Talent.com
No longer accepting applications
Senior Manager, Technology Change Risk Oversight (10 / 29 / 2025)

Senior Manager, Technology Change Risk Oversight (10 / 29 / 2025)

Capital OneFredericksburg, Virginia, United States
11 hours ago
Job type
  • Full-time
  • Part-time
Job description

Senior Manager, Technology Change Risk Oversight

Capital One is one of the fastest growing organizations in the world today, powered by our passion for our customers. We are serious about technology, we dream big, and we execute : Capital One moved our entire enterprise to the public cloud over the course of five years. Just as we prioritize driving innovation through technology, we equally prioritize cybersecurity, reliability, and managing technology risk.

Technology Risk Management (TRM) is a small organization that packs a big punch. The ~100 professionals in TRM are trusted experts who oversee ~14,000 developers at Capital One. We raise the bar for excellence in cybersecurity, reliability, and tech risk. We shape strategy and decisions, challenge activities to ensure they meet our standards, and perform independent tests of our security and technology risk.

Our business leaders must make technology decisions constantly. TRM makes sure they have the tech risk information they need to make good decisions. Associates within TRM are highly-skilled information security, cybersecurity, site reliability engineering, technology, and risk management professionals. They have a wealth of experience and a demonstrated ability to add value with their advice and to deliver high-impact results.

As the Senior Manager, Technology Change Risk Oversightyou will play a key role in the review, risk identification, risk assessment, reporting, and effective challenge of technology processes, controls, and capabilities, including but not limited to material and high risk technology changes. You will provide subject matter expertise, oversight, and effective challenge of key Technology areas such as cloud services, enterprise architecture, cloud migrations, and overall technology deployments. As part of the second line of defense, this position will also collaborate closely with associates in first line Cyber, Technology, the Lines of Business, as well as other second line of defense risk management offices to perform and support evaluations of the effectiveness of the firm's controls infrastructure and offer independent advice and recommendations regarding ways to further mature the firm's cyber risk management capabilities.

Finally, as a member of a growing organization, you will have the opportunity to shape and further refine your portfolio commensurate with the priorities of the organization and the company. The demands and high-visibility nature of this position requires an expert with a proven ability to work independently in a fast-paced environment and who can begin contributing immediately.

Essential Functions (Responsibilities) :

  • Provide technical leadership in assessing the practices of designing, developing, testing and implementing cloud native solutions to crucial business problems through thoughtful use of industry best practices and Capital One policy.
  • Evaluate proposed and approved cloud technical solutions for automation, resiliency, performance, scalability, and security including appropriate tradeoffs, risks and opportunities
  • Evaluate / assess complex technological and business environment migrations to the cloud and integrated end-to-end solution options
  • Build and maintain relationships with technical leaders, business owners, engineers and other stakeholders to understand and evaluate implementation plans, business priorities and technical solutions to ensure risk are well communicated and understood by the key stakeholders
  • Keep up-to-date on cutting edge technology, standards, protocols and tools in areas relevant to the rapidly changing environment at Capital One, specifically cloud native architecture, serverless, and emerging AWS services
  • Demonstrate strong analytical, problem-solving, and decision-making skills
  • Communicate and drive highly complex technology solutions to broad audiences including executives, business leaders, product managers, legal experts, security specialists and software engineers
  • Define, structure and plan work independently
  • Perform independent risk assessment of our cloud environment focusing on architecture, engineering, networking, governance.
  • Provide expertise and advice regarding the effectiveness of device configurations, IT architecture, or IT engineering solutions
  • Consult with risk owners on the design and implementation or adjustment of mitigating controls associated with emerging technologies
  • Draft and publish independent reports for risk owners, senior management, and other stakeholders regarding risks associated with new or emerging technologies

Basic Qualifications :

  • Bachelor's Degree or military experience
  • At least 6 years of experience managing, consulting, auditing, or working in the fields of information security or information technology
  • At least 3 years experience with Public Cloud implementations
  • Preferred Qualifications :

