technology risk manager

Information Technology Senior Management Forum

<div><div>Posted Date
4/13/2026
</div><div>Description
<div>Manager, Governance and Compliance
Capital One is one of the fastest growing organizations in the world today, powered by our passion for our customers. We are serious about technology, we dream big, and we execute
Technology and Data Risk Management (TDRM) is a medium sized organization that packs a big punch. The ~200 professionals in TDRM are trusted experts who oversee ~14,000 developers at Capital One. We raise the bar for excellence in cybersecurity, reliability, and tech risk. We shape strategy and decisions, challenge activities to ensure they meet our standards, and perform independent tests of our security and technology risk.
Role Description
TDRM is seeking a Manager-level associate with a risk and compliance management and assessment background. The individual will partner with innovative and passionate stakeholders across TDRM, to coordinate and execute the assessment of the compliance impacts of risk taking activities and evaluate international laws and regulatory requirements to understand their implications to Capital One. This role requires impeccable attention-to-detail, strong communication skills, keen judgment, and excellent analytical and critical thinking abilities.<h4 class="jobSectionHeader">
Key Responsibilities</h4>
Responsibilities include mapping complex legal and regulatory requirements&mdash;including federal, state, and international tech and cyber laws&mdash;to our internal business processes. This includes providing a &quot;credible challenge&quot; to ensure our systems and procedures are not only compliant but resilient against the evolving global regulatory landscape (including Discover and international payment requirements).<ul><li>
Compliance Advisory &amp; Challenge: Provide guidance and effective challenge on the compliance risk of business initiatives. Evaluate the adequacy of systems and procedures supporting the tech and cyber compliance program.</li><li>
Regulatory Mapping: Understand and assess the inventory of technology and cyber risk management related laws and regulations, as well as industry standards such as the NIST, PCI DSS, CSF and FFIEC guidance, and how they translate into organizational requirements and controls.</li><li>
Regulatory Applicability: Perform technology and cybersecurity risk management requirement applicability and impact assessments against business, technology and cyber processes.</li><li>
Risk Assessments: Coordinate and execute compliance assessments for risk taking activities and process breakdowns against these organizational technology and cybersecurity risk management requirements, including any planned remediation; ensuring the team has a documented, rationalized and repeatable assessment methodologies.</li><li>
Issue Management: Identify compliance issues requiring investigation or follow-up. Review complaints from various Lines of Business (LOB) and advise on necessary remediation.</li><li>
Stakeholder Collaboration: Work with internal and external stakeholders to develop and/or enhance existing compliance assessment reporting, and draft assessments for senior management and other stakeholders, to include regulatory agencies and the Board of Directors, as needed.</li></ul>
Basic Qualifications:<ul><li>
Bachelor&rsquo;s degree or military experience</li><li>
At least 4 years of experience working in the fields of information security, technology, or risk management</li><li>
At least 3 years of experience in a second-line or oversight role at a financial institution or regulatory agency</li><li>
At least 3 years of experience developing, evaluating, or implementing cybersecurity, technology or compliance risk assessments</li></ul>
Preferred Qualifications:<ul><li>
4+ years of experience in a second-line or oversight role at a financial institution or regulatory agency; prior compliance work at Visa, Mastercard or American Express</li><li>
Knowledge of supervisory expectations expressed in the FFIEC IT Handbook, Federal Reserve Supervisory Letters, Office of the Comptroller of the Currency Bulletins, or Federal Deposit Insurance Corporation Financial Institution Letters
</li><li>Professional security management certifications, such as a Certified Information Systems Security</li><li>
Working knowledge of domestic and international regulatory requirements and laws that govern credit and debit network</li><li>
Professional (CISSP) or Certified Information Security Manager (CISM)</li><li>
Excellent verbal and written communication skills</li><li>
Experience in cybersecurity, with the ability to be provide credible challenge when necessary</li><li>
Ability to manage multiple projects while maintaining superior results</li><li>
Ability to work cross-functionally</li></ul>
At this time, Capital One will not sponsor a new applicant for employment authorization for this position.
The minimum and maximum full-time annual salaries for this role are listed below, by location. Please note that this salary information is solely for candidates hired to perform work within one of these locations, and refers to the amount Capital One is willing to pay at the time of this posting. Salaries for part-time roles will be prorated based upon the agreed upon number of hours to be regularly worked.
McLean, VA: $164,800 - $188,100 for Manager, Cyber Risk &amp; Analysis 

