cyber risk analyst

City National Bank

<div>Overview:
<div><b>LEAD IT RISK &amp; CONTROL</b></div><div></div><div><b><br>
WHAT IS THE OPPORTUNITY?</b></div><div>
&quot;The Lead IT Risk Controls Analyst is a subject-area specialist with specialized training, methods and analytic techniques to create recommendations and directions for cyber risk mitigation in a complex technical environment. Focus areas of security assessment by the Lead ITRC Security Analyst includes third party security and overall security program effectiveness in mitigating risk. The ITRC Analyst's goal to create actionable information for IT and business leadership, and to provide objective assessment of cyber security risks for auditors, regulators and external parties. This requires routinely authoring detailed reports and gathering metrics ensure stakeholders receive accurate and complete information. The Lead ITRC tkeeps abreast of external cyber security trends, technologies and cyber risk management approaches, and often works with other teams on cyber risk-related initiatives to provide subject-matter recommendations and guidance to achieve a posture within the bank's overall risk appetite. The Lead ITRC serves as an expert area of specialization. This role is a working lead that provides functional guidance and may coordinates or supervise the daily activities of individual contributors or working teams in areas of specialization.Provides input on resources planning, procedures,&quot;</div><div></div><div><b><br>
WHAT WILL YOU DO?</b></div><div><ul><li>
&quot;Define analysis objectives, collect data from internal and external sources, and evaluate/analyze data to provide objective information on cyber risks for IT and business management with both summary and detailed reporting</li><li>
Assess risk within subject specialty area to evaluate the design and effectiveness of security controls</li><li>
Provide insight and guidance to IT software and hardware upgrades and other projects to ensure production environments meet and exceed minimum security standards and will effectively counter cyber threats</li><li>
Partner with external partners, vendors, law enforcement, and intelligence community as applicable to fulfill reporting and information sharing requirements, and collecting information required for comprehensive risk analysis and assessment</li><li>
Create new and maintain process and procedural documentation for various risk analysis and risk assessment activities; Highlight industry-based methodologies, techniques or standards (FAIR, NIST, FFIEC, etc.) used as the basis for analysis efforts</li><li>
Publish routine, accurate risk analysis and assessment reports as defined by organizational risk policies and procedures to applicable audiences for each subject area discipline</li><li>
Participate in other security support projects and duties as needed or requested&quot;</li></ul></div><div></div><div><b><br>
WHAT DO YOU NEED TO SUCCEED?</b></div><div><b>
Required Qualifications*</b><ul><li>
Bachelor's Degree or equivalent</li><li>
Minimum of 12 years experience in Information/Cyber Security field</li><li>
Minimum of 7 years experience in cyber security operations, incident response, IT risk management or investigation</li><li>
Minimum 3 years&rsquo; experience managing or coordinating resources such as people or projects</li></ul><div>
</div><div><div><b>
Additional Qualifications</b></div><ul><li>
Demonstrated experience analyzing complex cyber security data sets within subject area specialty</li>
Demonstrated knowledge of cyber security landscape <li>- threats, trends, technologies</li><li>
Demonstrated knowledge of financial regulation and control frameworks applicable to cyber security or IT risk</li><li>
Excellent communication and interpersonal skills. Including a strong ability to create positive and professional business relationships with internal clients.</li><li>
Strong commitment to working as a team and providing excellent customer service.</li><li>
Exposure to banking or equivalent highly controlled technology environment is preferred</li><li>
Masters' degree in business, computer science or related field preferred</li><li>
Security certifications (CISSP, GSEC, etc.) are highly desired.</li><li>
Demonstrated experience with Industry or subject specific analysis or assessment frameworks is highly desired (FAIR, NIST CSF, etc.)</li><li>
Experience in banking/financial industry is strongly preferred</li><li>
Formalized training in cyber security analysis or assessment techniques</li></ul></div><div><b><br>
WHAT'S IN IT FOR YOU?</b></div><div><b>
Compensation</b><div>
