Sr. Director- Data, Models, and AI Risk Management | Retail Bank

Capital One Group; McLean (VA); On-site; USD 270,000 - 308,000; Full time

Job summary

Capital One is seeking a Senior Director to lead data risk management within the Retail Bank Technology and Product organization. You will partner with enterprise teams, the second line of defense, and technology groups to implement risk identification and mitigation for AI and data use, ensuring controls keep pace with innovation and protect customers and shareholders.

The role requires deep knowledge of risk frameworks, strong communication, and the ability to drive organizational change

Qualifications

• 12+ years of technology and risk management experience.
• Experience in cloud security and data risk management.
• Familiarity with risk frameworks and control environments.

Responsibilities

• Provide risk oversight for AI and data risk across multiple control domains.
• Partner with Retail Bank Tech and Business teams to ensure compliance with data and model management requirements.
• Lead the evolution of data risk processes, including data quality, lineage, and usage in AI models.
• Deliver proactive risk insights to senior management with clear mitigations.
• Build a high-performing Data and AI risk team with a growth mindset.

Skills

Experience in risk management

Cloud computing (AWS/GCP/Azure)

Second-line oversight

Cybersecurity

Regulatory risk frameworks

AI risk management

Education

Bachelor’s Degree in Information Technology or Cybersecurity

Tools

AWS

GCP

Azure

Job description

As a Senior Director in Capital One’s Retail Bank Division, you will apply your data risk management and technology expertise to the company’s Technology and Product organization. You will partner across Enterprise teams, Second Line of defense, and Technology teams to develop and support best-in-class industry risk identification and mitigation solutions in a manner that supports innovation and protects our customers, shareholders and associates. Collaboration with various teams will entail implementation of risk and control tools, techniques, and frameworks for the Retail Bank organization, as well as provide risk advisory services to the first line control owners. Your contributions will drive organizational change through effective and proactive risk identification, measurement, analysis and reporting in order to better manage the company’s risk in an open and collaborative environment. This highly collaborative role will work with various stakeholders to deliver value-added risk management services to the stakeholders. You will have a high level of exposure across lines of business and have the opportunity to work with senior Tech and Business executives to create and implement innovative solutions to identify and mitigate potential risks to the Company. Proficiency in best in class critical thinking and a growth mindset is a must for this role. This individual will provide thought leadership on day to day data management processes and also provide broader thought leadership on how AI is shaping numerous other risk areas from Tech Risk to Third party risk. This individual will be responsible for building and enhancing existing risk management processes and framework to ensure that risk management is keeping pace with emerging risks.. The successful candidate will be a professional who understands various risk frameworks, control environments, technology functions, and organizations, with strong analytical, planning, strategic thinking, organizational and first rate communication skills. This role will report to the Head of Tech, Cyber, and Data Risk within the Retail Bank. **Responsibilities:*** Provide departmental oversight and serve as a Subject Matter Expert regarding the evolution of AI risk across diverse control domains.* Keep pace with the speed of AI. Identify and implement continual program enhancements based on industry standards and best practices related to data and AI risk management* Partner with Retail Bank Tech and Business teams to assess their compliance with the divisional and enterprise data and model management requirements* Partner with the Managing data steward team to build a strategic point of view on evolution of data risk. Build and maintain risk oversight processes across key data risk areas including but not limited to data quality, data lineage and traceability, data transformation, and data usage in LLM and AI* Apply a solid understanding of control environments to proactively mitigate risks. Influence control owners and other stakeholders to build consensus on risk mitigation and remediation strategies including new risks that may be introduced with the use of AI* Actively engage in AI usage across the LOB across the full lifecycle including design, development, testing, deployment, post deployment monitoring. Provide thought leadership on building proactive risk management techniques.* Deliver clear and decision oriented report to key stakeholders and senior management on data and AI risk highlighting key issues, with proposed mitigations* Build a high performing Data and AI risk team by hiring and developing talent, fostering a culture of growth mindset and continuous learning, and establishing clear risk ownership across the function. **Basic Qualifications:** * At least 12 years of experience in technology (software delivery, distributed systems, cloud-native architecture, infrastructure as code), cybersecurity (identity and access management, application security, cloud security, data protection), technology auditing, systems risk management, technology risk assessments, resilience engineering (operational resilience, business continuity, disaster recovery, high availability), chaos engineering (fault injection, blast radius mitigation, automated security validation), site reliability engineering (SLAs or SLOs, observability, incident response), or a combination. **Preferred Qualifications:** * Bachelor’s Degree in Information Technology, Cybersecurity, or equivalent* 14+ years of Risk Management experience in Cyber or Information Security practice* 12+ years of experience in cloud computing (AWS, GCP, or Azure)* 12+ years of experience in a second-line or oversight role at a financial institution or regulatory agency* Professional Security Certification or Professional Risk Management Certification* Certified Information Systems Security Professional (CISSP)* Certified Information Systems Auditor (CISA)* Certified in Risk and Information Systems Control (CRISC)* Open FAIR Certified ***At this time, Capital One will not sponsor a new applicant for employment authorization, or offer any immigration related support for this position (e.g. H1B, F-1 OPT, F-1 STEM OPT, F-1 CPT, J-1, TN, E-3, and O-1, or any other forms of work authorization that require immigration support from an employer).***The minimum and maximum full-time annual salaries for this role are listed below, by location. Please note that this salary information is solely for candidates hired to perform work within one of these locations, and refers to the amount Capital One is willing to pay at the time of this posting. Salaries for part-time roles will be prorated based upon the agreed upon number of hours to be regularly worked.McLean, VA: $269,600 - $307,700 for Sr. Director, Tech Risk & AnalysisRichmond, VA: $245,100 - $279,800 for Sr. Director, Tech Risk & Analysis