New York, NY: $179,700 - $205,100 for Manager, Cyber Risk &amp; Analysis 

Richmond, VA: $149,800 - $171,000 for Manager, Cyber Risk &amp; Analysis 
Candidates hired to work in other locations will be subject to the pay range associated with that location, and the actual annualized salary amount offered to any candidate at the time of hire will be reflected solely in the candidate&rsquo;s offer letter.
This role is also eligible to earn performance based incentive compensation, which may include cash bonus(es) and/or long term incentives (LTI). Incentives could be discretionary or non discretionary depending on the plan.
Capital One offers a comprehensive, competitive, and inclusive set of health, financial and other benefits that support your total well-being. Learn more at the Capital One Careers website. Eligibility varies based on full or part-time status, exempt or non-exempt status, and management level.
This role is expected to accept applications for a minimum of 5 business days.No agencies please. Capital One is an equal opportunity employer (EOE, including disability/vet) committed to non-discrimination in compliance with applicable federal, state, and local laws. Capital One promotes a drug-free workplace. Capital One will consider for employment qualified applicants with a criminal history in a manner consistent with the requirements of applicable laws regarding criminal background inquiries, including, to the extent applicable, Article 23-A of the New York Correction Law; San Francisco, California Police Code Article 49, Sections 4901-4920; New York City&rsquo;s Fair Chance Act; Philadelphia&rsquo;s Fair Criminal Records Screening Act; and other applicable federal, state, and local laws and regulations regarding criminal background inquiries.
If you have visited our website in search of information on employment opportunities or to apply for a position, and you require an accommodation, please contact Capital One Recruiting at 1-800-304-9102 or via email at RecruitingAccommodation@capitalone.com. All information you provide will be kept confidential and will be used only to the extent required to provide needed reasonable accommodations.
For technical support or questions about Capital One's recruiting process, please send an email to Careers@capitalone.com
Capital One does not provide, endorse nor guarantee and is not liable for third-party products, services, educational tools or other information available through this site.
Capital One Financial is made up of several different entities. Please note that any position posted in Canada is for Capital One Canada, any position posted in the United Kingdom is for Capital One Europe and any position posted in the Philippines is for Capital One Philippines Service Corp. (COPSSC).
Manager, Governance and Compliance
Capital One is one of the fastest growing organizations in the world today, powered by our passion for our customers. We are serious about technology, we dream big, and we execute
Technology and Data Risk Management (TDRM) is a medium sized organization that packs a big punch. The ~200 professionals in TDRM are trusted experts who oversee ~14,000 developers at Capital One. We raise the bar for excellence in cybersecurity, reliability, and tech risk. We shape strategy and decisions, challenge activities to ensure they meet our standards, and perform independent tests of our security and technology risk.
Role Description
TDRM is seeking a Manager-level associate with a risk and compliance management and assessment background. The individual will partner with innovative and passionate stakeholders across TDRM, to coordinate and execute the assessment of the compliance impacts of risk taking activities and evaluate international laws and regulatory requirements to understand their implications to Capital One. This role requires impeccable attention-to-detail, strong communication skills, keen judgment, and excellent analytical and critical thinking abilities.<h4 class="jobSectionHeader">
Key Responsibilities</h4>
Responsibilities include mapping complex legal and regulatory requirements&mdash;including federal, state, and international tech and cyber laws&mdash;to our internal business processes. This includes providing a &quot;credible challenge&quot; to ensure our systems and procedures are not only compliant but resilient against the evolving global regulatory landscape (including Discover and international payment requirements).<ul><li>
Compliance Advisory &amp; Challenge: Provide guidance and effective challenge on the compliance risk of business initiatives. Evaluate the adequacy of systems and procedures supporting the tech and cyber compliance program.</li><li>
Regulatory Mapping: Understand and assess the inventory of technology and cyber risk management related laws and regulations, as well as industry standards such as the NIST, PCI DSS, CSF and FFIEC guidance, and how they translate into organizational requirements and controls.</li><li>
Regulatory Applicability: Perform technology and cybersecurity risk management requirement applicability and impact assessments against business, technology and cyber processes.</li><li>
Risk Assessments: Coordinate and execute compliance assessments for risk taking activities and process breakdowns against these organizational technology and cybersecurity risk management requirements, including any planned remediation; ensuring the team has a documented, rationalized and repeatable assessment methodologies.</li><li>
Issue Management: Identify compliance issues requiring investigation or follow-up. Review complaints from various Lines of Business (LOB) and advise on necessary remediation.</li><li>
Stakeholder Collaboration: Work with internal and external stakeholders to develop and/or enhance existing compliance assessment reporting, and draft assessments for senior management and other stakeholders, to include regulatory agencies and the Board of Directors, as needed.</li></ul>
Basic Qualifications:<ul><li>
Bachelor&rsquo;s degree or military experience</li><li>
At least 4 years of experience working in the fields of information security, technology, or risk management</li><li>
At least 3 years of experience in a second-line or oversight role at a financial institution or regulatory agency</li><li>
At least 3 years of experience developing, evaluating, or implementing cybersecurity, technology or compliance risk assessments</li></ul>
Preferred Qualifications:<ul><li>
4+ years of experience in a second-line or oversight role at a financial institution or regulatory agency; prior compliance work at Visa, Mastercard or American Express</li><li>
Knowledge of supervisory expectations expressed in the FFIEC IT Handbook, Federal Reserve Supervisory Letters, Office of the Comptroller of the Currency Bulletins, or Federal Deposit Insurance Corporation Financial Institution Letters
</li><li>Professional security management certifications, such as a Certified Information Systems Security</li><li>
Working knowledge of domestic and international regulatory requirements and laws that govern credit and debit network</li><li>
Professional (CISSP) or Certified Information Security Manager (CISM)</li><li>
Excellent verbal and written communication skills</li><li>
Experience in cybersecurity, with the ability to be provide credible challenge when necessary</li><li>
Ability to manage multiple projects while maintaining superior results</li><li>
Ability to work cross-functionally</li></ul>
At this time, Capital One will not sponsor a new applicant for employment authorization for this position.
The minimum and maximum full-time annual salaries for this role are listed below, by location. Please note that this salary information is solely for candidates hired to perform work within one of these locations, and refers to the amount Capital One is willing to pay at the time of this posting. Salaries for part-time roles will be prorated based upon the agreed upon number of hours to be regularly worked.
McLean, VA: $164,800 - $188,100 for Manager, Cyber Risk &amp; Analysis 

