Risk

• Support loss control/risk engineering efforts through interaction with internal and external stakeholders
• Perform/review Tier I and II level surveys
• Review and assign RSS inspection requests to identify the best resource(s) for required work
• Manage and maintain high quality deliverables including reviewing vendor reports for quality and accuracy
• Maintain current knowledge of federal, state and local regulations as they relate to the energy industry
• Provide access to guidance documents and materials to internal and external customers

Senior Risk Solution Specialist – Environmental & Energy

• Managing global risk activities
• Monitoring program performance
• Managing third-party service providers
• Analyzing risk data and trends
• Coordinating audits and reviews
• Tracking remediation activities
• Contributing to the development of standards, tools, and reporting that enhance Mars' operational resilience and risk maturity
• Supporting the ACM and BRM program deployment and administration
• Managing the daily execution and delivery of operational risk programs
• Seeking opportunities to enhance and align current operational risk programs for future consolidation to increase overall efficiency, effectiveness, sustainability, and business benefit
• Supporting global stakeholder groups and working with Associates across all Mars locations
• Managing critical program objectives and site compliance
• Maintaining general awareness, functional attentiveness and development/enhancement tracking of program technology and digital initiatives to increase the efficiency and effectiveness of delivery and engagement of the operational risk programs
• Supporting tracking of program budgets, vendor spend, and service utilization
• Responsible for primary coordination with all service providers / third party business partners to ensure contractual compliance and continuing alignment with overall operational risk objectives and guidelines
• Participating in key meetings and discussions - responsible for program related data and information capture and record management
• Supporting onboarding and integration of acquisitions into Mars Operational Risk programs, ensuring alignment with global standards and governance expectations
• Developing and maintaining a structured Operational Risk framework for external manufacturing, co-manufacturing, and co-packing partners supporting Mars operations globally

Operational Risk Manager

• Support the enterprise-focused TPRM policies and standards across the full lifecycle.
• Lead the execution of the annual TPRM Risk Oversight Program Self-Assessment and Process Criticality Assessments to ensure robust framework compliance.
• Serve as the primary subject matter expert on TPRM requirement applicability, providing guidance to the business and participating in broader partner risk assessments.
• Own and lead the end-to-end remediation of TPRM-related risk issues, ensuring sustainable, well-managed solutions are implemented.
• Shape and maintain the TPRM Risk Taxonomies and Process Diagnostic guidance to ensure consistency and clarity across the enterprise.
• Act as a key partner and facilitator for relevant first-line and second-line audits, regulatory examinations, and Process Level Assessments.
• Support Designated Mandate Owners (DMO) with rigorous requirement fulfillment and annual attestation processes.

Principal Associate, Operational Risk Management, Third Party Risk Manager

• We are seeking an experienced Identity & Access Management (IAM) Leader to build and lead our enterprise IAM function.
• Reporting to the Chief Information Security Officer (CISO), this role is responsible for IAM strategy, architecture, delivery, and operations across workforce, customer, and non-human identities.
• This leader will define the IAM vision and roadmap, oversee key identity transformation initiatives, manage vendors and delivery partners, and lead a globally distributed team in a complex, matrixed environment.
• Define and lead the enterprise IAM strategy, operating model, and roadmap aligned to business, risk, and regulatory priorities.
• Build and scale the IAM organization to include team structure and hiring plans.
• Partner across Cybersecurity, IT, HR, Legal, Privacy, Risk, Internal Audit, and business teams to deliver consistent identity outcomes.
• Oversee major IAM transformation initiatives, including program execution and budget accountability.
• Establish metrics and reporting to demonstrate program maturity, business value, and risk reduction.
• Lead the design and maturity of Identity Governance and Administration capabilities, including lifecycle management, access requests, certifications, role management, and separation of duties.
• Drive the strategy, implementation, and maturation of enterprise IGA capabilities using platforms such as SailPoint, Microsoft Entra ID Governance, or similar solutions.
• Oversee identity lifecycle management for workforce, contractors, partners, and non-human identities.
• Lead the strategy and maturity of the firm’s Privileged Access Management program, including vaulting, credential management, session controls, and privileged access governance.
• Provide strategic leadership for PAM capabilities and related tooling, including platforms such as Delinea, CyberArk, or similar solutions.
• Establish standards for privileged access, secrets management, and just-in-time elevation across human and machine identities.
• Lead enterprise authentication and access capabilities, including SSO, MFA, conditional access, federation, and modern authentication methods.
• Drive identity standards for cloud and workload access across Guidehouse’s hybrid and multi-cloud environments.
• Align IAM capabilities to security, compliance, and audit requirements across applicable regulatory and control frameworks.
• Lead, coach, and develop a team spanning IAM architecture, engineering, operations, and governance.