  • Master's Degree in Computer Science or in an Engineering discipline
  • Professional certification (AWS Certified Solutions Architect, AWS Certified Security Speciality, AWS SysOps Administrator, or Certified Information Systems Security Professional (CISSP))
  • Experience with Information Security at the policy, architecture or implementation level
  • Ability to communicate clearly and to interact effectively at all levels of the organization, and to influence as warranted and appropriate to drive to consensus
  • Experience with identifying and communicating key risks related to cloud native implementations and architectures
  • Experience drafting reports or analytic assessments for senior management
  • Experience with analysis of emerging threats and reports that describe the implications of threat(s) and opportunities to executives or senior decision-makers
  • Passion and expertise in cybersecurity and technology risk, with an ability to be confident, respectful, and articulate when registering dissenting or unpopular opinions
  • Ability to manage multiple high-visibility and high-impact projects while maintaining superior results
  • Execution oriented and a self-motivator
  • Experience with threat modeling frameworks (STRIDE, OWASP Top 10, MITRE ATT&CK)
  • Familiarity with controls and control frameworks ( NIST Cybersecurity Framework, NIST 800-53, CIS Top 20, ISO, COBIT.)
  • Ability to work independently and in a team, taking a lead role on projects when necessary
  • Prior experience working in financial services or other highly-regulated sectors
  • Experience working in a hybrid IT environment that includes both traditional on-premises data centers and public cloud infrastructure (e.g., AWS, Azure, Google Cloud)
  • Experience with OpenStack
  • At this time, Capital One will not sponsor a new applicant for employment authorization for this position.

    This role is Hybrid, with associates expected to consistently spend three days per week in the office.

    The minimum and maximum full-time annual salaries for this role are listed below, by location. Please note that this salary information is solely for candidates hired to perform work within one of these locations, and refers to the amount Capital One is willing to pay at the time of this posting. Salaries for part-time roles will be prorated based upon the agreed upon number of hours to be regularly worked.

    McLean, VA : $225,400 - $257,200 for Sr Manager, Cyber Technical

    Richmond, VA : $204,900 - $233,800 for Sr Manager, Cyber Technical

    New York, NY : $245,900 - $280,600 for Sr Manager, Cyber Technical

    Riverwoods, IL : $204,900 - $233,800 for Sr Manager, Cyber Technical

    Candidates hired to work in other locations will be subject to the pay range associated with that location, and the actual annualized salary amount offered to any candidate at the time of hire will be reflected solely in the candidate's offer letter.

    This role is also eligible to earn performance based incentive compensation, which may include cash bonus(es) and / or long term incentives (LTI). Incentives could be discretionary or non discretionary depending on the plan.

    Capital One offers a comprehensive, competitive, and inclusive set of health, financial and other benefits that support your total well-being. Learn more at theCapital One Careers website. Eligibility varies based on full or part-time status, exempt or non-exempt status, and management level.

    This role is expected to accept applications for a minimum of 5 business days.No agencies please. Capital One is an equal opportunity employer (EOE, including disability / vet) committed to non-discrimination in compliance with applicable federal, state, and local laws. Capital One promotes a drug-free workplace. Capital One will consider for employment qualified applicants with a criminal history in a manner consistent with the requirements of applicable laws regarding criminal background inquiries, including, to the extent applicable, Article 23-A of the New York Correction Law; San Francisco, California Police Code Article 49, Sections 4901-4920; New York City's Fair Chance Act; Philadelphia's Fair Criminal Records Screening Act; and other applicable federal, state, and local laws and regulations regarding criminal background inquiries.

    If you have visited our website in search of information on employment opportunities or to apply for a position, and you require an accommodation, please contact Capital One Recruiting at 1-800-304-9102 or via email at RecruitingAccommodation@capitalone.com. All information you provide will be kept confidential and will be used only to the extent required to provide needed reasonable accommodations.