New York, NY: $179,700 - $205,100 for Manager, Cyber Risk &amp; Analysis 

Richmond, VA: $149,800 - $171,000 for Manager, Cyber Risk &amp; Analysis 
Candidates hired to work in other locations will be subject to the pay range associated with that location, and the actual annualized salary amount offered to any candidate at the time of hire will be reflected solely in the candidate&rsquo;s offer letter.
This role is also eligible to earn performance based incentive compensation, which may include cash bonus(es) and/or long term incentives (LTI). Incentives could be discretionary or non discretionary depending on the plan.
Capital One offers a comprehensive, competitive, and inclusive set of health, financial and other benefits that support your total well-being. Learn more at the Capital One Careers website. Eligibility varies based on full or part-time status, exempt or non-exempt status, and management level.
This role is expected to accept applications for a minimum of 5 business days.No agencies please. Capital One is an equal opportunity employer (EOE, including disability/vet) committed to non-discrimination in compliance with applicable federal, state, and local laws. Capital One promotes a drug-free workplace. Capital One will consider for employment qualified applicants with a criminal history in a manner consistent with the requirements of applicable laws regarding criminal background inquiries, including, to the extent applicable, Article 23-A of the New York Correction Law; San Francisco, California Police Code Article 49, Sections 4901-4920; New York City&rsquo;s Fair Chance Act; Philadelphia&rsquo;s Fair Criminal Records Screening Act; and other applicable federal, state, and local laws and regulations regarding criminal background inquiries.
If you have visited our website in search of information on employment opportunities or to apply for a position, and you require an accommodation, please contact Capital One Recruiting at 1-800-304-9102 or via email at RecruitingAccommodation@capitalone.com. All information you provide will be kept confidential and will be used only to the extent required to provide needed reasonable accommodations.
For technical support or questions about Capital One's recruiting process, please send an email to Careers@capitalone.com
Capital One does not provide, endorse nor guarantee and is not liable for third-party products, services, educational tools or other information available through this site.
Capital One Financial is made up of several different entities. Please note that any position posted in Canada is for Capital One Canada, any position posted in the United Kingdom is for Capital One Europe and any position posted in the Philippines is for Capital One Philippines Service Corp. (COPSSC).</div>
</div><div>Salary
164,800.00 - 188,100.00 Annual
</div><div></div><div><div>Type<div>
Full-time</div></div></div></div>

Manager, Governance and Compliance

U.S. Bank

<div>At U.S. Bank, we&rsquo;re on a journey to do our best. Helping the customers and businesses we serve to make better and smarter financial decisions and enabling the communities we support to grow and succeed. We believe it takes all of us to bring our shared ambition to life, and each person is unique in their potential. A career with U.S. Bank gives you a wide, ever-growing range of opportunities to discover what makes you thrive at every stage of your career. Try new things, learn new skills and discover what you excel at&mdash;all from Day One.<h2 class="jobSectionHeader">
Job Description</h2><div>
U.S. Bank is seeking an Operational Risk Review (ORR) Technology Manager (&quot;Manager&quot;) responsible for leading a team of Lead Analyst(s) and Analyst(s) (collectively &ldquo;Analysts&rdquo;) in the administration and execution of review activities within Independent Risk Review and Assessment (IRRA), a centralized second line of defense independent review function. This role offers an exciting opportunity to drive the continued growth, enhancement, and delivery of IRRA&rsquo;s ORR program. 
 
ORR provides risk-based review and effective challenge of the Company's operational risk (inclusive of technology risk), and operational risk-related processes and controls associated with the products and services offered across all business lines and enabling functions. Based on the Company's enterprise risk taxonomy, in-scope operational risk categories include: Fraud, Operations, People, Security of Physical Assets, Third Party, Business Resiliency, Systems, Cyber/Information Security, Legal, Model, Conduct, Data Management, and Fiduciary. Objective risk mitigation, process, and control review activities include planning and scoping, design and execution, reporting and rating, and Issue creation and validation. 
 
Key roles and responsibilities of the ORR Technology Manager include working with business lines and other Risk, Compliance, and Audit professionals across the Company to evaluate processes and controls to ensure an effective risk management framework. The ORR Technology Manager is responsible for directly managing a team of Lead Analyst(s) and Analyst(s), including overseeing review activities, timely completion of planned reviews, conducting performance management, and overall staff development. The Manager leads and oversees projects and activities to confirm compliance with internal policies, industry standards, and applicable laws and regulations related to technology, business resiliency, data governance, cyber, systems, artificial intelligence (AI), and information security. Through review performance, the Manager is responsible for the identification of gaps, weaknesses, and risk exposures within the control and process environment. If gaps are identified, the Manager will partner with the business line and Risk Management groups to recommend and influence solutions to mitigate operational risks. The Manager is responsible will deliver effective verbal and written communication of review results to the ORR Senior Manager, including draft Issues and Reports, and will respond to and/or escalation of significant risks, as appropriate.<div>
Basic Qualifications 
<ul><li>Bachelor's degree, or equivalent work experience</li><li>Typically more than 10 years of applicable experience</li></ul></div>
Preferred Skills/Experience<ul><li>Proven leadership skills.</li><li>Subject Matter Expert or advanced knowledge of technology, business resiliency, systems, data governance, cyber, and information security risks as well as industry trends that impact Bank operations.</li><li>Thorough understanding of risk management standards, the common definition of internal controls, and how control frameworks are designed and operate to mitigate risks.</li><li>Deep understanding of the business line&rsquo;s operations, products, services, systems, and associated risks.</li><li>Deep business acumen and credibility to help business line(s) proactively identify risks and address changing risk landscape.</li><li>Superb process facilitation, project management, and analytical skills with the ability to manage multiple tasks and deadlines simultaneously.</li><li>Excellent presentation, interpersonal, written and verbal communication skills.</li><li>Proficient computer navigation skills using a variety of software packages, including Microsoft Office applications and word processing, spreadsheets, databases, and presentations.</li><li>Applicable professional certifications (e.g., CISA, GSNA, CISSP, CRISC, CIA, etc.) are preferred.</li></ul>
This role requires working from a U.S. Bank location three (3) or more days per week.</div>
If there&rsquo;s anything we can do to accommodate a disability during any portion of the application or hiring process, please refer to our disability accommodations for applicants.
Benefits:
Our approach to benefits and total rewards considers our team members&rsquo; whole selves and what may be needed to thrive in and outside work. That's why our benefits are designed to help you and your family boost your health, protect your financial security and give you peace of mind. Our benefits include the following:<ul><li>
Healthcare (medical, dental, vision)</li><li>
Basic term and optional term life insurance</li><li>
Short-term and long-term disability</li><li>
Pregnancy disability and parental leave</li><li>
401(k) and employer-funded retirement plan</li><li>
Paid vacation (from two to five weeks depending on salary grade and tenure)</li><li>
Up to 11 paid holiday opportunities</li><li>
Adoption assistance</li><li>
Sick and Safe Leave accruals of one hour for every 30 worked, up to 80 hours per calendar year unless otherwise provided by law</li></ul>
Review our full benefits available by employment status here.
U.S. Bank is an equal opportunity employer. We consider all qualified applicants without regard to race, religion, color, sex, national origin, age, sexual orientation, gender identity, disability or veteran status, and other factors protected under applicable law.
E-Verify
U.S. Bank participates in the U.S. Department of Homeland Security E-Verify program in all facilities located in the United States and certain U.S. territories. The E-Verify program is an Internet-based employment eligibility verification system operated by the U.S. Citizenship and Immigration Services.
The salary range reflects figures based on the primary location, which is listed first. The actual range for the role may differ based on the location of the role. In addition to salary, U.S. Bank offers a comprehensive benefits package, including incentive and recognition programs, equity stock purchase 401(k) contribution and pension (all benefits are subject to eligibility requirements). Pay Range: $133,365.00 - $156,900.00
U.S. Bank will consider qualified applicants with arrest or conviction records for employment. U.S. Bank conducts background checks consistent with applicable local laws, including the Los Angeles County Fair Chance Ordinance and the California Fair Chance Act as well as the San Francisco Fair Chance Ordinance. U.S. Bank is subject to, and conducts background checks consistent with the requirements of Section 19 of the Federal Deposit Insurance Act (FDIA). In addition, certain positions may also be subject to the requirements of FINRA, NMLS registration, Reg Z, Reg G, OFAC, the NFA, the FCPA, the Bank Secrecy Act, the SAFE Act, and/or federal guidelines applicable to an agreement, such as those related to ethics, safety, or operational procedures.
Applicants must be able to comply with U.S. Bank policies and procedures including the Code of Ethics and Business Conduct and related workplace conduct and safety policies.
Posting may be closed earlier due to high volume of applicants.</div>

