Principal Associate, Cyber Procedure Governance Analyst
Capital OneAbout the role
As a Cyber Procedure Governance expert in the Capital One Cyber Organization, you will apply your risk management and governance skills to the enterprise. You will partner across Technology, Enterprise Service Risk, and Cyber Teams to develop and support well-managed Cyber procedures, identify gaps in requirements and processes, and drive efforts to promote procedure governance in a manner that protects our customer, shareholders, and associates.
As part of Capital One’s Cyber Governance team, you are the Procedure Governance subject matter expert. The Cyber Procedure Governance Associate will collaborate with fellow Cyber organization team members, first line partners, and second line partners to establish a governance function that sets the tone for procedures and processes within Cyber. The Cyber Procedure Governance Associate will organize, advise, educate, and support Cyber Process Owners, Document Owners, and Engineers throughout the lifecycle of Cyber procedures.
The Cyber Procedures Governance Associate will be able to operate within a highly collaborative team environment. The work we participate in has a high level of exposure across the Cyber line of business, including other first and second line risk partners.
Responsibilities:
Execute and perform governance reviews for different areas in Cyber, encompassing related governance, risk, and compliance components
Partner with engineers, product, and process owners to establish and maintain effective process documentation and facilitate material changes
Build successful relationships across the enterprise to understand the impact of how Cyber procedures align to requirements and industry standards
Educate stakeholders on Cyber policy management and drive socialization efforts forward to promote procedure governance
Enable a strong culture of procedure governance that’s adaptable to a changing environment
Identify process gaps and escalate potential issues and areas of non compliance
Create and establish new end-to-end processes to proactively mature the program
Establish well managed, best practices for procedures
Actively seek and report on opportunities to strengthen processes via automation
Perform data analysis and propose solutions that demonstrate how the Cyber program is performing
Self prioritize and effectively manage multiple priorities and tasks across the team to deliver quality results
Execute mapping of enterprise tools and applications to existing Cyber processes
Analyze and interpret industry standards, regulations, and best practices
Basic Qualifications:
High School Diploma, GED, or equivalent certification
At least 3 years of experience in cybersecurity or risk management
At least 1 years of experience in project management
Preferred Qualifications:
Bachelor's Degree
3+ years of experience in governance
2+ years of policy management experience
2+ years of technology audit experience
2+ years of experience with cybersecurity or technology risk management frameworks
At this time, Capital One will not sponsor a new applicant for employment authorization, or offer any immigration related support for this position (i.e. H1B, F-1 OPT, F-1 STEM OPT, F-1 CPT, J-1, TN, or another type of work authorization).
The minimum and maximum full-time annual salaries for this role are listed below, by location. Please note that this salary information is solely for candidates hired to perform work within one of these locations, and refers to the amount Capital One is willing to pay at the time of this posting. Salaries for part-time roles will be prorated based upon the agreed upon number of hours to be regularly worked.
McLean, VA: $127,500 - $145,500 for Prin Assoc, Cyber Risk & Analysis
Candidates hired to work in other locations will be subject to the pay range associated with that lo
Apply for this role
Generate a tailored application kit with a matched cover letter, interview prep, and CV highlights — in under 60 seconds.
Apply Now →Generate Application KitFree account required — sign up in 30s