Cyber Security Risk Manager – Third-Party & Governance

Capital One National Association; McLean (VA); On-site; USD 197,000 - 225,000; Full time

Job summary

Capital One is seeking a Manager, Cyber Security (Third Party Risk) to lead the ongoing advancement of cybersecurity capabilities across third-party risk programs, collaborating with stakeholders and using CSF.

You will synthesize risk insights from multiple sources, mentor associates, and drive automation in monitoring and reporting. The role requires strong governance knowledge and cloud experience.

Qualifications

• Bachelor's degree in a related field.
• 5+ years in cybersecurity or information technology.
• 4+ years evaluating or supporting development of cybersecurity capabilities.
• Experience with cybersecurity frameworks (NIST CSF, MITRE ATT&CK, etc.).
• Experience with risk management and reporting to stakeholders.

Responsibilities

• Lead the ongoing advancement of cybersecurity capabilities with stakeholders to assess effectiveness and risk management using CSF.
• Leverage cybersecurity data from multiple sources to produce new insights, risk indicators and program metrics.
• Provide expertise during control and risk assessments ensuring issues and remediation plans are documented, owned and tracked to closure.
• Drive the adoption of automation and tooling to streamline control monitoring, issue management, and risk reporting workflows.
• Synthesize and present key cyber-risk insights for senior management forums, highlighting trends and risk-reduction opportunities.
• Mentor and guide associates, fostering consistent application of cyber-risk management methodologies.

Skills

Cyber threat analysis

Security metrics

Governance familiarity

Incident analysis

Risk management

Automation tooling

Education

Bachelor's degree

Tools

Splunk

CrowdStrike

Qualys

AWS Security Hub

Job description

Capital One is seeking a Manager, Cyber Security (Third Party Risk) to lead the ongoing advancement of cybersecurity capabilities across third-party risk programs, collaborating with stakeholders and using CSF.

You will synthesize risk insights from multiple sources, mentor associates, and drive automation in monitoring and reporting. The role requires strong governance knowledge and cloud experience.