Starting base salary: $100,000 -170,000 per year. Exact compensation may vary based on skills, experience, and location. This job is eligible for bonus and/or commissions.</div></div><div><b><br>
Benefits and Perks</b></div><div>
At City National, we strive to be the best at whatever we do, including the benefits and perks we offer our colleagues including:<ul><li>
Comprehensive healthcare coverage, including Medical, Dental and Vision plans, available the first of the month following start date</li><li>
Generous 401(k) company matching contribution</li><li>
Career Development through Tuition Reimbursement and other internal upskilling and training resources</li><li>
Valued Time Away benefits including vacation, sick and volunteer time</li><li>
Specialized health and family planning benefits including fertility benefits, and cancer, diabetes and musculoskeletal support programs</li><li>
Career Mobility support from a dedicated recruitment team</li><li>
Colleague Resource Groups to support networking and community engagement</li></ul><div>
</div><div>
Get a more detailed look at our Benefits and Perks.</div></div><div><b><br>
ABOUT US</b></div><div>
Since day one we've always gone further than the competition to help our clients, colleagues and communities flourish. City National Bank was founded in 1954 by entrepreneurs for entrepreneurs and that legacy of integrity, community and unparalleled client relationships continues today. City National is a subsidiary of Royal Bank of Canada, one of North America&rsquo;s leading diversified financial services companies. To learn more about City National and our dynamic company culture, visit us at About Us.</div><div><b><br>
INCLUSION AND EQUAL OPPORTUNITY EMPLOYMENT</b></div><div>
City National Bank fosters an inclusive environment where all forms of diversity are valued and leveraged to make us a better company and employer. We are an equal opportunity employer and all qualified applicants will receive consideration for employment without regard to race, color, religion, sexual orientation, gender identity, national origin, disability, veteran status or other basis protected by law.<br>
<br>
It is unlawful in Massachusetts to require or administer a lie detector test as a condition of employment or continued employment. An employer who violates this law shall be subject to criminal penalties and civil liability.<br>
<br>
<ul><li>Represents basic qualifications for the position. To be considered for this position, you must at least meet the required qualifications. careers.cnb.com accepts applications on an ongoing basis, until filled.</li></ul><br>
Unless otherwise indicated as fully remote, reporting into a designated City National location is an essential function of the job.</div></div></div>

Lead IT Risk & Control

Cyber Force

<div>Cairo, Egypt Hybrid Full-time</div>
<br><div><h2 class="jobSectionHeader"><b>About Cyber Force</b></h2>
<p>
Cyber Force is a cybersecurity consultancy delivering advisory, managed services, and operations to international clients. Our senior-led teams combine governance, engineering, and 24&times;7 response to turn cyber risk into measurable resilience.</p>
<h2 class="jobSectionHeader"><b>
Role Overview</b></h2>
<p>
We are looking for a Junior GRC Analyst to join our Cyber Risk, GRC &amp; Regulatory team. You will support delivery of governance, risk, and compliance engagements for international clients &mdash; conducting gap analyses, developing policies, executing risk assessments, supporting audits, and mapping controls across ISO 27001, NIST, PCI DSS, SOC 2, and more. This is a consultancy delivery role: real client projects from day one.</p>
<h2 class="jobSectionHeader"><b>
Key Responsibilities</b></h2>
<ul><li>Conduct gap analyses against ISO/IEC 27000 family (27001, 27002, 27005, 27701) and support remediation plans</li>
<li>Develop, review, and maintain information security policies, standards, and procedures</li>
<li>Execute risk assessments: identify threats/vulnerabilities, evaluate likelihood/impact, maintain risk registers</li>
<li>Support internal and external audits: gather evidence, review controls, track findings</li>
<li>Conduct vendor and third-party risk assessments</li>
<li>Map and crosswalk controls across ISO 27001, NIST CSF v2, NIST SP 800-53, PCI DSS, SOC 2</li>
<li>Develop Statements of Applicability (SoA), BCPs, and ISMS documentation</li>
<li>Prepare client deliverables: gap reports, risk outputs, policy docs, compliance summaries</li>
<li>Leverage AI tools (Claude, ChatGPT) for research, policy drafting, control mapping</li>
<li>Collaborate with SOC, offensive security, and architecture teams on control validation</li>
</ul><h2 class="jobSectionHeader"><b>Requirements</b></h2>
<ul><li>Bachelor&rsquo;s in Cybersecurity, Information Security, IT, Computer Science, or related</li>
