Director, Risk Management – Cyber & Third Party Risk

Jobtailor; Illinois; Hybrid; USD 150,000 - 210,000; Full time

Job summary

Capital One is seeking a senior leader to drive the Third Party Risk function within the Card Risk Office. You will guide risk programs, collaborate with Cyber, Card Technology, and supplier teams, and deliver strategic narratives to executives.

You will influence risk frameworks, automate processes, and oversee vendor lifecycle improvements while ensuring resilience and customer protection across programs.

Qualifications

• Bachelor’s Degree or Military Experience.
• At least 7 years of experience working in risk management.
• At least 5 years of experience in information technology, including software delivery/hosting, platform services, information security or cloud computing.
• At least 5 years of experience in third party risk management, including vendor risk and control assessment programs.

Responsibilities

• Lead Capital One’s Third Party Risk team within the Card Risk Office.
• Partner with senior leaders across Enterprise Supplier Management, Cyber, Card Technology, and Card Risk teams.
• Develop and support industry risk solutions that support innovation and protect customers, shareholders, and associates.
• Lead and implement risk and control tools, techniques, and frameworks for the Card organization.
• Drive third-party risk management and vendor lifecycle initiatives, focusing on automation, innovation, and process improvements.
• Engage executive leadership and deliver program narratives and status updates.
• Assess contracting risk, operational delivery, information security, and resilience to inform risk aggregation and prioritization.
• Serve as an interdepartmental advisor across enterprise technology, Cyber, and other lines of business.
• Analyze data extracts to identify trends, patterns, anomalies, risks, and issues.
• Facilitate compliance through risk assessments and enterprise risk management programs.
• Identify opportunities for business improvement.
• Track risk events and issues impacting customers and help develop corrective actions.
• Manage special projects.

Skills

Third Party Risk Management

Leadership

Risk Assessment

Data Analysis

Vendor Risk Assessment

Education

Bachelor’s Degree

Master’s Degree preferred

Tools

Risk Management Tools

Automation Tools

Data Analytics Tools

Cloud Platforms

Job description

• Lead Capital One’s Third Party Risk team within the Card Risk Office
• Partner with senior leaders across Enterprise Supplier Management, Cyber, Card Technology, and Card Risk teams
• Develop and support industry risk solutions that support innovation and protect customers, shareholders, and associates
• Lead and implement risk and control tools, techniques, and frameworks for the Card organization
• Drive third-party risk management and vendor lifecycle initiatives, focusing on automation, innovation, and process improvements
• Engage executive leadership and deliver program narratives and status updates
• Assess contracting risk, operational delivery, information security, and resilience to inform risk aggregation and prioritization
• Serve as an interdepartmental advisor across enterprise technology, Cyber, and other lines of business
• Analyze data extracts to identify trends, patterns, anomalies, risks, and issues
• Facilitate compliance through risk assessments and enterprise risk management programs
• Identify opportunities for business improvement
• Track risk events and issues impacting customers and help develop corrective actions
• Manage special projects
• Travel up to 10% when applicable

Requirements

• Bachelor’s Degree or Military Experience
• At least 7 years of experience working in risk management
• At least 5 years of experience in information technology, including software delivery/hosting, platform services, information security or cloud computing
• At least 5 years of experience in third party risk management, including vendor risk and control assessment programs
• At least 5 years of experience in people management
• At this time, Capital One will not sponsor a new applicant for employment authorization for this position
• Master’s Degree preferred
• 8+ years of experience in information technology management preferred
• 8+ years of experience in third party risk management preferred
• 8+ years of experience working in risk management preferred
• 6+ years of experience in people management preferred
• Certifications related to or pursuing certification related to Cloud, Cyber or Technology Operations, such as Cloud provider certifications, CISSP, CISM, or CISA
• PMP, Lean, Agile, or Six Sigma certification
• 5+ years of experience in Banking and/or Financial Services
• 5+ years of experience evaluating, implementing, or managing cyber or information security

Core Competencies

Demonstrates extensive experience in Third Party Risk Management, Information Technology, and Risk Assessment, with a strong focus on vendor risk and control assessment programs. Proven ability to lead teams, implement risk frameworks, and drive process improvements while ensuring compliance and operational resilience.

Highest-signal resume keywords

• Third Party Risk Management
• Information Technology Management
• Risk Assessment
• People Management
• Cybersecurity

Hard Skills

• Risk Management
• Vendor Risk Assessment
• Data Analysis
• Process Improvement
• Cloud Computing
• Information Security
• Risk Control Frameworks
• Compliance Facilitation
• Operational Delivery
• Contracting Risk Assessment

Soft Skills

• Leadership
• Collaboration
• Communication
• Advisory Skills
• Problem Solving

Certifications & Qualifications

• CISSP
• CISM
• CISA
• PMP
• Lean
• Agile
• Six Sigma

Industry Keywords

• Banking
• Financial Services
• Enterprise Supplier Management
• Cyber Risk
• Card Technology
• Operational Resilience
• Vendor Lifecycle Management
• Innovation
• Risk Aggregation
• Program Management

Tools & Technologies

• Risk Management Tools
• Automation Tools
• Data Analytics Tools
• Cloud Platforms
• Cybersecurity Tools