Global Payments Network (GPN) Risk & Advisory - Principal Associate
About The Position
As a Principal Associate on Capital One’s Global Payments Network (GPN) Risk & Advisory team, you will serve as a trusted risk advisor for GPN Tech within the Tech and Product Risk organization. You will help manage risks arising from the expanding technology footprint and partner with GPN Tech and broader risk teams to establish effective risk governance, implement best practices, and deliver well-managed outcomes that inform and empower GPN Tech Accountable Executives. The role involves leading strategic risk conversations and providing tailored advice, constructive challenge, and guidance to technical and business stakeholders. You will govern risk objects throughout their lifecycle, support risk identification and mitigation, and help ensure clear communication, timely reporting, and continuous improvement. This is a hybrid position, subject to Capital One’s hybrid policy and required on-site presence at the designated office location.
Requirements
- Bachelor's degree or military experience.
- At least 3 years of experience in technology, cybersecurity, technology auditing, system risk management, technology risk assessment, resilience engineering, chaos engineering, site reliability engineering, or a combination of these areas.
- At least 2 years of experience in project management, risk program oversight, or process management.
- At least 2 years of experience in Technology Risk Management, Financial Services, or Payment Network Processing.
- At least 2 years of experience collaborating with and supporting key internal stakeholders.
- Deep expertise in governance, risk, and compliance (GRC) within technology environments.
- Hands-on experience managing risk in large-scale organizations, with an ability to simplify complex topics.
- Strong organizational skills and executive presence to build collaborative relationships across technical and business teams.
- Exceptional written and verbal communication skills.
- Proficiency in data visualization, analysis, and reporting.
- Knowledge of risk assessment, the Three Lines of Defense model, and risk reporting and analytics.
Nice To Haves
- At least 3 years of experience conducting risk assessments and providing risk advisory services for large-scale card or debit payment networks.
- At least 1 year of experience managing risk, governance, and controls for technology platforms, digital products, or solutions.
- Strong knowledge of key controls and risk management frameworks for payment networks.
- Relevant industry certifications such as CISA, CRISC, CISSP, or CISM.
- Exposure to operational GPN Tech management and governance.
Responsibilities
- Govern and support risks and issues throughout their lifecycle.
- Drive risk identification and mitigation across GPN Tech teams to support decision-making by GPN Tech Accountable Executives.
- Lead, facilitate, and contribute to discussions that identify, assess, manage, and report critical risk-related issues.
- Regularly review and challenge GPN Tech risk objects using a continuous improvement approach.
- Partner with GPN Tech stakeholders to develop adaptable, fit-for-purpose solutions.
- Collaborate with the extended Risk Guides team to streamline processes and reduce complexity.
- Provide tailored risk advice, constructive challenge, and guidance to GPN Tech stakeholders.
- Communicate key messages and action-item progress clearly, and deliver timely risk input, context, and reporting.
- Maintain current, in-depth technical expertise across relevant risk domains and industry standards.
Benefits
- Comprehensive health, financial, and other benefits supporting total well-being.
- Performance-based incentive compensation, which may include cash bonuses and/or long-term incentives.
Stand Out From the Crowd
Upload your resume and get instant feedback on how well it matches this job.
What This Job Offers
Job Type
Full-time
Career Level
Senior