<li>0&ndash;1 year in GRC, information security, compliance, or IT audit (internships count)</li>
<li>Solid understanding of the ISO/IEC 27000 family (27001, 27002, 27005) &mdash; a must</li>
<li>Familiarity with NIST CSF v2, RMF, SP 800-53 &mdash; highly preferred</li>
<li>Familiarity with PCI DSS and SOC 2 &mdash; highly preferred</li>
<li>Fluent English (written and spoken)</li>
<li>Demonstrated experience using LLM-based tools (Claude, ChatGPT) &mdash; this is a must</li>
<li>Strong technical writing skills</li>
<li>CISSP, CASP+, or VICI VCGP &mdash; a major plus</li>
<li>VICI VCGA, Security+, ISC2 CC, ISO 27001 LI/LA, CISA, CRISC &mdash; a plus</li>
<li>GRC platforms (ServiceNow, Archer, OneTrust) &mdash; a plus</li></ul></div>
<br><div><h4 class="jobSectionHeader"><b>Role details</b></h4>
<div>Location Cairo, Egypt
</div><div>Type Full-time
</div><div>Mode Hybrid</div></div>

Junior GRC Analyst

Information Technology Senior Management Forum

<div><div><p>Posted Date</p>
<p>4/09/2026</p>
</div><div><p>Description</p>
<div>Senior Associate, Technology Controls Testing - Enterprise Services Risk<p>
The Enterprise Services Risk organization is expanding with a focus on attracting innovative, pioneering, collaborative, and highly skilled professionals. We operate at the forefront of risk management, providing support for novel and developing technologies, as well as critical business strategies. Diverse perspectives and experiences are valued as we work to redefine the financial sector.</p><p><b>
About the Team:</b></p><p>
As a Senior Associate in the Control Governance Team, you will apply your technical and risk management skills to test and improve how we validate controls across the enterprise. You will partner across Cloud Engineering, Information Security, and Audit teams to develop best-in-class automated testing solutions that support innovation while protecting our environment.</p><p><b>
About the Role:</b></p><p>
As a member of the automation-focused testing team, you will collaborate with stakeholders to monitor and test processes and control environments, report results, and evaluate compliance with multi-cloud security requirements. Your contributions will drive insight into risk and control performance through the development of &quot;Audit-as-Code&quot; and process enhancements that enable real-time management of technology risks.</p><p>
The team is seeking a highly motivated specialist with a strong interest in process maturity, cloud technologies (AWS, GCP, Azure), and workflow automation. The ideal candidate will be able to design/execute automated test plans, identify control gaps via code, and build process enhancements to reduce manual audit overhead.</p><p><b>
Responsibilities:</b></p><ul><li><b>
Multi-Cloud Automated Control Testing:</b> Perform independent control testing activities and document results. Design and execute automated &quot;Tests of Effectiveness&quot; (ToE) for controls across AWS, Azure, and GCP.</li><li><b>
Process Enhancement &amp; Automation:</b><b> </b>Use code to perform analysis and repeatable tasks. Leverage Google Apps Script and other automation tools to streamline internal audit workflows, documentation, and reporting processes.</li><li><b>
Execute Data &amp; API Integration:</b> Leverage tools (e.g., Python/SQL) to extract and analyze data from cloud APIs. Visualize and create dashboards to support continuous control monitoring.</li><li><b>
Cloud Risk Identification:</b> Maintain a broad understanding of major cloud service providers (AWS, GCP, Azure) and their respective vulnerabilities to identify and escalate critical risks.</li><li><b>
Lifecycle Management:</b><b> </b>Demonstrate sound program management by documenting and communicating action plans, impediments, and risks to stakeholders.</li><li><b>
Policy Recommendation:</b> Research industry practices and regulatory changes; make recommendations to change policies and control programs to mitigate evolving risks in the cloud.</li><li><b>
Self-Challenge:</b> Effectively self-challenge control programs and escalate risks where appropriate to ensure alignment with Information Security Standards.</li></ul><p><b>
Basic Qualifications:</b></p><ul><li>
High School Diploma, GED or Equivalent Certification</li><li>
At least 2 years of experience in Risk Management, Process Management, or Project Management</li><li>
At least 2 years of experience in technology, audit, or cyber security risk management frameworks</li><li>
At least 1 year of experience working with scripting languages (e.g., Python, SQL, or JavaScript/Apps Script)</li><li>
