Principal Associate, Business Risk Guide- Enterprise Services Risk Office

Principal Associate, Business Risk Guide
- Enterprise Services Risk Office at Capital One summary:

The Principal Associate, Business Risk Guide at Capital One’s Enterprise Services Risk Office leads risk management initiatives across multiple business lines, focusing on technology and third-party risk. They conduct risk assessments, influence senior leadership on risk mitigation, and enhance risk programs to align with company strategies. The role requires strong analytical, communication, and project management skills to maintain a robust control environment in a complex, regulated business setting.

We are hiring! The Enterprise Services Business Risk Office provides risk management support to several lines of business including:
Brand, Enterprise Supplier Management, Enterprise Products & Experience (EPX), Software, External Affairs, eData, Global Workplace Solutions, Emerging Payments, Ventures, and Tech. As the risk team for Enterprise Services Business Risk, we are on the cutting edge of risk management and provide support for new and emerging technologies as well as critical business strategies. Capital One has taken a bold journey to build a technology company, while operating in a complex, highly regulated business.

​​As a Principal Associate, Business Risk Guide in Capital One’s Enterprise Services (ES) Risk organization, you will apply your risk management and analytical skills to some of our highest profile Risk Management projects. As a Principal Associate, Business Risk Guide in the Enterprise Services Risk Office, we are the first line of defense to help ensure our Company remains well-managed and avoid unnecessary risk.

In this position, you will play a key role in enhancing our third party risk management processes across Capital One and driving project and program delivery.

Here's what we're looking for in an ideal teammate:

• You are a critical thinker who seeks to understand the business and its control environment.

• You possess a relentless focus on quality and timeliness.

• You adapt to change, embrace bold ideas, and are intellectually curious. You like to ask questions, test assumptions, and challenge conventional thinking.

• You develop influential relationships based upon shared risk objectives and trust to deliver outstanding business impact.

• You create energy and an environment that fosters trust, collaboration, and belonging, making it easy to attract, hire, and retain top talent.

Responsibilities:

• Build successful relationships with ESM and other team members to understand the impact of technology risk on critical business processes

• Perform risk reviews during various processes such as Risk Control and Self Assessments (RCSAs), Process Level Assessments (PLA), Exceptions, Applications, Targeted Risk Assessments and recommend on risk mitigation activities.

• Influence leaders within ESM, Compliance, Cyber Security, second line risk organizations, and Internal Audit on key technology risks and actions needed

• Conduct periodic risk reviews with the executives and support reporting for risk metrics

• Develop risk analysis, perform deep dive investigations, and drive specific risk initiatives to minimize risk posture and strengthen overall control suite effectiveness

• Design and support internal risk and control governance processes

• Identify and implement continual risk program enhancements based on industry standards and best practices in alignment with Capital One’s strategic risk direction

• Support the Enterprise Services (ES) Risk organization by implementing new and innovative ideas

Basic Qualifications:

• High School Diploma, GED or Equivalent Certification

• At least 1 year of experience in the Financial Services or Technology industry

• At least 3 years of experience in project, program, process, risk management or a combination of these

• At least 3 years of experience facilitating and leading discussions across various disciplines

Preferred Qualifications:

• Bachelor’s Degree or military experience

• 4+ years of experience in risk management, technology, or a related discipline

• Experience in controls development, controls management,…