Operational Risk Review Manager - Technology

<div><div>Posted Date
4/10/2026
</div><div>Description
<div>Risk Manager, Endpoint Security
Capital One is one of the fastest growing organizations in the world today, powered by our passion for our customers. We are serious about technology, we dream big, and we execute: Capital One moved our entire enterprise to the public cloud over the course of five years. Just as we prioritize driving innovation through technology, we equally prioritize cybersecurity, reliability, software quality, and data management.
Technology &amp; Data Risk Management (TDRM) is a small organization that packs a big punch. The ~200 TDRM professionals are trusted experts who oversee ~14,000 developers at Capital One. We raise the bar for excellence in cybersecurity, reliability, and tech risk, and data management risk. We shape strategy and decisions, challenge activities to ensure they meet our standards, and perform independent tests of our security and technology risk.
For years, the cybersecurity community has debated whether the CISO should report to the CIO or not. In regulated financial services, the answer is: both. The 1st Line CISO has operational responsibilities and reports to the CIO. The 2nd Line Chief Tech Risk Officer (CTRO) and the TDRM organization have broader responsibilities for cybersecurity but also reliability, software quality, resilience, and the risk of failing to manage our data. The CTRO is independent and oversees the work of the CISO, the CIO/CTO, and the Chief Data Officer. The CTRO reports to the Chief Risk Officer, who reports directly to the CEO.
Our business leaders must make technology decisions constantly. TDRM makes sure they have the tech and data risk information they need to make good decisions. Associates within TDRM are highly-skilled information security, cybersecurity, site reliability engineering, technology, data analyst, data scientist, and risk management professionals. They have a wealth of experience and a demonstrated ability to add value with their advice and to deliver high-impact results.
?The Risk Manager, Endpoint Security represents a unique opportunity for those with hands-on cybersecurity technical and operational experience who have a desire to leverage and enhance that expertise in a risk management organization. This individual will have the ability to use technical skills and cyber subject matter expertise to provide effective oversight, credible challenge, and expert advice to help manage and control risk associated with cyber operations. This position will play a key and influential role in assessing and challenging cybersecurity capabilities and operational effectiveness to drive action against areas of risk and concern.
?This role will play a key role in the review, risk identification, risk assessment, reporting, and effective challenge of cybersecurity controls, operational capabilities, and associated processes. This individual will provide subject matter expertise and oversight and effective challenge of Capital One&rsquo;s Endpoint Security domain. This domain includes the deployment and enablement of cyber capabilities for user endpoints and servers across physical and virtual environments.
Responsibilities:<ul><li>
Provide advisory, oversight, and effective challenge to the 1st Line of defense.</li><li>
Provide technical assessments of cybersecurity controls design and effectiveness.</li><li>
Draft assessments for senior management and other stakeholders, to include regulatory agencies and the Board of Directors, as needed.</li><li>
Stay current on emerging cyber threats and potential implications to the firm.</li><li>
Collaborate effectively with colleagues, stakeholders, and leaders across multiple organizations to achieve objectives.</li><li>
Coordinate program-related activities and deliverables to ensure effective collaboration within the team and across stakeholder groups.</li><li>
Proven track record of leading, mentoring, and influencing others.</li><li>
Ability to communicate clearly in written and verbal form.</li><li>
Ability to manage multiple projects while maintaining superior results.</li><li>
Ability to work individually and cross-functionally.</li><li>
Execution oriented and a self-motivator.</li></ul>
Basic Qualifications:<ul><li>
Bachelor&rsquo;s degree or military experience</li><li>
At least 5 years of experience implementing endpoint detection and response (EDR) tools with anti-malware and anti-virus functionality</li><li>
At least 3 years of experience implementing application whitelisting technologies</li><li>
At least 3 years of experience implementing next-generation endpoint platforms such as virtual desktop infrastructure (VDI) or thin clients or thin platforms.</li><li>
At least 3 years of experience implementing tools and processes that remove sensitive data off endpoints</li><li>
At least 3 years of experience with Mobile Device Management (MDM) or Mobile Application Management (MAM)</li><li>
At least 2 years of experience with Privileged Access Management (PAM) tools</li><li>
At least 2 years of consulting, audit, or risk management experience</li></ul>
Preferred Qualifications:<ul><li>
Familiarity with NIST Cybersecurity Framework controls, NIST 800-53, ISO 27000-1</li><li>
Cybersecurity certifications such as: Certified Information Systems Security Professional (CISSP); Certified Information Security Manager (CISM); or Certified in Risk and Information Systems Control (CRISC)</li><li>
Cloud certifications for Amazon Web Services (AWS) or Google Cloud Platform (GCP)</li></ul>
At this time, Capital One will not sponsor a new applicant for employment authorization for this position.
The minimum and maximum full-time annual salaries for this role are listed below, by location. Please note that this salary information is solely for candidates hired to perform work within one of these locations, and refers to the amount Capital One is willing to pay at the time of this posting. Salaries for part-time roles will be prorated based upon the agreed upon number of hours to be regularly worked.
McLean, VA: $197,300 - $225,100 for Manager, Cyber Technical 

