Cyber Risk & Third-Party Security Leader

Capital One Group; McLean (VA); Hybrid; USD 197,000 - 225,000; Full time

Job summary

Capital One is seeking a Manager, Cyber Security (Third Party Risk) in McLean, VA. You will lead cybersecurity capability advancement, collaborate with stakeholders, and drive risk governance initiatives across the organization.

The role emphasizes data-driven risk insights and the automation of control monitoring and reporting. The position requires 5+ years in cybersecurity, multi-cloud experience, and strong communication with senior leadership.

Qualifications

• 5+ years of experience in cybersecurity or information technology
• 4+ years evaluating, contributing to, or supporting development of cybersecurity capabilities
• 4+ years working in multi-cloud environments
• 5+ years of experience using security tools (Splunk, CrowdStrike, Qualys, AWS Security Hub)
• Experience presenting to stakeholders with cybersecurity metrics and reports

Responsibilities

• Lead the ongoing advancement of cybersecurity capabilities and services for risk management across Capital One
• Synthesize and present key cyber-risk insights for senior management forums
• Drive the adoption of automation and tooling to streamline control monitoring and risk reporting
• Mentor associates on cyber-risk management methodologies
• Provide clear, actionable reports translating technical findings for technical and non-technical audiences

Skills

Cybersecurity frameworks

Threat intelligence

Risk management

Stakeholder communication

Automation tooling

Education

Bachelor's degree

Tools

Splunk

CrowdStrike

Qualys

AWS Security Hub

Job description

Capital One is seeking a Manager, Cyber Security (Third Party Risk) in McLean, VA. You will lead cybersecurity capability advancement, collaborate with stakeholders, and drive risk governance initiatives across the organization.

The role emphasizes data-driven risk insights and the automation of control monitoring and reporting. The position requires 5+ years in cybersecurity, multi-cloud experience, and strong communication with senior leadership.