    For technical support or questions about Capital One's recruiting process, please send an email to Careers@capitalone.com

    Capital One does not provide, endorse nor guarantee and is not liable for third-party products, services, educational tools or other information available through this site.

    Capital One Financial is made up of several different entities. Please note that any position posted in Canada is for Capital One Canada, any position posted in the United Kingdom is for Capital One Europe and any position posted in the Philippines is for Capital One Philippines Service Corp. (COPSSC).

    Create a job alert for this search

    Technology Risk Manager • Fredericksburg, Virginia, United States

    Related jobs
    • Promoted
    Senior Signature Reduction Management Officer

    Senior Signature Reduction Management Officer

    Core OneFort Belvoir, VA, US
    Full-time
    Senior Signature Reduction Management Officer.Join our team at Core One! Our mission is to be at the forefront of devising analytical, operational and technical solutions to our Nation's most compl...Show moreLast updated: 30+ days ago
    • Promoted
    • New!
    Threat Manager - Senior Level | Insider Threat Management and Analysis [DITMAC0011010]

    Threat Manager - Senior Level | Insider Threat Management and Analysis [DITMAC0011010]

    ProSidian ConsultingQuantico, VA, US
    Full-time
    Threat Manager - Senior Level | Insider Threat Management and Analysis.ProSidian is a Management and Operations Consulting Services Firm focusing on providing value to clients through tailored solu...Show moreLast updated: 22 hours ago
    • Promoted
    • New!
    Boomi Integration Architect - Manager - 66086792

    Boomi Integration Architect - Manager - 66086792

    CognizantDoswell, VA, US
    Full-time
    Job Summary As a Technology Architect – Boomi, you will make an impact by designing and implementing scalable integration solutions across the Cards and Payments domain. You will be a valued member ...Show moreLast updated: 5 hours ago
    • Promoted
    Senior Cybersecurity Engineer - Compliance & Risk Management

    Senior Cybersecurity Engineer - Compliance & Risk Management

    Human Resources Research OrganizationAlexandria, VA, US
    Full-time
    Senior Cybersecurity Engineer - Compliance & Risk Management.The Human Resources Research Organization (HumRRO).We work with federal and state government agencies, private sector organizations,...Show moreLast updated: 30+ days ago
    • Promoted
    Strategy and Business Development Senior Manager

    Strategy and Business Development Senior Manager

    General DynamicsManassas, VA, US
    Full-time
    Strategy and Business Development Senior Manager.General Dynamics Mission Systems has an immediate opening for a passionate, experienced Strategy and Business Development Senior Manager (SBDSM) for...Show moreLast updated: 13 days ago
    • Promoted
    Boomi Integration Architect - Manager - 66086791

    Boomi Integration Architect - Manager - 66086791

    CognizantDoswell, VA, US
    Full-time
    About the role As a Boomi Integration Architect, you will make an impact by designing and implementing scalable integration solutions that enhance business operations and data flow across systems.Y...Show moreLast updated: 1 day ago
    • Promoted
    Senior Cybersecurity Specialist

    Senior Cybersecurity Specialist

    BarbaricumFort Belvoir, VA, US
    Full-time
    Barbaricum is a rapidly growing government contractor providing leading-edge support to federal customers, with a particular focus on Defense and National Security mission sets.We leverage more tha...Show moreLast updated: 30+ days ago
    Senior Technical Program Manager

    Senior Technical Program Manager

    PingWindAlexandria, Virginia, United States, 22301
    Full-time
    Senior Technical Program Manager.Must possess a favorably adjudicated Tier 5 investigation.Possess one of the following certifications : Global Security Leadership Certification (GSLC), Certified Ch...Show moreLast updated: 30+ days ago
    • Promoted
    Cybersecurity Subject Matter Expert - Lead

