Director- Business, Crisis & Third Party Risk | Retail Bank

We are seeking a visionary industry leader to serve as the Business Continuity, Crisis & Third Party Risk Leader for Banking and Premium Products at Capital One. In this high-impact role, you will drive the first-line (1

LOD) business continuity operational resiliency and readiness program, crisis response execution, and third-party risk management—specifically in the context of rapidly evolving technology and artificial intelligence. Positioned at the intersection of business operations, modern tech architecture, and AI-driven innovation, you will serve as a primary strategic partner to Tech Risk teams, Enterprise Supplier Management, and Enterprise Crisis Command Centers to safeguard operational stability, vendor performance, and customer trust.

You will also act as a trusted strategic advisor to senior business leaders and Account Executives (AEs). Distinct from traditional governance roles, this position demands a forward-looking mindset focused on maintaining seamless business continuity across complex banking operations, leading high-severity incident command during disruptions, and orchestrating lifecycle risk for an expanding ecosystem of tech and AI-driven vendors. Bringing deep expertise, strategic vision, and a commitment to continuous learning, you will lead cross-functional risk teams to build cutting-edge risk mitigation frameworks, ensure regulatory alignment, and harmonize business capabilities with underlying technology architecture.

Serve as the Business Continuity, Crisis & Third Party Risk Leader providing strategic 1

LOD oversight and trusted risk advisory across Consumer Banking, Small Business Banking (SBB), Premium Products, and Shopping divisions to business leaders and Account Executives (AEs). Partner seamlessly with Tech Risk teams, functional command centers, and 2

LOD Risk Offices to align business continuity objectives, threat telemetry, and risk frameworks. Command first-line business incident response and crisis management during major SEV disruptions, leading cross-functional remediation work streams (communications, business operations, executive briefings) to restore critical banking services rapidly. Directly collaborate with Tech Risk and Tech Vendor Management to co-design and execute Third Party Disaster Recovery (DR) frameworks, ensuring rigorous production testing and alignment with critical application recovery time objectives (RTOs).

Architect and govern proactive 1

LOD Third-Party Risk Management frameworks, overseeing end-to-end lifecycle risk for vendor ecosystems in close partnership with Enterprise Supplier Management (ESM) and 2

LOD TPRM. Establish continuous vendor oversight and risk telemetry to shift third-party oversight from reactive tracking to automated, dynamic risk mitigation across critical supplier relationships, focusing specifically on affiliate and 4th-party complexities as well as the emerging interactions of AI technology with third-party risk and threat vectors. Design, maintain, and exercise comprehensive Business Continuity Plans (BCPs) across the banking and premium product ecosystem, guaranteeing 100% policy adherence and ongoing audit readiness.

Act as the key business partner in technology resilience initiatives, translating business impact requirements to Tech Risk leads and ensuring technology roadmaps support core operational priorities. Drive rigorous post-incident reviews following high-severity operational events, ensuring root-cause findings translate into actionable remediation items across both business and technology roadmaps. Intersect with internal audit, regulatory partners (OCC, Federal Reserve), and 2

LOD oversight bodies to represent 1

LOD business continuity, crisis management, and third-party risk posture.

In today’s rapidly advancing technological landscape, maintaining robust business continuity and managing third-party risk requires continuous evolution. As emerging technologies and artificial intelligence shift operational paradigms, potential failure modes, threat vectors, and dependency chains become increasingly complex. Addressing these dynamic risks demands a proactive, adaptable approach. Embracing a growth mindset enables risk leaders to continuously upskill, re-evaluate threat models, and leverage innovative, data-driven frameworks to maintain resilience and foster ongoing success.