Identity Governance & Administration Leader

• Assist in accurate and comprehensive data submission to regulatory entities such as CMS
• Collaborate and coordinate with internal and external partners to minimize submission errors
• Develop and improve processes related to risk adjustment and quality improvement
• Validate data integrity and collaborate with technical teams to improve data pipelines
• Report on actionable metrics related to risk adjustment and HEDIS®
• Provide mentorship to less experienced team members

Senior Risk Adjustment Analyst

• Apply your risk management, project management and analytical skills to high profile risk initiatives
• Lead and advise on transformational initiatives across the businesses
• Work with business partners to identify and mitigate potential risks
• Collaborate with various stakeholders to shape risk mitigation strategies
• Develop and implement risk management practices for new products and processes
• Stay abreast of the changing regulatory environment to mitigate risks

Risk Manager – Channels and Shared Services

• Apply leadership and analytical skills to Risk Management projects
• Lead a team of Vertical Risk Managers and Risk Specialists
• Develop and implement cutting edge Risk solutions
• Partner with Executives to drive organizational change
• Consult with Executives to determine interaction model with Lines of Business
• Perform critical assessments on risk categories to mitigate risk
• Use analytical skills to conduct Risk Process Improvement and Process Design

Director, Card Risk Management

• Work with business partners to identify and mitigate potential risks to Capital One.
• Collaborate with a team of risk managers to develop and implement risk solutions.
• Consult on risk to business partners providing advice and guidance.
• Serve as a liaison, interfacing with business partners, Tech, and other assurance functions.
• Effectively challenge business partners, 2nd line, and 3rd line functions.
• Lead/support regulatory exams and audits.
• Synthesize data and reporting; perform analysis and bring valuable insights.
• Stay current on regulatory environment and understand impacts to businesses.
• Collaborate effectively between risk, compliance, and other support functions.

Vertical Risk Manager – Card Risk

• The Director of Governance serves a key role in making the volunteer leadership experience a positive one at ACA, supporting governance functions at ACA, and collaborating across the organization to ensure effective project management on assigned special projects.
• The Director is responsible for working with the CEO to develop strategy as it pertains to working with ACA’s governing body, including the Governing Council, Executive Committee, and elected officers, and directs the coordination of volunteer management for committees/task forces, Division, Branch, and Region leaders.
• The Director assists leaders in working together to advance ACA’s strategic plan and assists in developing and implementing strategies and systems to establish good governance across the organization.
• This is a position with supervisory responsibility.

Director of Governance

• Assist with routine tasks and projects within the risk advisory function.
• Support risk assessments, project planning, and execution of work plans.
• Help evaluate business processes and IT general controls.
• Communicate ideas and findings clearly with team members and clients.
• Identify and analyze technical issues, providing recommendations to management.
• Adhere to industry regulations and professional ethics, including IIA, ISACA, GAO, and AICPA guidelines.
• Assist in managing engagement activities and ensuring quality standards are met.
• Maintain awareness of client needs and take initiative in day-to-day tasks.
• Support risk management efforts and uphold quality control procedures.
• Build and maintain positive client relationships through effective communication.
• Respond promptly and accurately to team and client requests.
• Adapt to client needs and evolving project requirements.
• Seek continuous learning opportunities and ways to improve processes.