New York, NY: $215,200 - $245,600 for Manager, Cyber Technical 

Plano, TX: $179,400 - $204,700 for Manager, Cyber Technical 

Richmond, VA: $179,400 - $204,700 for Manager, Cyber Technical 
Candidates hired to work in other locations will be subject to the pay range associated with that location, and the actual annualized salary amount offered to any candidate at the time of hire will be reflected solely in the candidate&rsquo;s offer letter.
This role is also eligible to earn performance based incentive compensation, which may include cash bonus(es) and/or long term incentives (LTI). Incentives could be discretionary or non discretionary depending on the plan.
Capital One offers a comprehensive, competitive, and inclusive set of health, financial and other benefits that support your total well-being. Learn more at the Capital One Careers website. Eligibility varies based on full or part-time status, exempt or non-exempt status, and management level.
This role is expected to accept applications for a minimum of 5 business days.No agencies please. Capital One is an equal opportunity employer (EOE, including disability/vet) committed to non-discrimination in compliance with applicable federal, state, and local laws. Capital One promotes a drug-free workplace. Capital One will consider for employment qualified applicants with a criminal history in a manner consistent with the requirements of applicable laws regarding criminal background inquiries, including, to the extent applicable, Article 23-A of the New York Correction Law; San Francisco, California Police Code Article 49, Sections 4901-4920; New York City&rsquo;s Fair Chance Act; Philadelphia&rsquo;s Fair Criminal Records Screening Act; and other applicable federal, state, and local laws and regulations regarding criminal background inquiries.
If you have visited our website in search of information on employment opportunities or to apply for a position, and you require an accommodation, please contact Capital One Recruiting at 1-800-304-9102 or via email at RecruitingAccommodation@capitalone.com. All information you provide will be kept confidential and will be used only to the extent required to provide needed reasonable accommodations.
For technical support or questions about Capital One's recruiting process, please send an email to Careers@capitalone.com
Capital One does not provide, endorse nor guarantee and is not liable for third-party products, services, educational tools or other information available through this site.
Capital One Financial is made up of several different entities. Please note that any position posted in Canada is for Capital One Canada, any position posted in the United Kingdom is for Capital One Europe and any position posted in the Philippines is for Capital One Philippines Service Corp. (COPSSC).
Risk Manager, Endpoint Security
Capital One is one of the fastest growing organizations in the world today, powered by our passion for our customers. We are serious about technology, we dream big, and we execute: Capital One moved our entire enterprise to the public cloud over the course of five years. Just as we prioritize driving innovation through technology, we equally prioritize cybersecurity, reliability, software quality, and data management.
Technology &amp; Data Risk Management (TDRM) is a small organization that packs a big punch. The ~200 TDRM professionals are trusted experts who oversee ~14,000 developers at Capital One. We raise the bar for excellence in cybersecurity, reliability, and tech risk, and data management risk. We shape strategy and decisions, challenge activities to ensure they meet our standards, and perform independent tests of our security and technology risk.
For years, the cybersecurity community has debated whether the CISO should report to the CIO or not. In regulated financial services, the answer is: both. The 1st Line CISO has operational responsibilities and reports to the CIO. The 2nd Line Chief Tech Risk Officer (CTRO) and the TDRM organization have broader responsibilities for cybersecurity but also reliability, software quality, resilience, and the risk of failing to manage our data. The CTRO is independent and oversees the work of the CISO, the CIO/CTO, and the Chief Data Officer. The CTRO reports to the Chief Risk Officer, who reports directly to the CEO.
Our business leaders must make technology decisions constantly. TDRM makes sure they have the tech and data risk information they need to make good decisions. Associates within TDRM are highly-skilled information security, cybersecurity, site reliability engineering, technology, data analyst, data scientist, and risk management professionals. They have a wealth of experience and a demonstrated ability to add value with their advice and to deliver high-impact results.
?The Risk Manager, Endpoint Security represents a unique opportunity for those with hands-on cybersecurity technical and operational experience who have a desire to leverage and enhance that expertise in a risk management organization. This individual will have the ability to use technical skills and cyber subject matter expertise to provide effective oversight, credible challenge, and expert advice to help manage and control risk associated with cyber operations. This position will play a key and influential role in assessing and challenging cybersecurity capabilities and operational effectiveness to drive action against areas of risk and concern.
?This role will play a key role in the review, risk identification, risk assessment, reporting, and effective challenge of cybersecurity controls, operational capabilities, and associated processes. This individual will provide subject matter expertise and oversight and effective challenge of Capital One&rsquo;s Endpoint Security domain. This domain includes the deployment and enablement of cyber capabilities for user endpoints and servers across physical and virtual environments.
Responsibilities:<ul><li>
Provide advisory, oversight, and effective challenge to the 1st Line of defense.</li><li>
Provide technical assessments of cybersecurity controls design and effectiveness.</li><li>
Draft assessments for senior management and other stakeholders, to include regulatory agencies and the Board of Directors, as needed.</li><li>
Stay current on emerging cyber threats and potential implications to the firm.</li><li>
Collaborate effectively with colleagues, stakeholders, and leaders across multiple organizations to achieve objectives.</li><li>
Coordinate program-related activities and deliverables to ensure effective collaboration within the team and across stakeholder groups.</li><li>
Proven track record of leading, mentoring, and influencing others.</li><li>
Ability to communicate clearly in written and verbal form.</li><li>
Ability to manage multiple projects while maintaining superior results.</li><li>
Ability to work individually and cross-functionally.</li><li>
Execution oriented and a self-motivator.</li></ul>
Basic Qualifications:<ul><li>
Bachelor&rsquo;s degree or military experience</li><li>
At least 5 years of experience implementing endpoint detection and response (EDR) tools with anti-malware and anti-virus functionality</li><li>
At least 3 years of experience implementing application whitelisting technologies</li><li>
At least 3 years of experience implementing next-generation endpoint platforms such as virtual desktop infrastructure (VDI) or thin clients or thin platforms.</li><li>
At least 3 years of experience implementing tools and processes that remove sensitive data off endpoints</li><li>
At least 3 years of experience with Mobile Device Management (MDM) or Mobile Application Management (MAM)</li><li>
At least 2 years of experience with Privileged Access Management (PAM) tools</li><li>
At least 2 years of consulting, audit, or risk management experience</li></ul>
Preferred Qualifications:<ul><li>
Familiarity with NIST Cybersecurity Framework controls, NIST 800-53, ISO 27000-1</li><li>
Cybersecurity certifications such as: Certified Information Systems Security Professional (CISSP); Certified Information Security Manager (CISM); or Certified in Risk and Information Systems Control (CRISC)</li><li>
Cloud certifications for Amazon Web Services (AWS) or Google Cloud Platform (GCP)</li></ul>
At this time, Capital One will not sponsor a new applicant for employment authorization for this position.
The minimum and maximum full-time annual salaries for this role are listed below, by location. Please note that this salary information is solely for candidates hired to perform work within one of these locations, and refers to the amount Capital One is willing to pay at the time of this posting. Salaries for part-time roles will be prorated based upon the agreed upon number of hours to be regularly worked.
McLean, VA: $197,300 - $225,100 for Manager, Cyber Technical 

