Cyber Security Manager – Third-Party Risk & Governance

Capital One; McLean (VA); On-site; USD 197,000 - 225,000; Full time

Job summary

Capital One seeks a Manager, Cyber Security (Third Party Risk) to lead cybersecurity capabilities and risk assessments for external partners. You will work with stakeholders to mature risk programs and deliver measurable improvements across governance, controls, and metrics.

The role emphasizes mentoring teammates, leveraging CSF/MITRE frameworks, and presenting risk insights to senior leaders in a fast-paced environment.

Qualifications

• Bachelor’s degree required.
• 5+ years in cybersecurity or IT.
• 4+ years evaluating or supporting development of cybersecurity capabilities.

Responsibilities

• Lead advancement of cybersecurity capabilities and services with stakeholders.
• Use multiple data sources to produce risk indicators and metrics.
• Provide expertise during control and risk assessments with remediation ownership.
• Drive automation and tooling to streamline monitoring and reporting workflows.
• Synthesize cyber-risk insights for senior management and risk reduction.
• Mentor associates in applying cyber-risk methodologies.

Skills

NIST CSF

MITRE ATT&CK

CMMC

FedRAMP

Cyber risk management

Security metrics & reporting

Education

Bachelor’s degree

Tools

Splunk

CrowdStrike

Qualys

AWS Security Hub

Job description

Capital One seeks a Manager, Cyber Security (Third Party Risk) to lead cybersecurity capabilities and risk assessments for external partners. You will work with stakeholders to mature risk programs and deliver measurable improvements across governance, controls, and metrics.

The role emphasizes mentoring teammates, leveraging CSF/MITRE frameworks, and presenting risk insights to senior leaders in a fast-paced environment.