Senior Associate, Cyber Risk Specialist Identity & Access Management

Responsibilities

• Support the development and execution of the identity and access risk framework, providing guidance for Identity Governance & Administration, Privileged Access Management, and Entitlement Management.
• Perform risk assessments and data analysis to identify trends and reduce residual risk within the Bank Tech business.
• Drive cross-functional projects and manage simultaneous workstreams to ensure scope, timelines, and regulatory standards are met.
• Act as a key liaison between technology teams, cyber, vendors, and business partners to report on IAM risk posture.
• Prepare high-quality presentations and briefing materials for senior management and executive leadership regarding the risk environment and remediation status.
• Identify opportunities for automation and streamline business processes to achieve operational efficiency and audit readiness.
• Provide industry expertise on IAM concepts such as Single Sign-On (SSO), Multi-Factor Authentication (MFA), and Segregation of Duties (SOD).

Requirements

• At least 3 years of experience in Cybersecurity, Technology, Consulting, Audit, or Risk Management.
• At least 1 year of experience with Identity and Access Management (IAM).

Preferred Qualifications

• 4+ years of experience in Cybersecurity, Technology, Consulting, Audit, or Risk Management.
• 2+ years of experience with Identity and Access Management.
• Cybersecurity and technology risk certifications such as CISSP, CISA, CRISC, or CISM.
• Certified Identity and Access Manager (CIAM) or Certified Identity Management Professional (CIMP).
• Certified AI Governance Professional (AIGP) or other relevant AI risk management certifications.
• Experience in a Large Financial Services or Big4 consulting organization.

About the Company

Capital One is a technology-driven financial institution that operates at the intersection of business, cyber, and technology to drive innovation and security.