New York, NY: $215,200 - $245,600 for Manager, Cyber Technical 

Plano, TX: $179,400 - $204,700 for Manager, Cyber Technical 

Richmond, VA: $179,400 - $204,700 for Manager, Cyber Technical 
Candidates hired to work in other locations will be subject to the pay range associated with that location, and the actual annualized salary amount offered to any candidate at the time of hire will be reflected solely in the candidate&rsquo;s offer letter.
This role is also eligible to earn performance based incentive compensation, which may include cash bonus(es) and/or long term incentives (LTI). Incentives could be discretionary or non discretionary depending on the plan.
Capital One offers a comprehensive, competitive, and inclusive set of health, financial and other benefits that support your total well-being. Learn more at the Capital One Careers website. Eligibility varies based on full or part-time status, exempt or non-exempt status, and management level.
This role is expected to accept applications for a minimum of 5 business days.No agencies please. Capital One is an equal opportunity employer (EOE, including disability/vet) committed to non-discrimination in compliance with applicable federal, state, and local laws. Capital One promotes a drug-free workplace. Capital One will consider for employment qualified applicants with a criminal history in a manner consistent with the requirements of applicable laws regarding criminal background inquiries, including, to the extent applicable, Article 23-A of the New York Correction Law; San Francisco, California Police Code Article 49, Sections 4901-4920; New York City&rsquo;s Fair Chance Act; Philadelphia&rsquo;s Fair Criminal Records Screening Act; and other applicable federal, state, and local laws and regulations regarding criminal background inquiries.
If you have visited our website in search of information on employment opportunities or to apply for a position, and you require an accommodation, please contact Capital One Recruiting at 1-800-304-9102 or via email at RecruitingAccommodation@capitalone.com. All information you provide will be kept confidential and will be used only to the extent required to provide needed reasonable accommodations.
For technical support or questions about Capital One's recruiting process, please send an email to Careers@capitalone.com
Capital One does not provide, endorse nor guarantee and is not liable for third-party products, services, educational tools or other information available through this site.
Capital One Financial is made up of several different entities. Please note that any position posted in Canada is for Capital One Canada, any position posted in the United Kingdom is for Capital One Europe and any position posted in the Philippines is for Capital One Philippines Service Corp. (COPSSC).</div>
</div><div>Salary
197,300.00 - 225,100.00 Annual
</div><div></div><div><div>Type<div>
Full-time</div></div></div></div>

Risk Manager, Endpoint Security

Taraki

<div>
 Our client
 
 PVARA
 
 is looking for
 
 General Manager (Technology &amp; Cyber Risk)
 
 in
 
 Islamabad.
 
 
 
 
 About PVARA:
 
 
 
 Pakistan's Virtual Assets Act, 2025 introduces the country's first comprehensive legal framework for overseeing virtual assets and the businesses that operate in this space. PVARA is the dedicated authority responsible for licensing, supervising, and regulating Virtual Assets (VAs) and Virtual Asset Service Providers (VASPs) operating in the country.
 
 
 
 About The Role
 
 
 
 <ul>
 <li>
 At least 8&ndash;10 years of experience in technology leadership, cybersecurity, Blockchain development, or technology risk management, with:
 </li>
 <li>
 Proven track record leading technology functions in financial services, fintech, or regulatory organizations.
 </li>
 <li>
 Deep hands-on experience with Blockchain protocols, smart contracts, and cryptographic systems.
 </li>
 <li>
 Strong cybersecurity expertise including threat modeling, penetration testing, and incident response.
 </li>
 <li>
 Experience building technology infrastructure, data platforms, and analytics capabilities.
 </li>
 <li>
 Understanding of technology governance, risk management, and regulatory requirements.
 
 
 
 </li>
 </ul>
 
 Education Requirements:
 
 
 
 <ul>
 <li>
 Bachelor's degree or equivalent in Computer Science, Cybersecurity, Cryptography, Information Systems, AI, Data Science, Blockchain or closely related technological discipline.
 </li>
 <li>
 Professional certifications such as CISSP, CEH, CISM, or Blockchain certifications (CBP, CBDE) shall be an added advantage.
 