At least 1 year of experience evaluating or implementing controls testing or risk assessment activities</li></ul><p><b>
Preferred Qualifications:</b></p><ul><li>
Bachelor's Degree or Military Experience</li><li>
Risk Certifications (CRISC, CISM, CRCM, CIPP, CISA, CISSP, ABA Risk Mgmt Certification)</li><li>
3+ years of experience in Risk Management, Internal Audit, or Information Security</li><li>
Hands-on experience with cloud risk, governance, and control validation across AWS, GCP, or Azure</li><li>
Experience building automated workflows or custom tools within Google Workspace using Apps Script</li><li>
Professional certifications such as CISA, CISSP, or Cloud-specific certifications (AWS Certified Solutions Architect, Azure Security Engineer, etc.)</li><li>
Experience testing internal controls within a &quot;Continuous Auditing&quot; or &quot;Continuous Monitoring&quot; framework</li><li>
Skilled at communicating technical risks to non-technical auditors and cross-functional partners at all organizational levels</li></ul><h4 class="jobSectionHeader"><b><i>
At this time, Capital One will not sponsor a new applicant for employment authorization for this position.</i></b></h4><p>
The minimum and maximum full-time annual salaries for this role are listed below, by location. Please note that this salary information is solely for candidates hired to perform work within one of these locations, and refers to the amount Capital One is willing to pay at the time of this posting. Salaries for part-time roles will be prorated based upon the agreed upon number of hours to be regularly worked.</p>
Chicago, IL: $101,100 - $115,400 for Sr. Assoc, Cyber Risk &amp; Analysis<br>
<p></p>
McLean, VA: $111,200 - $126,900 for Sr. Assoc, Cyber Risk &amp; Analysis<br>
<p></p>
New York, NY: $121,300 - $138,400 for Sr. Assoc, Cyber Risk &amp; Analysis<br>
<p></p>
Richmond, VA: $101,100 - $115,400 for Sr. Assoc, Cyber Risk &amp; Analysis<br>
<p></p>
Wilmington, DE: $101,100 - $115,400 for Sr. Assoc, Cyber Risk &amp; Analysis<p></p><p><br>
Candidates hired to work in other locations will be subject to the pay range associated with that location, and the actual annualized salary amount offered to any candidate at the time of hire will be reflected solely in the candidate&rsquo;s offer letter.</p>
This role is also eligible to earn performance based incentive compensation, which may include cash bonus(es) and/or long term incentives (LTI). Incentives could be discretionary or non discretionary depending on the plan.<p>
Capital One offers a comprehensive, competitive, and inclusive set of health, financial and other benefits that support your total well-being. Learn more at the Capital One Careers website. Eligibility varies based on full or part-time status, exempt or non-exempt status, and management level.</p>
This role is expected to accept applications for a minimum of 5 business days.No agencies please. Capital One is an equal opportunity employer (EOE, including disability/vet) committed to non-discrimination in compliance with applicable federal, state, and local laws. Capital One promotes a drug-free workplace. Capital One will consider for employment qualified applicants with a criminal history in a manner consistent with the requirements of applicable laws regarding criminal background inquiries, including, to the extent applicable, Article 23-A of the New York Correction Law; San Francisco, California Police Code Article 49, Sections 4901-4920; New York City&rsquo;s Fair Chance Act; Philadelphia&rsquo;s Fair Criminal Records Screening Act; and other applicable federal, state, and local laws and regulations regarding criminal background inquiries.<p>
If you have visited our website in search of information on employment opportunities or to apply for a position, and you require an accommodation, please contact Capital One Recruiting at 1-800-304-9102 or via email at RecruitingAccommodation@capitalone.com. All information you provide will be kept confidential and will be used only to the extent required to provide needed reasonable accommodations.</p><p>
For technical support or questions about Capital One's recruiting process, please send an email to Careers@capitalone.com</p><p>
Capital One does not provide, endorse nor guarantee and is not liable for third-party products, services, educational tools or other information available through this site.</p><p>
Capital One Financial is made up of several different entities. Please note that any position posted in Canada is for Capital One Canada, any position posted in the United Kingdom is for Capital One Europe and any position posted in the Philippines is for Capital One Philippines Service Corp. (COPSSC).</p>
Senior Associate, Technology Controls Testing - Enterprise Services Risk<p>