Risk Advisory Internship

• Drives critical elements of the design, development, implementation, and oversight of one or more assigned ERM Programs
• Supports and facilitates assigned ERM Programs policy and procedure documentation, training, communication and oversight activities across the enterprise
• Executes key components of the design and delivery of Quality Assurance related to assigned ERM Programs, including the testing strategy, outputs, and reporting
• Coordinates with and supports Business Unit Risk Managers, Business Unit Chief Risk Officers and Risk Program Owners
• Provides thought leadership, subject matter expertise and indirect leadership within the broader ERM organization
• Supports critical components of assigned ERM Programs presentation materials for key internal stakeholders and external regulators
• Communicates regularly and escalates risks associated with execution of ERM Programs

Enterprise Risk Management Officer

• Contribute to the administration, strategic planning, and operational management of an assigned multifamily asset portfolio.
• Monitor portfolio performance, analyze risk and operational trends, and report on business processes using enterprise systems.
• Support portfolio objectives and evaluate asset performance.
• Ensure compliance with governance standards, policies, and internal controls.
• Identify opportunities to improve business processes and operational efficiencies.
• Maintain accurate portfolio documentation and support audit, compliance, and governance activities as needed.
• Collaborate with cross-functional partners to resolve portfolio issues and support business initiatives.

Senior Associate – Asset Management

• Identify, assess, and evaluate operational, regulatory, financial, and technology-related risks across Global Operations processes.
• Design, enhance, and document preventive and detective controls to mitigate identified risks.
• Perform risk assessments for new and existing business processes, products, systems, and initiatives.
• Evaluate the effectiveness of controls and recommend improvements to strengthen the control environment.
• Partner with business leaders to embed risk management practices into day-to-day operations.
• Serve as a trusted advisor to Global Operations teams on risk management and internal control matters.
• Support strategic projects, business transformations, and operational initiatives by assessing risks and recommending appropriate controls.
• Develop risk-based audit programs and testing procedures for operational processes.
• Plan and execute audits, including risk assessments, control testing, documentation, and reporting.
• Assess compliance with internal policies, procedures, and regulatory requirements.
• Track audit findings and remediation activities through completion.
• Prepare reports summarizing risk assessments, audit results, control deficiencies, and recommendations.

Global Operations Risk & Controls Consultant

• Assist in the accurate and comprehensive data submission to regulatory entities
• Collaborate and coordinate with internal and external partners to minimize submission and response errors
• Accumulate and report out on pertinent data sets
• Develop and improve processes related to risk adjustment and quality improvement
• Maintain required documentation and ensure compliance to all applicable laws, guidance, and regulations
• Assume lead role on specified projects
• Provide mentorship to less experienced team members
• Influence decision making by leadership and provide recommendations regarding potential improvements to risk adjustment processes

• Serve as a strategic influencer and change agent in Business Continuity and Resiliency
• Ensure Capital One Banking and Premium Products remain well managed, profitable, and resilient
• Identify and map critical technology dependencies
• Analyze resilience against potential disruption impacts
• Ensure robust recovery strategies are integrated into the business continuity framework
• Drive divisional strategic imperatives and program enhancements
• Provide sophisticated advice regarding business continuity management lifecycle risks
• Analyze end-to-end processes to identify trends and design robust controls
• Partner with technology and security teams to maintain business continuity plans and cyber resilience strategies
• Facilitate governance forums and present program updates to senior leadership
• Use advanced tools to enhance process efficiency and drive predictive risk modeling

Senior Manager, Business Continuity and Resiliency

• Leads and oversees the second line of defense (2LOD) operational risk management functions for both Fraud and Payments risk, providing direction and leadership in identifying, analyzing, and mitigating operational risks.
• Develops and implements risk policies, frameworks, and governance structures to enhance risk resilience.
• Leads cross-functional risk initiatives and collaborates with senior executives to drive a culture of risk awareness.
• Serves as a key advisor on risk-related matters and ensures compliance with regulatory standards.
• Manages multiple teams and influences risk strategy across business units, driving operational excellence and enterprise risk management maturity.
• Establish and maintain an enterprise fraud and payments risk governance framework, independently challenge first-line fraud prevention and detection activities, and ensure adherence to regulatory expectations.
• Responsibilities include developing fraud and payments risk appetite statements, performing ongoing risk assessments, conducting thematic reviews, and driving governance routines that enhance transparency and accountability.

