This role pays more than
77%
of similar roles. Most pay
$150,000–$211,200
— the shaded band above.
At the midpoint, this role pays about
$211k
versus about
$181k
for comparable roles.
Based on 240 similar postings.
Employer
About Capital One Financial
Capital One Financial is a bank holding company specializing in credit cards, auto loans, banking, and savings products, known for its data-driven approach to consumer and commercial finance. Industry: Financial Services & Banking
Capital One Financial currently has
936 open roles
on FindRole.
Listed pay typically runs
$197,300–$225,100
across 933 roles with salary data.
Manager, Cyber Security (Third Party Risk) joins the Card business team to support the Third Party Risk Management function from a cyber lens. This role serves as a central information security point of contact to identify, mitigate, and manage risks introduced by third parties. The individual will partner with internal leaders and external vendors to provide risk consulting, influence business decisions during procurement and contract renewals, and drive process improvements for program efficiency. Key responsibilities include reporting on the health of the third-party environment to executive leadership and translating technical findings into actionable reports. Required skills include expertise in cybersecurity frameworks like NIST CSF, MITRE ATT&CK, CMMC, and FedRAMP. The role utilizes tools such as Splunk, Crowdstrike, Qualys, and AWS Security Hub within multi-cloud environments to address the specific challenge of ensuring third parties meet established security standards.
Act as the primary Information Security point of contact for identifying and mitigating third-party risks in the Card business.
Proactively identify information security risks and partner with stakeholders to eliminate threats from third parties.
Provide consulting to internal and external teams regarding third-party information security risks.
Influence business decisions by integrating security capabilities into vendor procurement and contract renewal processes.
Report on the overall health and risk environment of third-party management to executive leadership.
Escalate and manage cyber security risks introduced by Capital One's third-party partners.
Drive process improvements to increase the efficiency of the Third Party Risk Management program.
What we're looking for
At least 5 years of experience in cybersecurity or information technology.
At least 4 years of experience evaluating, contributing to, or supporting development of cybersecurity capabilities.
5+ years of experience with cybersecurity frameworks and concepts such as NIST CSF, MITRE ATT&CK, CMMC, FedRAMP, etc. (preferred).
5+ years of experience performing analysis of or developing solutions for cyber threats, vulnerabilities, risks, or events (preferred).
5+ years of experience working on teams and presenting cybersecurity information such as metrics, threat intelligence, controls, and requirements to stakeholders (preferred).
4+ years of experience working in multi-cloud environments (preferred).
4+ years of experience using security tools like Splunk, Crowdstrike, Qualys, or AWS Security Hub (preferred).