The Enterprise Services Risk organization is expanding with a focus on attracting innovative, pioneering, collaborative, and highly skilled professionals. We operate at the forefront of risk management, providing support for novel and developing technologies, as well as critical business strategies. Diverse perspectives and experiences are valued as we work to redefine the financial sector.</p><p><b>
About the Team:</b></p><p>
As a Senior Associate in the Control Governance Team, you will apply your technical and risk management skills to test and improve how we validate controls across the enterprise. You will partner across Cloud Engineering, Information Security, and Audit teams to develop best-in-class automated testing solutions that support innovation while protecting our environment.</p><p><b>
About the Role:</b></p><p>
As a member of the automation-focused testing team, you will collaborate with stakeholders to monitor and test processes and control environments, report results, and evaluate compliance with multi-cloud security requirements. Your contributions will drive insight into risk and control performance through the development of &quot;Audit-as-Code&quot; and process enhancements that enable real-time management of technology risks.</p><p>
The team is seeking a highly motivated specialist with a strong interest in process maturity, cloud technologies (AWS, GCP, Azure), and workflow automation. The ideal candidate will be able to design/execute automated test plans, identify control gaps via code, and build process enhancements to reduce manual audit overhead.</p><p><b>
Responsibilities:</b></p><ul><li><b>
Multi-Cloud Automated Control Testing:</b> Perform independent control testing activities and document results. Design and execute automated &quot;Tests of Effectiveness&quot; (ToE) for controls across AWS, Azure, and GCP.</li><li><b>
Process Enhancement &amp; Automation:</b><b> </b>Use code to perform analysis and repeatable tasks. Leverage Google Apps Script and other automation tools to streamline internal audit workflows, documentation, and reporting processes.</li><li><b>
Execute Data &amp; API Integration:</b> Leverage tools (e.g., Python/SQL) to extract and analyze data from cloud APIs. Visualize and create dashboards to support continuous control monitoring.</li><li><b>
Cloud Risk Identification:</b> Maintain a broad understanding of major cloud service providers (AWS, GCP, Azure) and their respective vulnerabilities to identify and escalate critical risks.</li><li><b>
Lifecycle Management:</b><b> </b>Demonstrate sound program management by documenting and communicating action plans, impediments, and risks to stakeholders.</li><li><b>
Policy Recommendation:</b> Research industry practices and regulatory changes; make recommendations to change policies and control programs to mitigate evolving risks in the cloud.</li><li><b>
Self-Challenge:</b> Effectively self-challenge control programs and escalate risks where appropriate to ensure alignment with Information Security Standards.</li></ul><p><b>
Basic Qualifications:</b></p><ul><li>
High School Diploma, GED or Equivalent Certification</li><li>
At least 2 years of experience in Risk Management, Process Management, or Project Management</li><li>
At least 2 years of experience in technology, audit, or cyber security risk management frameworks</li><li>
At least 1 year of experience working with scripting languages (e.g., Python, SQL, or JavaScript/Apps Script)</li><li>
At least 1 year of experience evaluating or implementing controls testing or risk assessment activities</li></ul><p><b>
Preferred Qualifications:</b></p><ul><li>
Bachelor's Degree or Military Experience</li><li>
Risk Certifications (CRISC, CISM, CRCM, CIPP, CISA, CISSP, ABA Risk Mgmt Certification)</li><li>
3+ years of experience in Risk Management, Internal Audit, or Information Security</li><li>
Hands-on experience with cloud risk, governance, and control validation across AWS, GCP, or Azure</li><li>
Experience building automated workflows or custom tools within Google Workspace using Apps Script</li><li>
Professional certifications such as CISA, CISSP, or Cloud-specific certifications (AWS Certified Solutions Architect, Azure Security Engineer, etc.)</li><li>
Experience testing internal controls within a &quot;Continuous Auditing&quot; or &quot;Continuous Monitoring&quot; framework</li><li>
Skilled at communicating technical risks to non-technical auditors and cross-functional partners at all organizational levels</li></ul><h4 class="jobSectionHeader"><b><i>
At this time, Capital One will not sponsor a new applicant for employment authorization for this position.</i></b></h4><p>
