Director, Tech Risk – Analysis

Capital One

. Lead the Cyber Strategy & Reporting team .

Posted 11/12/2026full-timeUnited StatesLead💰 $209,500 - $286,900 per yearWebsite

Core Competencies

Role fit

Core Competencies

Use this summary to align your resume positioning with the role.

Demonstrates expertise in Cybersecurity Risk Management, including the ability to synthesize technical findings into strategic narratives and produce executive-level reporting. Proficient in data analysis and metrics reporting, with a strong understanding of regulatory changes and industry best practices.

Highest-signal resume keywords

Cybersecurity Risk ManagementData AnalysisExecutive ReportingRisk FrameworksVulnerability Assessment

ATS Keywords

Tailor your resume

Applicant Tracking System Keywords

Tip: use these terms in your resume and cover letter to boost ATS matches.

Hard Skills

CybersecurityRisk AssessmentsData AnalysisMetrics ReportingInformation Security StandardsThreat IntelligenceRisk PrioritizationRegulatory ResearchPolicy RecommendationsStakeholder Engagement

Soft Skills

CommunicationCollaborationProblem-SolvingLeadershipCritical Thinking

Tools & Technologies

ExcelGoogle Sheets

Certifications & Qualifications

CISSPCISACRISCOpen FAIR CertifiedProfessional Security CertificationProfessional Risk Management Certification

Industry Keywords

Cyber ThreatsInformation SecurityGovernanceRisk FrameworksCyber Best PracticesResilience EngineeringSite Reliability EngineeringChaos EngineeringFinancial Institution OversightRegulatory Agency Experience

Tech Stack

Tools & technologies

CloudCyber Security

About the role

Key responsibilities & impact

Lead the Cyber Strategy & Reporting team
Design, structure, and produce executive- and Board-level reporting materials, including quarterly risk updates, strategic briefings, and committee read-outs
Synthesize technical cybersecurity findings and threat intelligence into cohesive themes and broader risk narratives
Create presentation-ready deliverables articulating risk posture, strategic progress, and actionable recommendations
Partner with the CISO, Cyber Leadership Team, and corporate governance stakeholders
Streamline reporting cadences and elevate critical risk discussions
Assess current state, identify gaps, and assess cyber risk, threats, and business impact
Analyze data and create charts using tools such as Excel/Google Sheets
Prioritize vulnerabilities and potential risks and escalate critical issues
Report on vulnerability assessments and alignment with Information Security Standards
Advise Accountable Executives on cyber-related risk through risk forums and issue-management processes
Research regulatory changes and industry practices and recommend practical solutions
Maintain relevance of cyber risk mitigation as the threat landscape evolves

Requirements

What you’ll need

Bachelor’s Degree or military experience
At least 9 years of experience in technology, cybersecurity, technology auditing, systems risk management, technology risk assessments, resilience engineering, chaos engineering, site reliability engineering, or a combination
Knowledge of cyber best practices, risk frameworks, information security risk assessments, information risk controls, regulatory and internal governance
Experience with data analysis, metrics, reporting, and customer engagement
Understanding of networks, applications, cloud computing, data, operating systems, and vulnerabilities
Understanding of major categories of cyber threats and enterprise safeguards
Ability to analyze data, assess risk, prioritize vulnerabilities, and escalate appropriately
Ability to research industry practices and regulatory changes affecting cybersecurity
Ability to recommend changes to policies, procedures, and control programs
Ability to manage lifecycle programs, action plans, impediments, risks, and stakeholder engagement
Bachelor’s degree or military experience
No new employment authorization sponsorship or immigration-related support available
Preferred: 9+ years of Risk Management experience in Cyber or Information Security practice
Preferred: experience in a second-line or oversight role at a financial institution or regulatory agency
Preferred: Professional Security or Professional Risk Management Certification; CISSP, CISA, CRISC, or Open FAIR Certified

Benefits

Comp & perks

Performance-based incentive compensation, which may include cash bonuses and/or long-term incentives (LTI)
Comprehensive, competitive, and inclusive health, financial, and other benefits supporting total well-being
Reasonable accommodations for applicants with disabilities
Equal opportunity and non-discrimination protections