    Cybersecurity Subject Matter Expert - Lead

    Interactive Process Technology LLCFort Belvoir, VA, US
    Full-time
    Cybersecurity Subject Matter Expert - Lead.IPTA's Technology Solutions Team is passionate about providing our customers with technical solutions that satisfy their business needs.Through collab...Show moreLast updated: 30+ days ago
    • Promoted
    Senior Director, Cybersecurity and Data Privacy

    Senior Director, Cybersecurity and Data Privacy

    United Way WorldwideAlexandria, VA, US
    Full-time
    Eligible for Hybrid / 3 days in office - Alexandria, VA).The Senior Director, Cybersecurity and Data Privacy provides executive leadership to protect United Way Worldwide’s data, systems and r...Show moreLast updated: 11 days ago
    • Promoted
    Senior Cybersecurity Engineer

    Senior Cybersecurity Engineer

    RPI Group IncDahlgren, VA, US
    Full-time
    Contract Task Lead / Cybersecurity Lead.Navy customer at Dahlgren NSWC, VA.Develop cybersecurity requirements, policy standards, best practices, guidance, and procedures for combat systems.Conduct ...Show moreLast updated: 30+ days ago
    Cybersecurity Project Manager

    Cybersecurity Project Manager

    ESMCamp Springs, MD, USA
    Full-time
    Quick Apply
    Enterprise Solutions and Management (ESM) is a rapidly growing government contractor that provides strategic IT services that meet mission needs for Defense and Federal customers.Job Description an...Show moreLast updated: 30+ days ago
    • Promoted
    • New!
    Change Management Specialist Level IV Federal Financial Modernization Ft. Belvoir

    Change Management Specialist Level IV Federal Financial Modernization Ft. Belvoir

    BizFirstFort Belvoir, VA, US
    Full-time +2
    Change Management Specialist Level IV Federal Financial Modernization Ft.BizFirst is assisting our client with recruiting a full-time Change Management Specialist Level IV to support a mission-...Show moreLast updated: 22 hours ago
    Senior Cybersecurity Risk Management Analyst

    Senior Cybersecurity Risk Management Analyst

    Evolver FederalSpringfield, VA, USA
    Full-time
    Quick Apply
    Senior Cybersecurity Risk Management Analyst.Federal client in Springfield, VA in managing a portfolio of systems participating in Ongoing Authorization / Continuous ATO. This role will ensure compli...Show moreLast updated: 30+ days ago
    • New!
    Project Manager

    Project Manager

    RecruitTalent LLC.Fredericksburg, VA, United States
    Full-time
    Quick Apply
    General Responsibilities : Lead overall project planning, scheduling, and execution across all GWRC task areas.Develop and maintain Project Management Plans ...Show moreLast updated: less than 1 hour ago
    • Promoted
    Strategy and Business Development Senior Manager

    Strategy and Business Development Senior Manager

    Progeny Systems (Acquired by General Dynamics)Manassas, VA, US
    Full-time
    Strategy And Business Development Senior Manager.General Dynamics Mission Systems has an immediate opening for a passionate, experienced Strategy And Business Development Senior Manager (SBDSM) for...Show moreLast updated: 30+ days ago
    Organizational Change Management Lead (Remote)

    Organizational Change Management Lead (Remote)

    Ibis Public SectorAlexandria, VA, US
    Remote
    Full-time
    Quick Apply
    Ibis Public Sector (IPS) is looking for an Organizational Change Management Lead to shape and execute strategies that help stakeholders at all levels navigate complex change, build understanding an...Show moreLast updated: 21 days ago
    • Promoted
    Program Manager Lead

    Program Manager Lead

    Clearance JobsQuantico, VA, US
    Full-time
    CWS seeks a Program Manager (PM) Lead to manage and lead the AFNCR Network Infrastructure Support SETA services contract to provide a full range of functional and technical services within the LE / C...Show moreLast updated: 30+ days ago