The minimum and maximum full-time annual salaries for this role are listed below, by location. Please note that this salary information is solely for candidates hired to perform work within one of these locations, and refers to the amount Capital One is willing to pay at the time of this posting. Salaries for part-time roles will be prorated based upon the agreed upon number of hours to be regularly worked.</p>
Chicago, IL: $101,100 - $115,400 for Sr. Assoc, Cyber Risk &amp; Analysis<br>
<p></p>
McLean, VA: $111,200 - $126,900 for Sr. Assoc, Cyber Risk &amp; Analysis<br>
<p></p>
New York, NY: $121,300 - $138,400 for Sr. Assoc, Cyber Risk &amp; Analysis<br>
<p></p>
Richmond, VA: $101,100 - $115,400 for Sr. Assoc, Cyber Risk &amp; Analysis<br>
<p></p>
Wilmington, DE: $101,100 - $115,400 for Sr. Assoc, Cyber Risk &amp; Analysis<p></p><p><br>
Candidates hired to work in other locations will be subject to the pay range associated with that location, and the actual annualized salary amount offered to any candidate at the time of hire will be reflected solely in the candidate&rsquo;s offer letter.</p>
This role is also eligible to earn performance based incentive compensation, which may include cash bonus(es) and/or long term incentives (LTI). Incentives could be discretionary or non discretionary depending on the plan.<p>
Capital One offers a comprehensive, competitive, and inclusive set of health, financial and other benefits that support your total well-being. Learn more at the Capital One Careers website. Eligibility varies based on full or part-time status, exempt or non-exempt status, and management level.</p>
This role is expected to accept applications for a minimum of 5 business days.No agencies please. Capital One is an equal opportunity employer (EOE, including disability/vet) committed to non-discrimination in compliance with applicable federal, state, and local laws. Capital One promotes a drug-free workplace. Capital One will consider for employment qualified applicants with a criminal history in a manner consistent with the requirements of applicable laws regarding criminal background inquiries, including, to the extent applicable, Article 23-A of the New York Correction Law; San Francisco, California Police Code Article 49, Sections 4901-4920; New York City&rsquo;s Fair Chance Act; Philadelphia&rsquo;s Fair Criminal Records Screening Act; and other applicable federal, state, and local laws and regulations regarding criminal background inquiries.<p>
If you have visited our website in search of information on employment opportunities or to apply for a position, and you require an accommodation, please contact Capital One Recruiting at 1-800-304-9102 or via email at RecruitingAccommodation@capitalone.com. All information you provide will be kept confidential and will be used only to the extent required to provide needed reasonable accommodations.</p><p>
For technical support or questions about Capital One's recruiting process, please send an email to Careers@capitalone.com</p><p>
Capital One does not provide, endorse nor guarantee and is not liable for third-party products, services, educational tools or other information available through this site.</p><p>
Capital One Financial is made up of several different entities. Please note that any position posted in Canada is for Capital One Canada, any position posted in the United Kingdom is for Capital One Europe and any position posted in the Philippines is for Capital One Philippines Service Corp. (COPSSC).</p></div>
</div><div><p>Salary</p><p>
101,100.00 - 115,400.00 Annual</p>
</div><div></div><div><div><p>Type</p><div><p>
Full-time</p></div></div></div></div>

Senior Associate, Technology Controls Testing - Enterprise Services Risk

Sayers Technology

<p><b>Overview</b></p><p>Type: Temporary Short-Term Contract - 6 weeks<br/>Start: Immediate (this week)</p><p>Location: Remote</p><ul><li><b>Effective communication skills</b></li><li>Ability to explain technical risks to a non-technical business partner</li><li>Strong written skills</li></ul><p>i. Translate cyber risk into business impact</p><ul><li>Handling sensitive data responsibly</li><li>Incident response Facilitation</li></ul><p><b>i. </b>Liaison between the business, third-party and internal IR/CTI team</p><p><b>ii. </b>Creating and document incident response reports</p><ul><li><b>Teamwork</b></li><li>The ability to work independently</li><li>Proven and strong cross functional collaboration</li><li>Agile</li><li><b>Critical Thinking</b></li><li>Ability to analyze complex data and detect patterns</li><li><b>Attention to Detail</b></li><li>Ability to quickly identify anomalies and conflicts across responses</li><li>Effective risk-based prioritization</li><li><b>Risk Assessment </b></li><li>Evaluating responses and ability to identify and prioritize GAPs in control</li><li><b>Knowledge Area</b></li><li>Strong working understanding of NIST 800-53,</li><li>ISO27001 a bonus</li><li>MITRE ATT&amp;CK</li><li>Cybersecurity Principles</li></ul><p><b>i. </b>E.g., Confidentiality, Integrity, Availability</p><ul><li>Compliance &amp; Regulations</li></ul><p>i. E.g., GDPR, HIPAA, PCI,</p><p>ii. FAR is a plus</p><ul><li>Cloud Security</li></ul><p>i. AWS, Azure, Google cloud security basics,</p><p>ii. FAR is a plus</p><ul><li>Vulnerability Management</li></ul><p>i. KEV List</p><p>Pay: $65.00 - $70.00 per hour</p><p>Work Location: Remote</p>

