Risk Manager (Data & Technology Risk)

Role summary

This is a Risk Manager position centered on data risk and cyber risk in a tightly regulated setting, with a preference for candidates who have experience in financial services. The role supports the FinX program, which is replacing the enterprise ERP platform, and involves ensuring the work stays aligned with Enterprise Capital One policies, standards, and procedures.

The assignment is fully remote, but the working schedule must follow EST hours. The contract runs for 12 months and may be extended. The interview process consists of a one-hour panel discussion followed by a 45-minute fitment round.

What you'll do

• Guide the FinX program on compliance with internal policies and standards, especially in the areas of cyber, technology, and data risk.
• Manage access testing and data review activities for the program.
• Take the lead on risk assessments and work alongside other Financial Risk Management partners.
• Support the move from PeopleSoft to Workday from a business process, risk, and control perspective; no Workday technical background is needed.
• Work closely with process engineers, risk advisors, project management, SOX teams, and other specialists.
• Assume ownership of risk management workflows after the initial onboarding period.
• Help define risk assessment metrics as the program continues to evolve.

What we're looking for

• Background in finance, technology, or data risk is strongly preferred.
• Solid knowledge of risk management practices within financial services or similarly regulated environments.
• Excellent communication, collaboration, and stakeholder influence skills across all levels of an organization.
• Ability to think strategically, solve problems proactively, and work both independently and in cross-functional teams.

Additional details

• The team is small and collaborative, with access to partner groups when needed.
• The first month will focus on onboarding and learning COF policies and procedures.
• After the initial ramp-up, the selected person is expected to take full ownership of the role.
• Role-specific metrics will be developed as risk assessments mature over time.