Director- Business, Crisis & Third Party Risk | Retail Bank

Overview

Director- Business, Crisis & Third Party Risk | Retail Bank

We are seeking a visionary industry leader to serve as the Business Continuity, Crisis & Third Party Risk Leader for Banking and Premium Products at Capital One. In this high-impact role, you will drive the first-line (1LOD) business continuity operational resiliency and readiness program, crisis response execution, and third-party risk management—specifically in the context of rapidly evolving technology and artificial intelligence. Positioned at the intersection of business operations, modern tech architecture, and AI-driven innovation, you will serve as a primary strategic partner to Tech Risk teams, Enterprise Supplier Management, and Enterprise Crisis Command Centers to safeguard operational stability, vendor performance, and customer trust. You will also act as a trusted strategic advisor to senior business leaders and Account Executives (AEs).

Distinct from traditional governance roles, this position demands a forward-looking mindset focused on maintaining seamless business continuity across complex banking operations, leading high-severity incident command during disruptions, and orchestrating lifecycle risk for an expanding ecosystem of tech and AI-driven vendors. Bringing deep expertise, strategic vision, and a commitment to continuous learning, you will lead cross-functional risk teams to build cutting-edge risk mitigation frameworks, ensure regulatory alignment, and harmonize business capabilities with underlying technology architecture.

Key Responsibilities:

• Serve as the Business Continuity, Crisis & Third Party Risk Leader providing strategic 1LOD oversight and trusted risk advisory across Consumer Banking, Small Business Banking (SBB), Premium Products, and Shopping divisions to business leaders and Account Executives (AEs).
• Partner seamlessly with Tech Risk teams, functional command centers, and 2LOD Risk Offices to align business continuity objectives, threat telemetry, and risk frameworks.
• Command first-line business incident response and crisis management during major SEV disruptions, leading cross-functional remediation workstreams (communications, business operations, executive briefings) to restore critical banking services rapidly.
• Directly collaborate with Tech Risk and Tech Vendor Management to co-design and execute Third Party Disaster Recovery (DR) frameworks, ensuring rigorous production testing and alignment with critical application recovery time objectives (RTOs).
• Architect and govern proactive 1LOD Third-Party Risk Management frameworks, overseeing end-to-end lifecycle risk for vendor ecosystems in close partnership with Enterprise Supplier Management (ESM) and 2LOD TPRM.
• Establish continuous vendor oversight and risk telemetry to shift third-party oversight from reactive tracking to automated, dynamic risk mitigation across critical supplier relationships, focusing specifically on affiliate and 4th-party complexities as well as the emerging interactions of AI technology with third-party risk and threat vectors.
• Design, maintain, and exercise comprehensive Business Continuity Plans (BCPs) across the banking and premium product ecosystem, guaranteeing 100% policy adherence and ongoing audit readiness.
• Act as the key business partner in technology resilience initiatives, translating business impact requirements to Tech Risk leads and ensuring technology roadmaps support core operational priorities.
• Drive rigorous post-incident reviews following high-severity operational events, ensuring root-cause findings translate into actionable remediation items across both business and technology roadmaps.
• Intersect with internal audit, regulatory partners (OCC, Federal Reserve), and 2LOD oversight bodies to represent 1LOD business continuity, crisis management, and third-party risk posture.

Keeping Pace with Technology, AI & Evolving Risk:

In today’s rapidly advancing technological landscape, maintaining robust business continuity and managing third-party risk requires continuous evolution. As emerging technologies and artificial intelligence shift operational paradigms, potential failure modes, threat vectors, and dependency chains become increasingly complex. Addressing these dynamic risks demands a proactive, adaptable approach. Embracing a growth mindset enables risk leaders to continuously upskill, re-evaluate threat models, and leverage innovative, data-driven frameworks to maintain resilience and foster ongoing success.

Basic Qualifications:

• Bachelor’s Degree or military experience
• At least 7 years of experience in Risk Management or Governance
• At least 3 years of experience in Operations Management
• At least 3 years of experience in Project Management
• At least 3 years of experience in People Management

Preferred Qualifications:

• Master’s Degree in Business Administration, Finance, Economics, or Project Management
• At least 10 years of experience in Risk Management, Third Party Risk (TPRM), or Business Continuity
• Certified Protection Professional (CPP), Certified Information Systems Auditor (CISA), Certified Third-Party Risk Professional (CTPRP), Project Management Professional (PMP), or Certified Business Continuity Professional (CBCP)
• Business Process Management certification (internal Capital One certification), Six Sigma Lean, Green Belt or Black Belt certification, or Agile Coach certification

At this time, Capital One will not sponsor a new applicant for employment authorization for this positio n.

The minimum and maximum full-time annual salaries for this role are listed below, by location. Please note that this salary information is solely for candidates hired to perform work within one of these locations, and refers to the amount Capital One is willing to pay at the time of this posting. Salaries for part-time roles will be prorated based upon the agreed upon number of hours to be regularly worked.

McLean, VA: $206,000 - $235,100 for Director, Risk Management

Richmond, VA: $187,300 - $213,700 for Director, Risk Management

Candidates hired to work in other locations will be subject to the pay range associated with that location, and the actual annualized salary amount offered to any candidate at the time of hire will be reflected solely in the candidate’s offer letter.

This role is also eligible to earn performance based incentive compensation, which may include cash bonus(es) and/or long term incentives (LTI). Incentives could be discretionary or non discretionary depending on the plan.

Capital One offers a comprehensive, competitive, and inclusive set of health, financial and other benefits that support your total well-being. Learn more at the Capital One Careers website . Eligibility varies based on full or part-time status, exempt or non-exempt status, and management level.

This role is expected to accept applications for a minimum of 5 business days.

No agencies please. Capital One is an equal opportunity employer (EOE, including disability/vet) committed to non-discrimination in compliance with applicable federal, state, and local laws. Capital One promotes a drug-free workplace. Capital One will consider for employment qualified applicants with a criminal history in a manner consistent with the requirements of applicable laws regarding criminal background inquiries, including, to the extent applicable, Article 23-A of the New York Correction Law; San Francisco, California Police Code Article 49, Sections 4901-4920; New York City’s Fair Chance Act; Philadelphia’s Fair Criminal Records Screening Act; and other applicable federal, state, and local laws and regulations regarding criminal background inquiries.

If you have visited our website in search of information on employment opportunities or to apply for a position, and you require an accommodation, please contact Capital One Recruiting at Show phone number or via email at View email address on capitalonecareers.com . All information you provide will be kept confidential and will be used only to the extent required to provide needed reasonable accommodations.

For technical support or questions about Capital One's recruiting process, please send an email to View email address on capitalonecareers.com

Capital One does not provide, endorse nor guarantee and is not liable for third-party products, services, educational tools or other information available through this site.

Capital One Financial is made up of several different entities. Please note that any position posted in Canada is for Capital One Canada, any position posted in the United Kingdom is for Capital One Europe and any position posted in the Philippines is for Capital One Philippines Service Corp. (COPSSC).