Principal Risk Associate - Application and Data Management Team
Capital One's Application Data Management Team (ADM) is looking for a Principal Associate level application access Risk Manager. The ADM team functions as the Application Business Owner for Consumer Operations and Core Banking Applications. Working closely with our business and technology partners, we are responsible for ensuring applications are capable of meeting current and future business needs, are well managed, and are compliant with applicable banking rules and regulations. The ADM team owns 90+ applications, provides Product Ownership for over 20 Agile teams, oversight on over 550 system changes, manages over 100 monitoring controls and 3,250 data loads, manages associate access for over 16K users and drives the Technology Modernization Roadmap for Consumer Ops. The ADM Access Risk Management (ARM) team ensures Capital One Bank customers can access their funds and are protected from inappropriate data use and access. ARM services managed by this team include annual profile reviews of all application entitlements, new application entitlement definitions, high privileged user reviews, access provisioning, and high risk transaction controls. Team goals are aimed at maturing a high functioning organization by mitigating risks, resolving issues, improving processes and implementing proactive controls. The candidate must be a champion for continuous improvement, have a passion for learning new technologies, and must be comfortable operating in an Agile environment.
Responsibilities may include:
-Accountable for ensuring that application access for allocated portfolio is compliant with Information Security policy
-Ownership of all risk management, access management, application integration, and end user experiences for all applications within the portfolio
-Coordinates across all Access portfolios to ensure that cross-portfolio requests are appropriately prioritized and completed for teams within the Product Owner’s portfolio
-Works with Strategy team, Product Owners & Managers and Business Leadership to ensure that access needs are being met for the business teams aligned with each portfolio
-Accountable for all High Privileged user access approvals for applications within the portfolio
-Manages the Application Risk Management onboarding process and schedule for all applications within their portfolio [PA]
Partners with Product Managers to ensure that all application enhancements & decommissions include the Access Risk Management team to manage user accesses
Accountable for continually identifying process improvements and opportunities for automation within the Access Risk Management Space
Accountable for the overall well managed nature of Access Risk Management processes through the review and approval of process documentation and tools
Handles secondary troubleshooting efforts for escalated access resolution issues, and oversees escalation to other parties as needed to make the customer “whole”.
- Bachelor’s degree or military experience.
- At least 2 years of risk management experience OR 2 years of controls management experience
- At least 2 years of project management experience OR at least 2 years of process management experience
-One or more years of experience in Information Security
-One or more years of experience with managing access on a system
-One or more years of experience with mainframe technology & security structures
-Six Sigma Certification OR Business Process Management Certification OR Project Management Professional Certification or Lean Certification
At this time, Capital One will not sponsor a new applicant for employment authorization for this position.