Director, Risk Management – Cyber & Third Party Risk

Capital One

Capital One risk director leading cyber and third-party risk programs across Card operations. Driving vendor governance, technology risk analysis, compliance, and organizational improvements.

Posted 9/10/2026full-timeMcLean • Illinois, Virginia • 🇺🇸 United StatesLead💰 $209,500 - $263,000 per yearWebsite

Core Competencies

Role fit

Core Competencies

Use this summary to align your resume positioning with the role.

Demonstrates extensive experience in Third Party Risk Management, Information Technology, and Risk Assessment, with a strong focus on vendor risk and control assessment programs. Proven ability to lead teams, implement risk frameworks, and drive process improvements while ensuring compliance and operational resilience.

Highest-signal resume keywords

Third Party Risk ManagementInformation Technology ManagementRisk AssessmentPeople ManagementCybersecurity

ATS Keywords

Tailor your resume

Applicant Tracking System Keywords

Tip: use these terms in your resume and cover letter to boost ATS matches.

Hard Skills

Risk ManagementVendor Risk AssessmentData AnalysisProcess ImprovementCloud ComputingInformation SecurityRisk Control FrameworksCompliance FacilitationOperational DeliveryContracting Risk Assessment

Soft Skills

LeadershipCollaborationCommunicationAdvisory SkillsProblem Solving

Tools & Technologies

Risk Management ToolsAutomation ToolsData Analytics ToolsCloud PlatformsCybersecurity Tools

Certifications & Qualifications

CISSPCISMCISAPMPLeanAgileSix Sigma

Industry Keywords

BankingFinancial ServicesEnterprise Supplier ManagementCyber RiskCard TechnologyOperational ResilienceVendor Lifecycle ManagementInnovationRisk AggregationProgram Management

Tech Stack

Tools & technologies

CloudPMP

About the role

Key responsibilities & impact

Lead Capital One’s Third Party Risk team within the Card Risk Office
Partner with senior leaders across Enterprise Supplier Management, Cyber, Card Technology, and Card Risk teams
Develop and support industry risk solutions that support innovation and protect customers, shareholders, and associates
Lead and implement risk and control tools, techniques, and frameworks for the Card organization
Drive third-party risk management and vendor lifecycle initiatives, focusing on automation, innovation, and process improvements
Engage executive leadership and deliver program narratives and status updates
Assess contracting risk, operational delivery, information security, and resilience to inform risk aggregation and prioritization
Serve as an interdepartmental advisor across enterprise technology, Cyber, and other lines of business
Analyze data extracts to identify trends, patterns, anomalies, risks, and issues
Facilitate compliance through risk assessments and enterprise risk management programs
Identify opportunities for business improvement
Track risk events and issues impacting customers and help develop corrective actions
Manage special projects
Travel up to 10% when applicable

Requirements

What you’ll need

Bachelor’s Degree or Military Experience
At least 7 years of experience working in risk management
At least 5 years of experience in information technology, including software delivery/hosting, platform services, information security or cloud computing
At least 5 years of experience in third party risk management, including vendor risk and control assessment programs
At least 5 years of experience in people management
At this time, Capital One will not sponsor a new applicant for employment authorization for this position
Master’s Degree preferred
8+ years of experience in information technology management preferred
8+ years of experience in third party risk management preferred
8+ years of experience working in risk management preferred
6+ years of experience in people management preferred
Certifications related to or pursuing certification related to Cloud, Cyber or Technology Operations, such as Cloud provider certifications, CISSP, CISM, or CISA
PMP, Lean, Agile, or Six Sigma certification
5+ years of experience in Banking and/or Financial Services
5+ years of experience evaluating, implementing, or managing cyber or information security

Benefits

Comp & perks

Performance based incentive compensation, which may include cash bonus(es) and/or long term incentives (LTI)
Comprehensive, competitive, and inclusive health, financial and other benefits supporting total well-being
Reasonable accommodations for applicants who require them