Director, Risk Management: Cyber & Third Party Risk

About the role

Capital One is seeking a Director, Third Party Risk in the Card Risk Office to lead the Third Party Risk team. The role leverages foundations in third‑party risk management and applies expertise in technology and cyber risks. The director will partner with senior leaders across Enterprise Supplier Management, Cyber, Card Technology, and Card Risk to develop best‑in‑class risk solutions that support innovation while protecting customers, shareholders, and associates. Responsibilities include collaborating with second lines of defense to implement risk and control tools, techniques, and frameworks for the Card organization, driving organizational change through risk identification, measurement, analysis, and reporting, and ensuring compliance with laws, regulations, and policies.

Responsibilities

• Drive team initiatives to improve third‑party risk management and vendor lifecycle, focusing on automation, innovation, and process improvements.
• Engage cross‑functional executive leadership across Card, Risk, Supplier Management, and Cyber to deliver clear narratives and program status.
• Make sound judgment decisions in domains such as contracting risk, operational delivery, information security, and resilience to inform risk aggregation.
• Serve as interdepartmental advisor, interfacing with enterprise technology, Cyber, and other lines of business.
• Collaborate effectively across multiple organizations to achieve objectives.
• Deliver succinct, organized information tailored to audience, communicating complex issues and incorporating diverse perspectives.
• Conduct data analysis to identify trends, patterns, and anomalies, escalating key risks and issues.
• Facilitate compliance with policies through risk assessments and enterprise risk management programs.
• Identify opportunities for continuous improvement and document/track resolution of risk events impacting customers.
• Manage special projects and travel up to 10% when applicable.

Basic Qualifications

• Bachelor’s degree or equivalent military experience.
• Minimum 7 years of experience in risk management.
• At least 5 years of experience in information technology (software delivery/hosting, platform services, information security, or cloud computing).
• At least 5 years of experience in third‑party risk management, including vendor risk and control assessment programs.
• At least 5 years of people‑management experience.

Preferred Qualifications

• Master’s degree.
• 8+ years of experience in information technology management.
• 8+ years of experience in third‑party risk management.
• 8+ years of experience working in risk management.
• 6+ years of people‑management experience.
• Certifications related to cloud, cyber, or technology operations (e.g., Cloud provider certifications, CISSP, CISM, CISA) or PMP, Lean, Agile, Six Sigma.
• 5+ years of experience in banking or financial services.
• 5+ years of experience evaluating, implementing, or managing cyber or information security.

Pay

Chicago, IL: $209,500 – $239,100; McLean, VA: $230,400 – $263,000; Richmond, VA: $209,500 – $239,100. Candidates hired in other locations will receive the pay range applicable to that location. The role is also eligible for performance‑based incentive compensation, which may include cash bonuses and/or long‑term incentives.

Benefits

Capital One offers a comprehensive, competitive, and inclusive set of health, financial, and other benefits that support total well‑being. Eligibility varies based on full‑ or part‑time status, exempt or non‑exempt status, and management level.