Global Payments Network (GPN) Risk & Advisory - Principal Associate

Capital One • McLean, VA

15h • Hybrid

About The Position

As a Principal Associate on Capital One’s Global Payments Network (GPN) Risk & Advisory team, you will serve as a trusted risk advisor to GPN Tech within the Tech and Product Risk organization. You will help manage risks associated with the organization’s expanding technology footprint, partnering with GPN Tech and broader risk teams to establish effective risk governance, implement best practices, and inform decisions made by the GPN Tech Accountable Executive.

The role involves leading strategic risk conversations, advising stakeholders, and overseeing risk objects throughout their lifecycle. You will promote continuous improvement in risk management, help simplify processes, and provide clear, timely guidance and reporting. This is a hybrid position, subject to Capital One’s hybrid policy and required on-site presence at the designated office location.

The role is eligible for performance-based incentive compensation, which may include cash bonuses and/or long-term incentives. Capital One also offers a comprehensive benefits package; eligibility varies by employment status and management level. Capital One will not sponsor new applicants for employment authorization or provide immigration-related support for this position.

Requirements

• Bachelor’s degree or military experience.
• At least 3 years of experience in technology (including software delivery, distribution systems, cloud-native architecture, or infrastructure as code); cybersecurity (including identity and access management, application security, cloud security, or data protection); technology auditing; system risk management; technology risk assessment; resilience engineering; chaos engineering; site reliability engineering; or a combination of these areas.
• At least 2 years of experience in project management, risk program oversight, or process management.
• At least 2 years of experience in Technology Risk Management, Financial Services, or Payment Network Processing.
• At least 2 years of experience collaborating with and supporting key internal stakeholders.
• Deep expertise in governance, risk, and compliance within technology environments.
• Hands-on experience managing risk in large-scale organizations, with a strong focus on simplifying complex topics.
• Strong organizational skills and executive presence to build collaborative relationships across technical and business teams.
• Exposure to operational GPN Tech management and governance.
• Exceptional written and verbal communication skills.
• Proficiency in data visualization, analysis, and reporting.
• Knowledge of risk assessment, the Three Lines of Defense model, and risk reporting and analytics.

Nice To Haves

• At least 3 years of experience conducting risk assessments and providing risk advisory services for large-scale card or debit payment networks.
• At least 1 year of experience managing risk, governance, and controls for technology platforms, digital products, or solutions.
• Strong knowledge of key controls and risk management frameworks for payment networks.
• Industry certifications such as CISA, CRISC, CISSP, or CISM.

Responsibilities

• Govern and support risks and issues throughout their lifecycle.
• Drive risk identification and mitigation across GPN Tech teams to support decision-making by GPN Tech Accountable Executives.
• Lead, facilitate, and contribute to discussions that identify, assess, manage, and report critical risk-related issues.
• Regularly review and challenge GPN Tech risk objects using a continuous improvement approach.
• Build collaborative partnerships and develop adaptable, fit-for-purpose solutions with GPN Tech stakeholders.
• Collaborate with the extended Risk Guides team to streamline processes and reduce complexity.
• Provide tailored risk advice, constructive challenge, and guidance to GPN Tech stakeholders.
• Communicate key messages and action-item progress clearly, and deliver timely risk input, context, and reporting.
• Maintain current, in-depth technical expertise across relevant risk domains and industry standards.

Benefits

• Comprehensive health, financial, and other benefits supporting total well-being.
• Eligibility for performance-based incentive compensation, which may include cash bonuses and/or long-term incentives.

What This Job Offers

• Job Type: Full-time
• Career Level: Senior