 </li>
 </ul>
</div>

General Manager (Technology & Cyber Risk) - PVARA

Yousuf Adil (Chartered Accountants)

Job SummaryYousuf Adil Chartered Accountants is looking for the position of &ldquo;Manager - Technology &amp; Cyber Risk Advisory&rdquo; within Technology and Cyber Risk Advisory department for itsKarachi office. The incumbent will be responsible for:Job Description<ul><li>Lead end-to-end IT audit and advisory engagements, including planning, execution, reporting, and client communication.</li><li>Assess IT general controls (ITGC), application controls, cybersecurity, cloud environments, and emerging technologies.</li><li>Deliver insights and recommendations to strengthen client risk management and internal controls.</li><li>Support regulatory and compliance projects (e.g., ISO 27001, SOC 1/2, NIST, COBIT, etc.).</li><li>Develop and maintain strong client relationships and contribute to business development.</li><li>Manage and coach junior team members, promoting a culture of excellence and collaboration.</li><li>Relevant certifications such as CISA, CISM, CRISC, or ISO 27001 Lead Auditor are highly preferred.</li><li>Assist in preparing technical proposals for new venture or collaborations .</li></ul>Qualification<ul><li>BS - Computer Science /Information Systems / Cyber Security or related fields.</li></ul>Experience<ul><li>6+ years of experience in IT audit, advisory, cyber security or related fields (preferably in Big 4 firms or any similar sector/consulting services).</li></ul>Job Type: Full-timePay: From Rs200,000.00 per monthApplication Question(s):<ul><li>Do you have experience in IT audit, advisory, cyber security or related fields ?</li><li>Have you completed Bachelors in Computer Science /Information Systems / Cyber Security or related fields.?</li></ul><ul><li>Do you have experience working in any Big four Firms?</li></ul><ul><li>What is your current salary?</li></ul><ul><li>What is your expected salary?</li></ul><ul><li>What will be your notice period?</li></ul>Location:<ul><li>Karachi (Required)</li></ul>Work Location: In person

Manager - Technology and Cyber Risk Advisory

Morgan Stanley

<div>Company Profile:
Morgan Stanley is a leading global financial services firm providing a wide range of investment banking, securities, investment, and wealth management services. The Firm's employees serve clients worldwide, including corporations, governments, and individuals from more than 1,200 offices in 43 countries.
In the Legal &amp; Compliance division, we assist the Firm in achieving its business objectives by facilitating and overseeing the Firm&rsquo;s management of legal, regulatory and franchise risk.
What you&rsquo;ll do in the role:
Morgan Stanley Services Group, Inc. is seeking a Vice President, Enterprise Advisory in New York, New York to identify, assess, capture, and report on Cyber, Technology and Information Security risk and risk mitigation activities. Partner with relevant Technology, Business Units, and other Corporate and Infrastructure functions to develop a perspective on operational risk and ensure consideration of evolving regulatory expectation. Work with first line of defense in discussing and resolving control gaps, risk trends, risk issues, and incidents while also providing credible challenge of their assertions, assumptions, and conclusions. Coordinate with second line of defense colleagues in the department who cover business units and support functions in assessing the impact of disruption risks as they relate business and support processes. Participate in relevant governance, steering, and working group committees. Conduct risk assessments, perform critical analysis, and monitor data used to identify heightened risk and help develop risk remediation recommendations. Contribute to the development of presentations for executive management and senior risk managers, including reporting to boards and committees. Perform deep dives into material operational risk events (internal and external) and analyses of thematic operational risks. Contribute to Scenario Analyses activities where significant and emerging risks are assessed. Oversee execution of the New Product Assessment (NPA) for Cyber, Technology and Information Security components. Telecommuting permitted up to 2 days per week.
What you&rsquo;ll bring to the role:
<ul><li>Requires a Bachelor&rsquo;s degree in Electronic Engineering, Financial Engineering, or a related field of study
</li></ul><ul><li>Requires five (5) years of experience in the position offered or five (5) years as a Technical Architect, Client Contact Manager, Senior Consultant, or a closely related occupation
</li></ul><ul><li>Requires five (5) years of experience with the following skills:
</li></ul><ul><li>Cyber, Technology, and Information Security risk assessment;
</li><li>Third-Party Cyber Risk Management;
</li><li>IT Audit;
</li><li>performing risk assessments and overseeing the subsequent risk remediation;
</li><li>developing and monitoring risk metrics in Technology;
</li><li>Incident Management, Technology Risk Management, and Capacity Management;
</li><li>regulatory and industry frameworks including Gamm Leach Bliley Act, and National Institute of Standards and Technology;
</li><li>Governance, Risk, and Compliance platforms including Archer, OneTrust, Architect, Web Application Assessment, and Penetration Testing;
</li><li>creating and managing comprehensive risk reports to present key metrics and trends, supporting risk management, and decision-making processes;
</li><li>compliance with regulatory legal requirements and mandates by delivering accurate and timely reports in response to regulatory inquiries;
</li><li>providing subject matter recommendations based on risk analysis;
</li><li>Microsoft Excel including vlookup, index, match, sum, countifs, time functions, and Pivot Table; and
</li><li>creating presentation materials using Microsoft PowerPoint.
</li></ul>WHAT YOU CAN EXPECT FROM MORGAN STANLEY:
At Morgan Stanley, we raise, manage and allocate capital for our clients &ndash; helping them reach their goals. We do it in a way that&rsquo;s differentiated &ndash; and we&rsquo;ve done that for 90 years. Our values - putting clients first, doing the right thing, leading with exceptional ideas, committing to diversity and inclusion, and giving back - aren&rsquo;t just beliefs, they guide the decisions we make every day to do what's best for our clients, communities and more than 80,000 employees in 1,200 offices across 42 countries. At Morgan Stanley, you&rsquo;ll find an opportunity to work alongside the best and the brightest, in an environment where you are supported and empowered. Our teams are relentless collaborators and creative thinkers, fueled by their diverse backgrounds and experiences. We are proud to support our employees and their families at every point along their work-life journey, offering some of the most attractive and comprehensive employee benefits and perks in the industry. There&rsquo;s also ample opportunity to move about the business for those who show passion and grit in their work.
To learn more about our offices across the globe, please copy and paste https://www.morganstanley.com/about-us/global-offices into your browser.
Expected base pay rates for the role will be between $200,000 and $205,000 per year at the commencement of employment. However, base pay if hired will be determined on an individualized basis and is only part of the total compensation package, which, depending on the position, may also include commission earnings, incentive compensation, discretionary bonuses, other short and long-term incentive packages, and other Morgan Stanley sponsored benefit programs.
Morgan Stanley is an equal opportunity employer committed to building and maintaining a workforce that is diverse in experience and background. Our recruiting efforts reflect our strong commitment to a culture of inclusion, where individuals are hired, developed, and advanced based on their skills and talents.
Our workforce reflects a broad cross-section of the global communities in which we operate, bringing a variety of backgrounds, talents, perspectives, and experiences.
For more information, please visit : https://www.morganstanley.com/people-opportunities/eeo .</div>

