Risk Manager on Capital One’s Card Risk Team, you will serve as a primary First Line of Defense (1LoD) Risk Subject Matter Expert (SME) for our highest-profile card initiatives. In this role, you will apply deep technical risk judgment, control expertise, and business acumen to identify, evaluate, and mitigate operational risks across the line of business.

You will serve as a trusted risk advisor, control architect, and audit defense lead. You will partner directly with business leaders to build robust control environments, execute Risk and Control Self-Assessments (RCSAs), defend against audit/exam scrutiny, and guide stakeholders through issue remediation and control testing routines.

This role is designated as a hybrid position. You are expected to adhere to Capital One's hybrid policy regarding required on-site presence at your designated office location.

Key Responsibilities

• 1LoD Risk Subject Matter Expertise: Serve as the primary 1LoD Risk SME for assigned card business units, providing critical judgment on control design, operational risk identification, and risk/return trade-offs.
• Hands-On RCSA Ownership: Lead and execute comprehensive Risk and Control Self-Assessments (RCSAs), evaluating process workflows, mapping threat vectors, identifying control gaps, and authoring precise, testable business controls aligned with enterprise risk frameworks.
• New Product & Strategy Review: Partner with business leaders on strategic changes, product launches, and workflow modifications to ensure proactive risk identification and proper control architecture prior to go-live.
• Control Environment Optimization: Proactively evaluate key risk indicators (KRIs) and process maps to advise business partners on emerging control weaknesses before breakdowns occur.
• Audit & Exam Defense: Serve as the strategic advisor for internal audit engagements and regulatory exams, shaping response strategies, managing audit challenges, and guiding business partners on demonstrating control operating effectiveness.
• Issue Remediation Guidance & Final Gatekeeping: Partner closely with the dedicated Issue Management team to guide business stakeholders through root-cause analysis and remediation design. Leverage deep domain experience in execution mechanics to serve as the critical advisory consultant and final approval gate for the business, ensuring fixes meet bank severity and quality standards prior to issue closure.
• Control Testing Consultation & Stakeholder Communication: Serve as the consultative SME to dedicated Control Testing teams during scope design and testing routines. Interpret testing failures, translate technical results into actionable business insights, and guide line-of-business partners on corrective action plans.

What We’re Looking For in an Ideal Teammate

• Risk Judgment Over Process Tracking: You bring substantive technical risk perspective, you know how to evaluate a control, challenge an audit finding, and dissect a root cause, rather than just manage a schedule.
• Constructive Challenge: You possess the confidence and domain authority to effectively push back on business partners, external testing teams, and audit findings with data-backed judgment.
• Operational Perspective: You understand the end-to-end operational mechanics of issue remediation and control testing, enterprise risk management, enabling you to guide business partners through complex execution requirements seamlessly.

Basic Qualifications

• Bachelor’s Degree or Military experience
• At least 5 years of First Line of Defense (1LoD) Operational Risk, Business Risk, Control Execution, or Internal Audit experience within a financial institution or Big 4 consulting firm
• At least 4 years of experience supporting, partnering and interacting with internal business clients
• At least 2 years of experience with Enterprise Risk Management (ERM) frameworks, operational risk advisory, and control transformation

Preferred Qualifications

• Master’s Degree
• 6+ years of Risk Consulting experience at a Big 4 or major professional services firm, with exposure to Enterprise Risk Management (ERM) frameworks, operational risk advisory, and control transformation
• 6+ years of 1LoD Operational Risk Management experience supporting consumer card, lending, or retail financial services
• Demonstrated hands-on experience authoring business controls, executing RCSAs, and evaluating control design effectiveness
• Direct experience leading internal audit defense routines or managing regulatory examination requests
• Proven experience serving as an advisor or approval gate for operational issue remediation and root-cause analysis
• Certified Risk Management Assurance (CRMA) or Certified Regulatory Compliance Manager (CRCM)

At this time, Capital One will not sponsor a new applicant for employment authorization, or offer any immigration related support for this position (e.g. H1B, F-1 OPT, F-1 STEM OPT, F-1 CPT, J-1, TN, E-3, and O-1, or any other forms of work authorization that require immigration support from an employer).

The minimum and maximum full-time annual salaries for this role are listed below, by location. Please note that this salary information is solely for candidates hired to perform work within one of these locations, and refers to the amount Capital One is willing to pay at the time of this posting. Salaries for part-time roles will be prorated based upon the agreed upon number of hours to be regularly worked.

McLean, VA: $177,700 - $202,800 for Sr. Risk Manager

Richmond, VA: $161,500 - $184,300 for Sr. Risk Manager

Candidates hired to work in other locations will be subject to the pay range associated with that location, and the actual annualized salary amount offered to any candidate at the time of hire will be reflected solely in the candidate’s offer letter.

This role is also eligible to earn performance based incentive compensation, which may include cash bonus(es) and/or long term incentives (LTI). Incentives could be discretionary or non discretionary depending on the plan.

Capital One offers a comprehensive, competitive, and inclusive set of health, financial and other benefits that support your total well-being. Learn more at the Capital One Careers website (https://www.capitalonecareers.com/benefits) . Eligibility varies based on full or part-time status, exempt or non-exempt status, and management level.

This role is expected to accept applications for a minimum of 5 business days.

No agencies please. Capital One is an equal opportunity employer (EOE, including disability/vet) committed to non-discrimination in compliance with applicable federal, state, and local laws. Capital One promotes a drug-free workplace. Capital One will consider for employment qualified applicants with a criminal history in a manner consistent with the requirements of applicable laws regarding criminal background inquiries, including, to the extent applicable, Article 23-A of the New York Correction Law; San Francisco, California Police Code Article 49, Sections 4901-4920; New York City’s Fair Chance Act; Philadelphia’s Fair Criminal Records Screening Act; and other applicable federal, state, and local laws and regulations regarding criminal background inquiries.

If you have visited our website in search of information on employment opportunities or to apply for a position, and you require an accommodation, please contact Capital One Recruiting at 1-800-304-9102 or via email at [e-mail] . All information you provide will be kept confidential and will be used only to the extent required to provide needed reasonable accommodations.

For technical support or questions about Capital One's recruiting process, please send an email to [e-mail]

Capital One does not provide, endorse nor guarantee and is not liable for third-party products, services, educational tools or other information available through this site.

Capital One Financial is made up of several different entities. Please note that any position posted in Canada is for Capital One Canada, any position posted in the United Kingdom is for Capital One Europe and any position posted in the Philippines is for Capital One Philippines Service Corp. (COPSSC).