Cybersecurity Consultant

<div><div><p>Posted Date</p>
<p>4/09/2026</p>
</div><div><p>Description</p>
<div>Senior Associate, Cyber Risk and Analysis- Enterprise Services Risk<p><b>
About the Team:</b></p><p>
The Enterprise Services Risk organization is expanding with a focus on attracting innovative, pioneering, collaborative, and highly skilled professionals. We operate at the forefront of risk management, providing support for novel and developing technologies, as well as critical business strategies. Diverse perspectives and experiences are valued as we work to redefine the financial sector.</p><p>
As a Senior Associate, you will serve as a Risk Manager on the Central Services team in Capital One&rsquo;s Enterprise Services Risk (ESR) organization and will apply your risk management skills to the company&rsquo;s Enterprise organization. You will partner across Enterprise Services, Lines of Business teams to develop and support best-in-class industry risk solutions in a manner that supports innovation and protects our customers, shareholders, and associates. You will collaborate with both 1st and 2nd line teams to develop, monitor, and provide oversight to risk management processes, including reporting compliance results with requirements for the Enterprise organization. Your contributions will support one of Capital One&rsquo;s key programs to transform our risk ecosystem. Your work will drive insight into risk and control performance, as well as organizational change through risk identification, measurement, analysis, and reporting to enable better management of risks in an open and collaborative environment.</p><p><b>
About the Role:</b></p><p>
You will be responsible for Governance activities for our Policies, Control Testing Remediation, Issues, Audit support, Models, Computation Automation and collaborating with our 1st line partners and supporting various other risk reporting activities for the department. You will also support our broader Enterprise Services Risk team in governance requirements, including monthly and quarterly business reporting. Additional responsibilities will include managing our automation track and managing our process documentation.</p><p>
This role involves the understanding of requirements related to our Enterprise Policy Program and a general understanding of Technology and Information Security. The ability to clearly communicate across various levels is imperative in this role. The successful candidate will have a challenging role in a dynamic and fast-paced environment requiring ability to multi-task and prioritize assignments appropriately.</p><p><b>
In this role, you will:</b></p><ul><li>
Build relationships with key stakeholders to ensure delivery of commitments</li><li>
Effectively identify and solve problems independently in a constantly changing environment</li><li>
Govern and monitor of processes owned by Enterprise Services Risk throughout their lifecycle</li><li>
Serve as an advisor to business areas</li><li>
Create process documentation</li><li>
Support monthly and quarterly reporting requirements using Google suite of applications</li><li>
Initiate and execute process improvements</li><li>
Collaborate with our 2nd line partners to ensure understanding of program level changes</li><li>
Manage multiple tasks independently to meet deadlines</li><li>
Coordinate work between multiple areas and working on multiple projects simultaneously; leveraging/influencing business partners to drive results</li></ul><p><b>
Basic Qualifications:</b></p><ul><li>
High School Diploma, GED or Equivalent Certification</li><li>
At least 2 years of experience in Risk Management, Process Management, or Project Management</li></ul><p><b>
Preferred Qualifications</b></p><ul><li>
Bachelor's Degree or Military Experience</li><li>
Risk Certifications (CRISC, CISM, CRCM, CIPP, ABA Risk Mgmt Certification)</li><li>
3+ years of experience in Business Process Management, Project Management, or Risk Management</li><li>
3+ years of experience in IT Risk Management</li><li>
