Senior Director, Tech Risk & Analysis

Capital One

. Lead a team within Capital One’s cybersecurity Governance and Risk team .

Posted 11/2/2026full-timeMcLean • Virginia • United StatesSenior💰 $245,100 - $307,700 per yearWebsite

Core Competencies

Role fit

Core Competencies

Use this summary to align your resume positioning with the role.

Demonstrates extensive experience in Cybersecurity Governance and Risk Management, with a strong focus on risk assessments, mitigation strategies, and compliance with regulatory standards. Proficient in managing cybersecurity programs and leading teams to enhance organizational resilience against evolving cyber threats.

Highest-signal resume keywords

Cybersecurity GovernanceRisk ManagementCloud Computing (AWS, GCP, Azure)Professional Security Certification (CISSP, CISA, CRISC)Data Analysis and Reporting

ATS Keywords

Tailor your resume

Applicant Tracking System Keywords

Tip: use these terms in your resume and cover letter to boost ATS matches.

Hard Skills

Cyber Risk AssessmentsVulnerability ManagementInformation Security StandardsLean EnterpriseSix SigmaSLQ2CQ Management FrameworkChaos EngineeringSite Reliability EngineeringRegulatory ComplianceCyber Control Programs

Soft Skills

LeadershipAnalytical SkillsCommunication SkillsOrganizational SkillsCollaboration Skills

Tools & Technologies

ExcelGoogle Sheets

Certifications & Qualifications

CISSPCISACRISCOpen FAIR CertifiedProfessional Risk Management Certification

Industry Keywords

CybersecurityFinancial InstitutionRegulatory AgencyCyber Threat LandscapeInformation Technology

Tech Stack

Tools & technologies

AWSAzureCloudCyber SecurityGoogle Cloud Platform

About the role

Key responsibilities & impact

Lead a team within Capital One’s cybersecurity Governance and Risk team
Coordinate and execute audit, regulatory, and executive engagements
Manage and improve end-to-end processes using the SLQ2CQ management framework, Lean Enterprise, and Six Sigma
Assess cyber best practices, identify gaps, and assess cyber risk, threats, and business impact
Define mitigation strategies, prioritize and escalate recommendations
Participate in designing and implementing cyber control programs
Analyze projects, efforts, and datasets using reporting and tools to inform policies and drive change
Analyze data, create charts, and support cyber risk management efforts using Excel or Google Sheets
Prioritize vulnerabilities and potential risks by severity and escalate as appropriate
Research industry practices and regulatory changes affecting cybersecurity policies or programs
Recommend changes to policies, procedures, and control programs to mitigate evolving risks
Self-challenge cyber control programs and escalate risks where appropriate
Manage program lifecycles, including documenting and communicating action plans, impediments, risks, and stakeholder engagement
Report on vulnerability assessments and alignment with Information Security Standards
Advise Accountable Executives on cyber-related risk through risk forums and exception and issue management processes
Monitor the evolving cyber threat landscape to maintain relevant risk mitigation

Requirements

What you’ll need

At least 12 years of experience in technology, cybersecurity, technology auditing, systems risk management, technology risk assessments, resilience engineering, chaos engineering, site reliability engineering, or a combination
Bachelor’s Degree in Information Technology, Cybersecurity, or equivalent (preferred)
14+ years of Risk Management experience in Cyber or Information Security practice (preferred)
12+ years of experience in cloud computing with AWS, GCP, or Azure (preferred)
12+ years of experience in a second-line or oversight role at a financial institution or regulatory agency (preferred)
Professional Security Certification or Professional Risk Management Certification (preferred)
CISSP, CISA, CRISC, or Open FAIR Certified (preferred)
Strong understanding of networks, applications, cloud computing, data, operating systems, vulnerabilities, cyber threats, cyber risk, and security controls
Experience with risk frameworks, information security risk assessments, information risk controls, regulatory and internal governance, data analysis, metrics, reporting, and customer engagement
Proficiency with Excel or Google Sheets
Strong leadership, analytical, communication, organizational, and collaboration skills
Must be self-motivated, adaptable, detail-oriented, and able to work independently and influence partners across the organization
Capital One will not sponsor a new applicant for employment authorization or provide immigration-related support for this position

Benefits

Comp & perks

Performance-based incentive compensation, including cash bonuses and/or long-term incentives (LTI)
Comprehensive, competitive health benefits
Financial and other benefits supporting total well-being