Director, Operational Risk – Fraud and Payments Risk

• Own strategy, design, and continuous improvement of the Third-Party/Vendor Risk Management (TPRM) program
• Define and maintain TPRM policy, standards, procedures, and risk-tiering methodology
• Establish third-party risk appetite and tolerance thresholds with CISO and GRC leadership
• Embed risk gates within sourcing, onboarding, contracting, renewal, and offboarding
• Lead the full vendor risk lifecycle: intake, inherent-risk classification, due diligence, residual-risk determination
• Operationalize inherent-risk tiering to scope assessment depth and cadence
• Direct security, privacy, and resilience assessments using methodologies such as SIG/Shared Assessments
• Evaluate fourth-party/Nth-party dependencies, vendor concentration, and systemic risk
• Establish and lead risk reviews for third-party AI/GenAI tooling
• Coordinate third-party incident response with SOC/IR
• Manage the third-party risk register and findings inventory
• Develop a standardized library of contractual security requirements
• Define and report outcome-driven metrics and KRIs

Senior Manager, Third Party Risk Management

• Define and own the enterprise Human Risk Management strategy.
• Establish governance for the human-risk domain.
• Build, lead, and develop a small expert team.
• Partner with multiple departments to embed risk practices.
• Use analytics and AI to identify high-risk cohorts.
• Implement in-the-moment behavioral guidance.

Senior Manager, Human Risk Management

• Serve as a trusted advisor to core business areas, providing tailored guidance and proactive risk mitigation strategies relative to their specific business lines.
• Cultivate, leverage, and sustain key executive relationships across the enterprise to foster deep collaboration and break down silos.
• Own, enhance, and execute internal and external reporting processes, ensuring flawless documentation that aligns with complex regulatory and internal expectations.
• Map and adjust localized business processes to seamlessly align with overarching Capital One corporate requirements and risk frameworks.
• Author, review, and continuously refine critical governance documents, including policies, standards, procedures, and operational guidelines.
• Design and optimize risk management processes, tools, templates, and job aids.
• Craft and deliver high-impact presentations to train and guide teams on risk methodology usage.
• Partner effectively with specialized teams across the enterprise—to achieve unified risk objectives.

Senior Risk Manager

• Partner with business teams to define and implement contract data governance frameworks, standards, and quality controls
• Monitor and maintain data integrity; identify and resolve data quality issues in collaboration with the Contract Management team
• Assist in the development and rollout of minimum viable products (MVPs) for data governance and management
• Identify opportunities to streamline data processes through automation or AI‑enabled improvements
• Lead and support contract data initiatives focused on readiness for migration and transformation
• Support contract data mapping, transformation logic, and migration from multiple systems into a single CLM platform
• Develop, track, and maintain key performance indicators (KPIs) for business and operational performance
• Build and maintain dashboards, reports, and analytical models to deliver actionable insights
• Partner with business users, leadership, and technical teams to align data initiatives with organizational goals

Risk jobs in Virginia

See all jobs on JobTailor

Senior Risk Solution Specialist – Environmental & Energy

Operational Risk Manager

Principal Associate, Operational Risk Management, Third Party Risk Manager

Identity Governance & Administration Leader

Senior Risk Adjustment Analyst

Risk Manager – Channels and Shared Services

Director, Card Risk Management

Vertical Risk Manager – Card Risk

Director of Governance

Risk Advisory Internship

Enterprise Risk Management Officer

Senior Associate – Asset Management

Global Operations Risk & Controls Consultant

Senior Risk Adjustment Analyst

Senior Manager, Business Continuity and Resiliency

Director, Operational Risk – Fraud and Payments Risk

Senior Manager, Third Party Risk Management

Senior Manager, Human Risk Management

Senior Risk Manager

CLM Data and Governance