Vice President, Enterprise Advisory

JPMorganChase

<div>JOB DESCRIPTION 
Strengthen technology controls and issue management, translating risk into action that improves operational resilience.<div>
As a Tech Risk and Controls Lead at JPMorganChase within Network Services, you will identify, assess, and reduce technology risk by strengthening the control environment and improving issue management and reporting. You will partner with technology and business stakeholders to ensure controls are designed effectively, operating as intended, and supported by clear governance and evidence. You will translate complex risk topics into actionable insights that improve operational resilience and support regulatory and industry expectations.</div><div>
</div><div>Job responsibilities</div><ul><li>
Identify technology risks and control gaps, performing root cause analysis and recommending practical, sustainable remediation actions</li><li>
Assess the design and operating effectiveness of controls and provide clear guidance on control requirements, testing, and evidence expectations</li><li>
Partner with technology-aligned process owners to embed controls into day-to-day execution and improve control sustainability</li><li>
Execute governance routines for controls, policies, issues, and key risk indicators to provide transparent reporting to senior stakeholders</li><li>
Monitor control performance trends, emerging risk themes, and recurring issues to proactively strengthen the risk posture</li><li>
Coordinate across stakeholders to drive timely closure of control deficiencies and reduce residual risk</li><li>
Facilitate clear, consistent communications on technology risk posture, control health, and remediation progress</li><li>
Contribute to continuous improvement of risk and control processes through automation, standardization, and simplified reporting</li></ul><div>
</div><div>Required qualifications, capabilities and skills</div><ul><li>
Formal training or certification on technology risk and controls concepts and 5+ years applied experience</li><li>
Experience in technology risk management, controls, audit, information security, or a related field within a regulated environment</li><li>
Working knowledge of risk management frameworks and industry standards applicable to technology and cybersecurity risk</li><li>
Ability to evaluate control design and operating effectiveness, including documentation, testing approaches, and evidence quality</li><li>
Strong analytical and problem-solving skills with a focus on root cause identification and pragmatic solutions</li><li>
Strong written and verbal communication skills, including the ability to present risk insights to senior stakeholders</li><li>
Demonstrated ability to influence across teams without direct authority and drive outcomes through collaboration</li><li>
High attention to detail and ability to manage multiple priorities in a fast-paced environment</li></ul><div>
</div><div>Preferred qualifications, capabilities and skills</div><ul><li>
Industry-recognized certifications such as CISM, CRISC, CISSP, or similar</li><li>
Experience supporting network, infrastructure, or platform services risk and control environments</li><li>
Familiarity with regulatory exams, internal audit interactions, and evidence-based control testing practices</li><li>
Experience defining and using key risk indicators and metrics to track control health and remediation progress</li><li>
Experience improving governance and reporting through process redesign, automation, or data-driven insights</li></ul>
ABOUT US 
<div>
<div>JPMorganChase, one of the oldest financial institutions, offers innovative financial solutions to millions of consumers, small businesses and many of the world&rsquo;s most prominent corporate, institutional and government clients under the J.P. Morgan and Chase brands. Our history spans over 200 years and today we are a leader in investment banking, consumer and small business banking, commercial banking, financial transaction processing and asset management.
</div><div>We offer a competitive total rewards package including base salary determined based on the role, experience, skill set and location. Those in eligible roles may receive commission-based pay and/or discretionary incentive compensation, paid in the form of cash and/or forfeitable equity, awarded in recognition of individual achievements and contributions. We also offer a range of benefits and programs to meet employee needs, based on eligibility. These benefits include comprehensive health care coverage, on-site health and wellness centers, a retirement savings plan, backup childcare, tuition reimbursement, mental health support, financial coaching and more. Additional details about total compensation and benefits will be provided during the hiring process.
<div>We recognize that our people are our strength and the diverse talents they bring to our global workforce are directly linked to our success. We are an equal opportunity employer and place a high value on diversity and inclusion at our company. We do not discriminate on the basis of any protected attribute, including race, religion, color, national origin, gender, sexual orientation, gender identity, gender expression, age, marital or veteran status, pregnancy or disability, or any other basis protected under applicable law. We also make reasonable accommodations for applicants&rsquo; and employees&rsquo; religious practices and beliefs, as well as mental health or physical disability needs. Visit our FAQs for more information about requesting an accommodation.
JPMorgan Chase &amp; Co. is an Equal Opportunity Employer, including Disability/Veterans 
</div></div></div> 
 
ABOUT THE TEAM 
 
Our professionals in our Corporate Functions cover a diverse range of areas from finance and risk to human resources and marketing. Our corporate teams are an essential part of our company, ensuring that we&rsquo;re setting our businesses, clients, customers and employees up for success.</div>

Tech Risk and Controls - Network Services

Search 10000+ Technology risk manager jobs near you this April. New roles added regularly across leading industries. Apply today.