Project Manager, Enterprise Data Risk Management

Project Manager, Enterprise Data Risk Management

Capital One is one of the fastest growing organizations in the world today, powered by our passion for our customers. We are serious about technology, we dream big, and we execute: Capital One moved our entire enterprise to the public cloud over the course of five years. Just as we prioritize driving innovation through technology, we equally prioritize cybersecurity, reliability, software quality, and data management.

Technology & Data Risk Management (TDRM) is a small organization that packs a big punch. The ~200 professionals in TDRM are trusted experts who oversee ~14,000 developers at Capital One. We raise the bar for excellence in cybersecurity, reliability, tech risk, and data management risk. We shape strategy and decisions, challenge activities to ensure they meet our standards, and perform independent tests of our security and technology risk.

For years, the cybersecurity community has debated whether the CISO should report to the CIO or not. In regulated financial services, the answer is: both. The first-line CISO has operational responsibilities and reports to the CIO. The second-line Chief Tech Risk Officer (CTRO) and the Tech & Data Risk Management (TDRM) organization have broader responsibilities for cybersecurity but also reliability, software quality, resilience, and the risk of failing to manage our data. The CTRO is independent and oversees the work of the CISO, the CIO/CTO, and the Chief Data Officer. The CTRO reports to the Chief Risk Officer, who reports directly to the CEO.

Our business leaders must constantly make technology decisions. TDRM makes sure they have the tech and data risk information they need to make good decisions. Associates within TDRM are highly-skilled information security, cybersecurity, site reliability engineering, technology, data analyst, data scientist, and risk management professionals. They have a wealth of experience and a demonstrated ability to add value with their advice and to deliver

Role Summary

As a Manager of Project Management within Enterprise Data Risk Management, you will organize and drive the delivery of strategic, cross-functional risk management programs. You will operate in whitespace to establish structure, guide senior stakeholders, and ensure project execution aligns with enterprise risk intent. This is a high-visibility individual contributor and project leadership role where you will turn complex, ambiguous data risk challenges into actionable project plans, RAID logs, and governance artifacts.

What You'll Do

• Strategic Program Leadership: Lead complex data risk projects and programs, providing clear direction and tactical leverage to senior leaders, cross-functional peers, and project team members.

• Structure in Whitespace: Rapidly introduce project frameworks, delivery rhythms, and governance artifacts to organize work in dynamic and ambiguous environments.

• Artifact & Risk Management: Design, maintain, and manage comprehensive project plans, RAID (Risks, Assumptions, Issues, Dependencies) trackers, and executive status reports, adapting to shifting enterprise priorities.

• Thought Partnership & Problem Solving: Collaborate cross-functionally across 1st and 2nd Line risk, technology, and business partners to resolve roadblocks, align on intent, and drive delivery commitments.

• Executive Communication: Communicate complex project statuses, risks, and strategic trade-offs concisely and persuasively to senior leadership and cross-division stakeholder groups.

• Process & Execution Excellence: Continuously evaluate delivery processes to drive efficiency, maintain data integrity, and elevate program quality across the division.

​Core Competencies & Expected Behaviors (Manager Level)
 

• Problem Solving & Discovery: Proactively identifies areas of concern in ambiguous environments, uncovers root causes, and translates complex data risk requirements into structured delivery roadmaps.

• Influence & Strategic Leverage: Effectively influences partners up to the Director (D+) level, building collaborative relationships across divisions to drive alignment without relying solely on formal authority.

• Results Focus & Gray Space Navigation: Independently manages priorities through high-volume, dynamic environments with minimal oversight, ensuring deliverables are completed with precision and high polish.

• Tailored Communication: Distills complex technical and risk topics into cle