Capital One
Capital One
Capital One is a financial services and fintech company offering credit cards, auto loans, banking, and savings products. Its work combines financial expertise with technology and digital tools to improve how customers manage money. The company’s careers focus includes building customer-oriented solutions within a diverse and inclusive workforce.

Director, Cyber and Third-Party Risk Management — Capital One (Onsite)

Lead Capital One’s Card third-party risk function, covering cyber, technology, vendors, and enterprise risk. Drive risk programs, controls, automation, and executive reporting across financial services.

Description

  • Lead the Card Risk third-party risk team at Capital One
  • Collaborate with senior leaders in Enterprise Supplier Management, Cyber, Card Technology, and Card Risk
  • Build third-party risk solutions that enable innovation while protecting customers, shareholders, and associates
  • Implement risk and control frameworks, tools, and methods for the Card organization
  • Advance vendor lifecycle and third-party risk programs through automation and process improvement
  • Present program updates and clear risk narratives to executive leadership
  • Assess contract, operational, information security, and resilience risks to support prioritization and aggregation
  • Advise teams across enterprise technology, Cyber, and other business lines
  • Analyze data to identify trends, anomalies, risks, and emerging issues
  • Support compliance through risk assessments and enterprise risk management programs
  • Recommend opportunities to improve business processes and outcomes
  • Record and monitor risk events and issues while supporting lasting corrective actions
  • Manage special projects
  • Travel up to 10% when applicable

Requirements

  • Bachelor’s degree or military experience
  • At least 9 years of experience in technology, cybersecurity, technology auditing, systems risk management, technology risk assessments, resilience engineering, chaos engineering, site reliability engineering, or a related combination
  • At least 7 years of risk management experience
  • At least 5 years of third-party risk management experience, including vendor risk and control assessment programs
  • At least 5 years of people management experience
  • Capital One will not sponsor a new applicant for employment authorization for this position
  • Preferred: Master’s degree
  • Preferred: 10 or more years of information technology management experience
  • Preferred: 8 or more years of third-party risk management experience
  • Preferred: 8 or more years of risk management experience
  • Preferred: 6 or more years of people management experience
  • Preferred: Cloud, cybersecurity, or technology operations certifications, such as cloud provider certifications, CISSP, CISM, or CISA
  • Preferred: PMP, Lean, Agile, or Six Sigma certification; 5 or more years in banking or financial services; and 5 or more years evaluating, implementing, or managing cyber or information security programs; certification may be in progress
  • Preferred: 5 or more years of experience evaluating, implementing, or managing cyber or information security programs
  • Preferred: 5 or more years of experience in banking or financial services

Benefits

  • Performance-based incentive compensation, including potential cash bonuses and/or long-term incentives
  • Comprehensive benefits across health, financial security, and other areas of well-being
  • Reasonable accommodations are available for applicants with disabilities

Related Jobs