# Director, Risk Advisory - Global Payment Networks

**Company**: Capital One
**Location**: McLean, VA
**Work arrangement**: hybrid
**Experience**: senior
**Job type**: full-time
**Salary**: $209,500 - $239,100 for Director, Tech Risk & Analysis (Chicago, IL), $230,400 - $263,000 for Director, Tech Risk & Analysis (McLean, VA), $251,400 - $286,900 for Director, Tech Risk & Analysis (New York, NY), $209,500 - $239,100 for Director, Tech Risk & Analysis (Richmond, VA), $209,500 - $239,100 for Director, Tech Risk & Analysis (Riverwoods, IL)
**Category**: Security
**Industry**: Finance

**Apply**: https://capitalone.wd12.myworkdayjobs.com/en-US/Capital_One/job/McLean-VA/Director--Risk-Advisory---Global-Payment-Networks_R1005133-1?utm_source=yubhub.co&utm_medium=jobs_feed&utm_campaign=apply
**Canonical**: https://yubhub.co/jobs/job_a5ae975c-07e

## Description

We are seeking a Director, Risk Advisory - Global Payment Networks to join our team at Capital One. As a Tech Risk & Analysis Professional, you will be responsible for applying expertise on cyber best practices to assess current state, identify gaps, and assess cyber risk, threats, and business impact.

**Responsibilities:**

- Possesses an understanding of technology systems at an aggregate level, including networks, applications, cloud computing, and data

- Maintains a broad understanding of relevant operating systems and their respective vulnerabilities in order to quickly identify the severity of potential issues

- Demonstrates a broad understanding of major categories of cyber threats, how those threats can occur in our environment, and the measures required to safeguard the enterprise

- Leverages reporting and tools to perform analysis on different types of projects, efforts, or datasets and uses data to inform policies and drive change

- Understands associated reporting metrics and is able to inform on cyber risk

- May use code to perform and/or automate analysis and repeatable tasks, but not a baseline requirement for the role

- Leverages tools to analyze data and create charts to support cyber risk management efforts

- Quickly and accurately analyzes data, assesses risk, and prioritizes published vulnerabilities and potential risks to differentiate critical, high-risk, and low-risk issues, and escalates as appropriate

- Researches, assembles, and/or evaluates information regarding industry practices or applicable regulatory changes affecting cybersecurity policies or programs; recommends sound, practical solutions to complex issues

- Makes recommendations regarding changes to policies, procedures, and control programs to mitigate evolving risks

- Effectively self-challenges cyber control programs as part of first-line duties and escalates risks where appropriate

- Demonstrates sound lifecycle program management to include documenting and communicating action plans, impediments and risks, and stakeholder engagement

- Reports on vulnerability assessments to ensure proper functionality and alignment with Information Security Standards

- Advises Accountable Executives of cyber-related risk on a consistent basis via relevant risk forums and through existing processes such as exception and issue management

- Keeps pace with the evolving cyber threat landscape to ensure ongoing relevance of cyber risk mitigation

**Basic Qualifications:**

- Bachelor’s Degree or military experience

- At least 9 years of experience in technology, cybersecurity, technology auditing, systems risk management, or a combination

**Preferred Qualifications:**

- Master’s Degree in Information Technology, Cybersecurity, or equivalent

- 9+ years of Risk Management experience in Cyber or Information Security practice

- 9+ years of experience in cloud computing (AWS, GCP, or Azure)

- 9+ years of experience in a second-line or oversight role at a financial institution or regulatory agency

- Third party risk management experience

- Professional Security Certification or Professional Risk Management Certification

- Certified Information Systems Security Professional (CISSP)

- Certified Information Systems Auditor (CISA)

- Certified in Risk and Information Systems Control (CRISC)

- Open FAIR Certified

**Salary:** Chicago, IL: $209,500 - $239,100 for Director, Tech Risk & Analysis McLean, VA: $230,400 - $263,000 for Director, Tech Risk & Analysis New York, NY: $251,400 - $286,900 for Director, Tech Risk & Analysis Richmond, VA: $209,500 - $239,100 for Director, Tech Risk & Analysis Riverwoods, IL: $209,500 - $239,100 for Director, Tech Risk & Analysis

**Benefits:** Capital One offers a comprehensive, competitive, and inclusive set of health, financial and other benefits that support your total well-being.

## Skills

### Required
- cyber best practices
- threat analysis
- risk mitigation
- technology systems
- cloud computing
- data analysis
- cybersecurity

### Nice to have
- Master’s Degree in Information Technology, Cybersecurity, or equivalent
- 9+ years of Risk Management experience in Cyber or Information Security practice
- 9+ years of experience in cloud computing (AWS, GCP, or Azure)
- Professional Security Certification or Professional Risk Management Certification
- Certified Information Systems Security Professional (CISSP)
- Certified Information Systems Auditor (CISA)
- Certified in Risk and Information Systems Control (CRISC)
- Open FAIR Certified

---

Source: [Apply at capitalone.wd12.myworkdayjobs.com](https://capitalone.wd12.myworkdayjobs.com/en-US/Capital_One/job/McLean-VA/Director--Risk-Advisory---Global-Payment-Networks_R1005133-1?utm_source=yubhub.co&utm_medium=jobs_feed&utm_campaign=apply)