PRINCIPAL ASSOCIATE, CYBER RISK

3 weeks ago


Plano, United States Capital One Full time
Locations: VA - Richmond, United States of America, Richmond, Virginia

Principal Associate, Cyber Risk & Analysis (Technology and Cyber Risk)

Do you want to join a collaborative team dedicated to making risk management a competitive advantage at Capital One? We are looking to hire a Principal Associate to support our Material Tech and Cyber Change (MTC) Program within the first line of defense Enterprise Services (ES) Risk Office. Principal Risk Associates at Capital One are highly motivated Risk and Process management professionals with great analytical, organizational, risk management, project management, and communication skills. They are experienced and progressive individuals that deliver value-added risk management services to our Business and Technology partners.

In support of the mission to create trustworthy, reliable, and human-in-the-loop AI systems that change banking for good, we are building our team with an emphasis on finding talented individuals who will bring unique perspectives and experiences to our MTC Program. In this position, you will play a key role in driving the execution, assessment, and monitoring of change initiatives while also identifying enhancements to our risk assessment processes. The ideal candidate will be a detail-oriented and analytical thinker, with experience in technology and/or cybersecurity domains. The ideal candidate will also have the ability to manage competing priorities, collaborate with stakeholders to gain consensus, communicate effectively to associates and senior leaders, and drive problem-solving to achieve objectives.

Responsibilities:

  • Support our change-driven risk assessment processes, which identify, assess, monitor and govern change initiatives across the enterprise, including changes that may have a Generative AI and/or Machine Learning impact.

  • Partner with the first-line of defense Technology and Cyber teams, Lines of Business, and second-line of defense risk management teams, to ensure effective collaboration within the team and across stakeholder groups.

  • Assist and drive project and program delivery, including risk assessment reporting, stakeholder communications, and drafting and reviewing materials for Senior Leadership in support of program governance activities.

  • Contribute to the creation and refinement of well managed practices for identifying, managing, tracking, and mitigating risks related to our MTC Program.

  • Use data-driven insights to continuously look for ways to improve and innovate our approach to risk management.

  • Support interactions with Internal Audit and Regulatory agencies related to our work.

Basic Qualifications:

  • Bachelor's degree or military experience

  • At least 3 years of experience in the fields of Cybersecurity, Technology, or Cyber Internal or External Audit

  • At least 2 years of experience in Business Process Management, Project Management, or Risk Management

Preferred Qualifications:

  • 5+ years of experience in the fields of Cybersecurity, Technology, or Cyber Internal or External Audit

  • 3+ years of experience in Business Process Management, Project Management, or Risk Management

  • 2+ years in the financial services industry

  • 2+ years of experience supporting, partnering, and interacting with internal business clients and/or preparing reports and communications for an executive audience

  • Proficient with G Suite, Google Workspace for reports, analysis, and presentations.

  • Industry cybersecurity / technology risk certifications such as CISSP, CRISC, CISM, CGRC, or other similar certifications

  • Experience with technologies that help enable Generative AI data analysis (e.g. Python, Tableau, AWS Quicksight, SQL)

  • Familiarity with AI/ML frameworks (NIST AI) and best practices for generative AI development and deployments

At this time, Capital One will not sponsor a new applicant for employment authorization for this position.

Capital One offers a comprehensive, competitive, and inclusive set of health, financial and other benefits that support your total well-being. Learn more at the. Eligibility varies based on full or part-time status, exempt or non-exempt status, and management level.

This role is expected to accept applications for a minimum of 5 business days.

No agencies please. Capital One is an equal opportunity employer committed to diversity and inclusion in the workplace. All qualified applicants will receive consideration for employment without regard to sex (including pregnancy, childbirth or related medical conditions), race, color, age, national origin, religion, disability, genetic information, marital status, sexual orientation, gender identity, gender reassignment, citizenship, immigration status, protected veteran status, or any other basis prohibited under applicable federal, state or local law. Capital One promotes a drug-free workplace. Capital One will consider for employment qualified applicants with a criminal history in a manner consistent with the requirements of applicable laws regarding criminal background inquiries, including, to the extent applicable, Article 23-A of the New York Correction Law; San Francisco, California Police Code Article 49, Sections 4901-4920; New York City?s Fair Chance Act; Philadelphia?s Fair Criminal Records Screening Act; and other applicable federal, state, and local laws and regulations regarding criminal background inquiries.

