Senior Cyber Third-Party Risk Operations Lead

Capital One National Association; McLean (VA); On-site; USD 200,700 - 229,100; Full time

Job summary

Capital One is seeking a Senior Manager, Cyber Third Party Risk Reduction (CTPRR) Operations Lead in McLean, VA. This role oversees the day-to-day execution and continuous improvement of the third-party risk management lifecycle, coordinating with Legal, Procurement, InfoSec, and Privacy to ensure compliant operations.

The ideal candidate will optimize workflows, translate data into actionable metrics, and mentor a team of risk analysts while maintaining SLAs and driving risk remediation.

Qualifications

• Experience in third-party risk management lifecycle and vendor oversight.
• Leadership experience supervising risk analysts and SLAs.
• Ability to design and maintain operational dashboards for executives.

Responsibilities

• Manage end-to-end CTRPP lifecycle including vendor risk rating, due diligence, and monitoring.
• Escalate complex risk assessments and remediation issues.
• Mentor risk analysts and ensure data accuracy in risk evaluations and SLAs.
• Design and maintain KPIs and KRIs for executive leadership.
• Track remediation findings and escalate past-due risks.
• Support audits and regulatory inquiries with CTRPP documentation.

Skills

Third-Party Risk Management

Vendor Management

IT Operations Management

Risk Assessment

Dashboard & KPI reporting

Team mentoring

Stakeholder communication

Education

Bachelor’s Degree

CTPRP, CISSP, CISA, or CRISC certification

Job description

Capital One is seeking a Senior Manager, Cyber Third Party Risk Reduction (CTPRR) Operations Lead in McLean, VA. This role oversees the day-to-day execution and continuous improvement of the third-party risk management lifecycle, coordinating with Legal, Procurement, InfoSec, and Privacy to ensure compliant operations.

The ideal candidate will optimize workflows, translate data into actionable metrics, and mentor a team of risk analysts while maintaining SLAs and driving risk remediation.