Cyber Third Party Risk Reduction; CTPRR Senior Manager, Program Oversight

Cyber Third Party Risk Reduction (CTPRR) Senior Manager, Program Oversight

The Cyber Third Party Risk Reduction (CTPRR) program defines the framework for the management of information security risks with third party engagements, supports contracting, conducts assessments, and drives ongoing remediation of third parties supporting Capital One.

• Partner with all functions within CTPRR and stakeholders to gain a deep understanding of the third party ecosystem at Capital One.
• Work closely with the Cyber Audit and Exam function to develop and maintain a productive and seamless interaction model.
• Gather documentation from regulatory requests and coordinate the drafting of initial responses.
• Identify opportunities for program improvement based on regulatory and industry trends and best practices, and recommend enhancements to all functions within the program.
• Lead efforts to address any issues identified through external reviews of the program.
• Participate in on‑site assessments of third parties during focused reviews and lead ad hoc requests of the program as needed.

• High School Diploma, GED, or equivalent.
• At least 6 years of experience in Information Security conducting risk assessments.
• At least 5 years of experience managing third party vendors and communicating with senior level management.
• Strong analytical skills, ability to manage multiple requests with aggressive timelines, and excellent communication of technical and non‑technical concepts.
• Preferred: CISSP, CISA, or CRISC certification; 2+ years of audit experience; 3+ years at a financial institution.

Capital One is an equal opportunity employer (EOE, including disability/vet) committed to non‑discrimination in compliance with applicable federal, state, and local laws.