If you have visited our website in search of information on employment opportunities or to apply for a position, and you require an accommodation, please contact Capital One Recruiting at 1- or via email at . All information you provide will be kept confidential and will be used only to the extent required to provide needed reasonable accommodations.

For technical support or questions about Capital One's recruiting process, please send an email to

Capital One does not provide, endorse nor guarantee and is not liable for third-party products, services, educational tools or other information available through this site.

Capital One Financial is made up of several different entities. Please note that any position posted in Canada is for Capital One Canada, any position posted in the United Kingdom is for Capital One Europe and any position posted in the Philippines is for Capital One Philippines Service Corp. (COPSSC).



  • Plano, United States Capital One Full time

    West Creek 4 (12074), United States of America, Richmond, VirginiaSenior Director, Technology & Cyber Risk OfficerCapital One is one of the fastest growing organizations in the world today, powered by our passion for our customers. We are serious about technology, we dream big, and we execute: Capital One moved our entire enterprise to the public cloud over...


  • Plano, United States Capital One Full time

    Center 3 (19075), United States of America, McLean, VirginiaSenior Associate, Cyber Procedure Governance AnalystAs a Cyber Procedure Governance expert in the Capital One Cyber Organization, you will apply your risk management and governance skills to the enterprise. You will partner across Technology, Enterprise Service Risk, and Cyber Teams to develop and...

  • Manager, Cyber Risk

    3 weeks ago


    Plano, United States Capital One Full time

    Center 1 (19052), United States of America, McLean, VirginiaManager, Cyber Risk & Analysis - Technology Audit (Hybrid)Capital One's Audit function is a dedicated group of professionals focused on delivering top-quality assurance services to the organization's Audit Committee. Audit professionals are experienced, well-trained and credentialed, and operate...


  • Plano, Texas, United States The Liberty Mutual Foundation Full time

    About the RoleThe Cyber Executive Underwriter plays a critical role in our organization, working independently and autonomously to underwrite policies within their underwriting authority. This position requires strong analytical and decision-making skills, as well as the ability to communicate complex information to stakeholders.Key...


  • Plano, Texas, United States Toyota North America Full time

    Excited to grow your career at Toyota?We value our talented employees, and whenever possible strive to help one of our associates grow professionally before recruiting new talent to our open positions. If you think the open position you see is right for you, we encourage you to applyOur people make all the difference in our success.Excited to grow your...


  • Plano, United States Capital One Full time

    Center 3 (19075), United States of America, McLean, VirginiaDirector, Cyber Security Operations CenterCapital One's Cyber Organization is a fast-paced, dynamic environment committed to enabling and securing the business. Our Operations & Intelligence division is searching for an experienced Director to be an independent contributor and thought leader in our...

  • Payment Card Industry

    1 month ago


    Plano, United States Capital One Full time

    Center 3 (19075), United States of America, McLean, VirginiaPayment Card Industry (PCI) Security Advisor, Principal AssociateCyber Governance and Risk is seeking an associate to develop into a subject matter expert lead within the Payment Card Industry (PCI) team providing consulting to the enterprise regarding the PCI Data Security Standard (PCI DSS) and...

  • Senior Analyst

    3 months ago


    Plano, United States Toyota North America Full time

    Excited to grow your career at Toyota?We value our talented employees, and whenever possible strive to help one of our associates grow professionally before recruiting new talent to our open positions. If you think the open position you see is right for you, we encourage you to apply!Our people make all the difference in our success.This position is based in...


  • Plano, United States Capital One Full time

    Center 1 (19052), United States of America, McLean, VirginiaSr. Manager Cyber Technical, Technology AuditCapital One's Audit function is a dedicated group of professionals focused on delivering top-quality assurance services to the organization's Audit Committee. Audit professionals are experienced, well-trained and credentialed, and operate within a...


