Principal Associate, Operational Risk Management, Third Party Risk Manager (TPRM)

Principal Associate, Operational Risk Management, Third Party Risk Manager (TPRM)

Capital One is seeking an energetic, self-motivated Principal Associate to join the Third Party Risk Management (TPRM) Team within the Operational Risk Management (ORM) second line of defense. The TPRM team is a dedicated group of professionals whose mission is to provide value-add, independent stewardship of Capital One's third-party management practices, enabling Capital One to manage its Third Party Risk effectively and resiliently.

The successful candidate will play a critical role in driving the strategy, integrity, and continuous improvement of the Third Party Risk Management Framework across the enterprise. In this role, you will lead high-impact governance programs, serve as a core subject matter expert, and ensure our risk management practices are rigorously executed and well-managed.

You will collaborate closely with cross-functional partners and leadership to navigate a dynamic regulatory landscape and uphold sound risk practices.

- Lead Framework and Policy Governance: Support the enterprise-focused TPRM policies and standards across the full lifecycle.

- Drive Risk Oversight Programs: Lead the execution of the annual TPRM Risk Oversight Program Self-Assessment and Process Criticality Assessments to ensure robust framework compliance.

- Act as an Internal SME: Serve as the primary subject matter expert on TPRM requirement applicability, providing guidance to the business and participating in broader partner risk assessments (such as Cyber Program assessments) from a holistic risk perspective.

- Manage Issue Remediation: Own and lead the end-to-end remediation of TPRM-related risk issues, ensuring sustainable, well-managed solutions are implemented.

- Maintain Taxonomies and Diagnostics: Shape and maintain the TPRM Risk Taxonomies and Process Diagnostic guidance to ensure consistency and clarity across the enterprise.

- Support Audits and Exams: Act as a key partner and facilitator for relevant first-line and second-line audits, regulatory examinations, and Process Level Assessments.

- Ensure Mandate Compliance: Support Designated Mandate Owners (DMO) with rigorous requirement fulfillment and annual attestation processes.

- At least 3 years of experience in Operational Risk Management, Third-Party Risk Management, Compliance, or Audit within a financial institution or a regulated industry.

- At least 2 years of experience in process management governance.

- 4+ years of experience in a dedicated Third-Party Risk Management (TPRM) role focusing on overall risk framework, governance, and policy (as opposed to technical or cyber-only security assessments).

- 3+ years of experience in Process Management or Project Management, with a strong understanding of how to optimize risk workflows.

- Proven track record of leading risk remediation efforts and managing interactions with internal audit or regulatory examiners.

- Excellent written and verbal communication skills, with the ability to influence stakeholders and synthesize complex risk concepts for leadership.