Principal Associate, Risk Management, Policy Analyst

EPX

McLean, VA, US
Base: $109,900 - $150,500 depending on location; b...
Technology and data risk management
Policy development and updates
Stakeholder engagement across defense lines
Technology & Data Risk Management (TDRM) is a small organization that packs a big punch, overseeing approximately 14,000 developers at Capital One and raising the bar for excellence in cybersecurity, reliability, and tech risk

Job Summary

  • Technology & Data Risk Management (TDRM) is a small organization that packs a big punch, overseeing approximately 14,000 developers at Capital One and raising the bar for excellence in cybersecurity, reliability, and tech risk.
  • As a Policy Analyst at the Principal Associate level, you will play a key role evolving data, technology, and information security policies, standards, and procedures, partnering with subject matter experts and engaging stakeholders across the first and second lines of defense.
  • Capital One offers a comprehensive, competitive, and inclusive set of health, financial and other benefits that support your total well-being.

Matching Summary

Technology & Data Risk Management (TDRM) is a small organization that packs a big punch, overseeing approximately 14,000 developers at Capital One and raising the bar for excellence in cybersecurity, reliability, and tech risk.

Salary

Base: $109,900 - $150,500 depending on location; Bonus/Equity: Performance based incentives including cash bonuses and/or long term incentives; Benefits: Comprehensive health, financial and other benefits

Skills & Requirements

Must-have

  • technology and data risk management
  • policy development and updates
  • stakeholder engagement across defense lines
  • cybersecurity and data protection expertise
  • project and process management
  • information security risk oversight

Nice-to-have

  • strategic thinking and intellectual curiosity
  • effective influencing and communication skills
  • customer-focused policy development
  • problem-solving and judgment
  • ability to manage multiple initiatives
  • execution-oriented and self-motivated

Key Requirements

  • Bachelor’s degree or military experience
  • 3+ years coordinating multi-stakeholder projects
  • 3+ years experience in information security, data management, technology, or risk management
  • 2+ years project or process management experience
  • Experience with cybersecurity or technology policy making
  • Familiarity with NIST, COBIT, ISO 27001, or DMBOK frameworks
  • Professional security management certifications (e.g. CISSP, CRISC, CIPP, CIPM, CDMP)
  • No employment sponsorship available

Work Rights

Must have valid US work authorization; no sponsorship available

Tailored Resume

Cover Letter