  • Plano, United States Toyota Tsusho Systems Full time

    Job DescriptionJob DescriptionAs vehicles become more connected and digitized, ensuring cybersecurity becomes crucial for consumer protection. UN-R155 mandates that OEMs and suppliers establish and operate a mature Cyber Security Management System (CSMS). This system ensures both the security of their own products and the consideration of cybersecurity...


  • Plano, United States Toyota Tsusho Systems Full time

    Job DescriptionJob DescriptionAs vehicles become more connected and digitized, ensuring cybersecurity becomes crucial for consumer protection. UN-R155 mandates that OEMs and suppliers establish and operate a mature Cyber Security Management System (CSMS). This system ensures both the security of their own products and the consideration of cybersecurity...


  • Plano, United States Capital One Full time

    Plano 3 (31063), United States of America, Plano, Texas Principal Associate, Process Manager (Platform Engineering) As a Platform Engineering Process Manager at Capital One, you will be part of a smart, talented team responsible for creating and enhancing our associate technology experience. You will work directly with our platform engineering teams...


  • Plano, United States JPMorgan Chase & Co Full time

    Job DescriptionJOB DESCRIPTIONTake your engineering expertise to new heights by joining a team of exceptionally talented professionals and solidify your place among top performers in the industry. As a Principal Cybersecurity Architect at JPMorgan Chase within the Cybersecurity and Technology Controls organization for Consumer & Community Banking (CCB),...


  • Plano, United States Toyota Tsusho Systems Full time

    Job DescriptionJob DescriptionA CSMS Playbook is an essential strategic document that equips organizations to combat cyber threats proactively and reactively. It serves as a comprehensive roadmap delineating the necessary actions and strategies to identify, contain, eradicate, and recover from a variety of security incidents in automotive products. It...


  • Plano, United States Toyota Tsusho Systems Full time

    Job DescriptionJob DescriptionA CSMS Playbook is an essential strategic document that equips organizations to combat cyber threats proactively and reactively. It serves as a comprehensive roadmap delineating the necessary actions and strategies to identify, contain, eradicate, and recover from a variety of security incidents in automotive products. It...


  • Plano, United States JPMorgan Chase & Co Full time

    Job DescriptionJOB DESCRIPTIONTake your engineering expertise to new heights by joining a team of exceptionally talented professionals and solidify your place among top performers in the industry. As a Principal Cybersecurity Architect at JPMorgan Chase within the Cybersecurity and Technology Controls organization for Consumer & Community Banking (CCB),...


  • Plano, United States JPMorgan Chase & Co. Full time

    As a Technology Risk Assurance Lead at JPMorgan Chase within the Cybersecurity & Technology Controls Organization, you'll have the opportunity to analyze, prioritize, communicate, and track information security findings generated by our internal cyber security assessment teams.  We're looking for someone who is eager to learn, able to absorb new...


  • Plano, United States FITGAP SOLUTIONS INC Full time

    Cyber security/ IAM governanceVisa: USC,GC,H4EAD,TNLocation: Plano,TX( TX locals)Main Skills:IAM,GRC,Sailpoint,MFAWork with internal/external teams to understand the security audit requirements and deliver against project plans.Assist in compliance initiatives at function and organizational levels in areas of Information security and Risk Management.Report...


  • Plano, United States FITGAP SOLUTIONS INC Full time

    Cyber security/ IAM governanceVisa: USC,GC,H4EAD,TNLocation: Plano,TX( TX locals)Main Skills:IAM,GRC,Sailpoint,MFAWork with internal/external teams to understand the security audit requirements and deliver against project plans.Assist in compliance initiatives at function and organizational levels in areas of Information security and Risk Management.Report...


  • Plano, United States Upbound Group Full time

    Job Description Upbound Group Senior Principal, Privacy  Job Description The Senior Principal of Privacy is responsible for proactively overseeing and managing the organization’s privacy program, ensuring compliance with all applicable privacy laws and regulations and implementation of best practices. This role involves developing and...