# Director, Tech Risk & Analysis

**Company**: Capital One
**Location**: McLean, VA
**Work arrangement**: hybrid
**Experience**: senior
**Job type**: full-time
**Salary**: $230,400 - $263,000
**Category**: Security
**Industry**: Finance

**Apply**: https://capitalone.wd12.myworkdayjobs.com/en-US/Capital_One/job/McLean-VA/Director--Tech-Risk---Analysis_R1005541-1?utm_source=yubhub.co&utm_medium=jobs_feed&utm_campaign=apply
**Canonical**: https://yubhub.co/job/director-tech-risk-and-analysis-d9ece76f-05b/

## Description

We are seeking a Director, Tech Risk & Analysis to join our team at Capital One. As a Director, Tech Risk & Analysis, you will be part of a team that drives cybersecurity governance, resilience, and risk transformation across the organisation.

The successful candidate will have the opportunity to be on the forefront of driving cybersecurity governance, resilience, and risk transformation across Capital One. You will lead the Cyber Strategy & Reporting team in designing, structuring, and producing executive- and Board-level reporting materials.

Responsibilities:

- Lead the Cyber Strategy & Reporting team in designing, structuring, and producing executive- and Board-level reporting materials

- Synthesize complex, technical cybersecurity findings and threat intelligence from cross-functional subject matter experts into cohesive themes

- Uplevels narrative frameworks to create rigorous, presentation-ready deliverables that effectively articulate risk posture, strategic progress, and actionable recommendations for executive decision-making

- Partner closely with the CISO, Cyber Leadership Team (SLT), and corporate governance stakeholders to streamline reporting cadences, elevate critical risk discussions, and maintain consistency across all lines of defense

- Possess an understanding of technology systems at an aggregate level, including networks, applications, cloud computing, and data

- Maintain a broad understanding of relevant operating systems and their respective vulnerabilities

- Demonstrate a broad understanding of major categories of cyber threats, how those threats can occur in our environment, and the measures required to safeguard the enterprise

- Understand associated reporting metrics and inform on cyber risk

- Leverage tools to analyze data and create charts to support cyber risk management efforts

- Quickly and accurately analyze data, assess risk, and prioritize published vulnerabilities and potential risks

- Research, assemble, and evaluate information regarding industry practices or applicable regulatory changes affecting cybersecurity policies or programs

- Make recommendations regarding changes to policies, procedures, and control programs to mitigate evolving risks

- Effectively self-challenge cyber control programs and escalate risks where appropriate

- Demonstrate sound lifecycle program management

- Report on vulnerability assessments

- Advise Accountable Executives of cyber-related risk

- Keep pace with the evolving cyber threat landscape

Basic Qualifications:

- Bachelor’s Degree or military experience

- At least 9 years of experience in technology, cybersecurity, technology auditing, systems risk management, or a combination

Preferred Qualifications:

- Skill in extracting core themes from technical subject matter experts and weaving them into a cohesive story

- Experience in briefing senior leadership, board members, and/or regulators

- 9+ years of Risk Management experience in Cyber or Information Security practice

- Experience in a second-line or oversight role at a financial institution or regulatory agency

- Professional Security Certification or Professional Risk Management Certification

This role is designated as a hybrid position. You are expected to adhere to Capital One's hybrid policy regarding required on-site presence at your designated office location.

The minimum and maximum full-time annual salaries for this role are:

- McLean, VA: $230,400 - $263,000

- New York, NY: $251,400 - $286,900

- Richmond, VA: $209,500 - $239,100

For more fresh new jobs, check out [yubhub.co](https://yubhub.co/).

## Skills

### Required
- cyber best practices
- threat analysis
- risk mitigation
- cybersecurity governance
- resilience
- risk transformation
- data analysis
- customer engagement
- technology systems
- networks
- applications
- cloud computing
- data

### Nice to have
- extracting core themes
- briefing senior leadership
- Risk Management experience
- second-line or oversight role
- Professional Security Certification

---

Source: [Apply at capitalone.wd12.myworkdayjobs.com](https://capitalone.wd12.myworkdayjobs.com/en-US/Capital_One/job/McLean-VA/Director--Tech-Risk---Analysis_R1005541-1?utm_source=yubhub.co&utm_medium=jobs_feed&utm_campaign=apply)