Apply on Employer Site

Capital One · 5 months ago

Senior Manager, Technology Change Risk Oversight

Richmond, VA

Full-time

Hybrid

Senior Level

$225K/yr - $257K/yr

6+ years exp

Capital One is one of the fastest growing organizations in the world today, powered by our passion for our customers. As the Senior Manager, Technology Change Risk Oversight, you will play a key role in the review, risk identification, risk assessment, reporting, and effective challenge of technology processes, controls, and capabilities, ensuring effective risk management and oversight of technology changes.

BankingCredit CardsFinanceFinancial Services

Comp. & Benefits

No H1B

Responsibilities

Provide technical leadership in assessing the practices of designing, developing, testing and implementing cloud native solutions to crucial business problems through thoughtful use of industry best practices and Capital One policy

Evaluate proposed and approved cloud technical solutions for automation, resiliency, performance, scalability, and security including appropriate tradeoffs, risks and opportunities

Evaluate/assess complex technological and business environment migrations to the cloud and integrated end-to-end solution options

Build and maintain relationships with technical leaders, business owners, engineers and other stakeholders to understand and evaluate implementation plans, business priorities and technical solutions to ensure risk are well communicated and understood by the key stakeholders

Keep up-to-date on cutting edge technology, standards, protocols and tools in areas relevant to the rapidly changing environment at Capital One, specifically cloud native architecture, serverless, and emerging AWS services

Demonstrate strong analytical, problem-solving, and decision-making skills

Communicate and drive highly complex technology solutions to broad audiences including executives, business leaders, product managers, legal experts, security specialists and software engineers

Define, structure and plan work independently

Perform independent risk assessment of our cloud environment focusing on architecture, engineering, networking, governance

Provide expertise and advice regarding the effectiveness of device configurations, IT architecture, or IT engineering solutions

Consult with risk owners on the design and implementation or adjustment of mitigating controls associated with emerging technologies

Draft and publish independent reports for risk owners, senior management, and other stakeholders regarding risks associated with new or emerging technologies

Qualification

Public Cloud implementationsInformation SecurityCloud services expertiseRisk managementAWS Certified Solutions ArchitectCybersecurity expertiseCloud native architectureThreat modeling frameworksControl frameworks familiarityAnalytical skillsCommunication skillsProblem-solving skillsTeamworkProject management

Required

Bachelor's Degree or military experience

At least 6 years of experience managing, consulting, auditing, or working in the fields of information security or information technology

At least 3 years experience with Public Cloud implementations

Preferred

Master's Degree in Computer Science or in an Engineering discipline

Professional certification (AWS Certified Solutions Architect, AWS Certified Security Speciality, AWS SysOps Administrator, or Certified Information Systems Security Professional (CISSP))

Experience with Information Security at the policy, architecture or implementation level

Ability to communicate clearly and to interact effectively at all levels of the organization, and to influence as warranted and appropriate to drive to consensus

Experience with identifying and communicating key risks related to cloud native implementations and architectures

Experience drafting reports or analytic assessments for senior management

Experience with analysis of emerging threats and reports that describe the implications of threat(s) and opportunities to executives or senior decision-makers

Passion and expertise in cybersecurity and technology risk, with an ability to be confident, respectful, and articulate when registering dissenting or unpopular opinions

Ability to manage multiple high-visibility and high-impact projects while maintaining superior results

Execution oriented and a self-motivator

Experience with threat modeling frameworks (STRIDE, OWASP Top 10, MITRE ATT&CK)

Familiarity with controls and control frameworks ( NIST Cybersecurity Framework, NIST 800-53, CIS Top 20, ISO, COBIT.)

Ability to work independently and in a team, taking a lead role on projects when necessary

Prior experience working in financial services or other highly-regulated sectors

Experience working in a hybrid IT environment that includes both traditional on-premises data centers and public cloud infrastructure (e.g., AWS, Azure, Google Cloud)

Experience with OpenStack