Director, Tech Risk & Analysis

Director, Tech Risk & Analysis### Director, Tech Risk & Analysis Apply:
McLean, VA:
New York, NY:
Richmond, VA:
Full time:
Posted Today:
R1005541

Director, Tech Risk & Analysis Do you love navigating complex technology landscapes and safeguarding critical systems? Do you enjoy solving complex business problems in a fast-paced, collaborative, inclusive, and risk-conscious delivery environment? At Capital One, you'll be part of a big group of makers, breakers, doers and disruptors who love to solve real problems and meet real customer needs. We are seeking
** Tech Risk & Analysis Professionals
** who are passionate about cyber best practices, threat analysis, and risk mitigation to join our team. In this role, you’ll have the opportunity to be on the forefront of driving cybersecurity governance, resilience, and risk transformation across Capital One.
*
* Summary:

*** Applies expertise on cyber best practices to assess current state, identify gaps, and assess cyber risk, threats, and business impact
* Cybersecurity area-specific SME [knowledge of risk frameworks, information security risk assessments, information risk controls, regulatory and internal governance], data analysis [metrics and reporting], and customer engagement
* Acts as a master storyteller and strategic translator, bridging the gap between technical cybersecurity experts and executive leadership by synthesizing complex risk data into clear, compelling narratives.
* Drives the overarching strategy, framework, and execution of executive and Board-level reporting, ensuring alignment across the enterprise's cyber risk posture and strategic imperatives.  
** Responsibilities:
*** Leads the Cyber Strategy & Reporting team in designing, structuring, and producing executive- and Board-level reporting materials—including quarterly risk updates, strategic briefings, and committee read-outs—for the CISO and senior leadership.
* Synthesizes complex, technical cybersecurity findings and threat intelligence from cross-functional subject matter experts into cohesive themes, pulling the thread across disparate work streams to reveal the broader risk story.
* Uplevels narrative frameworks to create rigorous, presentation-ready deliverables that effectively articulate risk posture, strategic progress, and actionable recommendations for executive decision-making.
* Partners closely with the CISO, Cyber Leadership Team (SLT), and corporate governance stakeholders to streamline reporting cadences, elevate critical risk discussions, and maintain consistency across all lines of defense.
* Possesses an understanding of technology systems at an aggregate level, including networks, applications, cloud computing, and data
* Maintains a broad understanding of relevant operating systems and their respective vulnerabilities in order to quickly identify the severity of potential issues [doesn't just know how the tools and reports work, but also how to recognize risk]
* Demonstrates a broad understanding of major categories of cyber threats, how those threats can occur in our environment, and the measures required to safeguard the enterprise
* Understands associated reporting metrics and is able to inform on cyber risk
* Leverages tools [e.g. Excel/Google Sheets] to analyze data and create charts to support cyber risk management efforts
* Quickly and accurately analyzes data, assesses risk, and prioritizes published vulnerabilities and potential risks to differentiate critical, high-risk, and low-risk issues, and escalates as appropriate
* Researches, assembles, and/or evaluates information regarding industry practices or applicable regulatory changes affecting cybersecurity policies or programs; recommends sound, practical solutions to complex issues
* Makes recommendations…