Cyber Security Risk Manager, Third-Party Programs

Information Technology Senior Management Forum; McLean (VA); On-site; USD 197,000 - 225,000; Full time

Job summary

Capital One is seeking a Manager, Cyber Security (Third Party Risk) to drive cybersecurity governance, capability maturation, and risk transformation across the organization. You will lead cross-functional collaboration with stakeholders to advance cyber risk management and metrics.

You’ll mentor teams, advocate for automation, and present insights to senior leadership while ensuring remediation plans are tracked to closure.

Qualifications

• Bachelor's degree.
• At least 5 years of experience in cybersecurity or information technology.
• At least 4 years of experience evaluating, contributing to, or supporting development of cybersecurity capabilities.

Responsibilities

• Lead the ongoing advancement of cybersecurity capabilities and services, through partnership with stakeholders and assessments to determine capability effectiveness and risk management practices using tools and frameworks such as NIST CSF.
• Leverage cybersecurity data from multiple sources to produce new insights, risk indicators and program metrics
• Provide expertise during control and risk assessments ensuring issues and remediation plans are documented, owned and tracked to closure
• Drive the adoption of automation and tooling to streamline control monitoring, issue management, and risk reporting workflows
• Synthesize and present key cyber-risk insights for senior management forums, highlighting trends, systemic issues, and risk-reduction opportunities
• Mentor and guide associates, fostering consistent application of cyber-risk management methodologies and professional growth

Skills

Cybersecurity

Risk management

Threat intelligence

Data analysis

Stakeholder comms

Education

Bachelor's degree

Tools

Splunk

CrowdStrike

Qualys

AWS Security Hub

Job description

Capital One is seeking a Manager, Cyber Security (Third Party Risk) to drive cybersecurity governance, capability maturation, and risk transformation across the organization. You will lead cross-functional collaboration with stakeholders to advance cyber risk management and metrics.

You’ll mentor teams, advocate for automation, and present insights to senior leadership while ensuring remediation plans are tracked to closure.