Excellent verbal presentation and written communication skills to confidently interact at all levels of the organization</li></ul><p><b><i>
At this time, Capital One will not sponsor a new applicant for employment authorization for this position.</i></b></p><p>
The minimum and maximum full-time annual salaries for this role are listed below, by location. Please note that this salary information is solely for candidates hired to perform work within one of these locations, and refers to the amount Capital One is willing to pay at the time of this posting. Salaries for part-time roles will be prorated based upon the agreed upon number of hours to be regularly worked.</p>
Richmond, VA: $101,100 - $115,400 for Sr. Assoc, Cyber Risk &amp; Analysis<p></p><p><br>
Candidates hired to work in other locations will be subject to the pay range associated with that location, and the actual annualized salary amount offered to any candidate at the time of hire will be reflected solely in the candidate&rsquo;s offer letter.</p>
This role is also eligible to earn performance based incentive compensation, which may include cash bonus(es) and/or long term incentives (LTI). Incentives could be discretionary or non discretionary depending on the plan.<p>
Capital One offers a comprehensive, competitive, and inclusive set of health, financial and other benefits that support your total well-being. Learn more at the Capital One Careers website. Eligibility varies based on full or part-time status, exempt or non-exempt status, and management level.</p>
This role is expected to accept applications for a minimum of 5 business days.No agencies please. Capital One is an equal opportunity employer (EOE, including disability/vet) committed to non-discrimination in compliance with applicable federal, state, and local laws. Capital One promotes a drug-free workplace. Capital One will consider for employment qualified applicants with a criminal history in a manner consistent with the requirements of applicable laws regarding criminal background inquiries, including, to the extent applicable, Article 23-A of the New York Correction Law; San Francisco, California Police Code Article 49, Sections 4901-4920; New York City&rsquo;s Fair Chance Act; Philadelphia&rsquo;s Fair Criminal Records Screening Act; and other applicable federal, state, and local laws and regulations regarding criminal background inquiries.<p>
If you have visited our website in search of information on employment opportunities or to apply for a position, and you require an accommodation, please contact Capital One Recruiting at 1-800-304-9102 or via email at RecruitingAccommodation@capitalone.com. All information you provide will be kept confidential and will be used only to the extent required to provide needed reasonable accommodations.</p><p>
For technical support or questions about Capital One's recruiting process, please send an email to Careers@capitalone.com</p><p>
Capital One does not provide, endorse nor guarantee and is not liable for third-party products, services, educational tools or other information available through this site.</p><p>
Capital One Financial is made up of several different entities. Please note that any position posted in Canada is for Capital One Canada, any position posted in the United Kingdom is for Capital One Europe and any position posted in the Philippines is for Capital One Philippines Service Corp. (COPSSC).</p>
Senior Associate, Cyber Risk and Analysis- Enterprise Services Risk<p><b>
About the Team:</b></p><p>
The Enterprise Services Risk organization is expanding with a focus on attracting innovative, pioneering, collaborative, and highly skilled professionals. We operate at the forefront of risk management, providing support for novel and developing technologies, as well as critical business strategies. Diverse perspectives and experiences are valued as we work to redefine the financial sector.</p><p>
As a Senior Associate, you will serve as a Risk Manager on the Central Services team in Capital One&rsquo;s Enterprise Services Risk (ESR) organization and will apply your risk management skills to the company&rsquo;s Enterprise organization. You will partner across Enterprise Services, Lines of Business teams to develop and support best-in-class industry risk solutions in a manner that supports innovation and protects our customers, shareholders, and associates. You will collaborate with both 1st and 2nd line teams to develop, monitor, and provide oversight to risk management processes, including reporting compliance results with requirements for the Enterprise organization. Your contributions will support one of Capital One&rsquo;s key programs to transform our risk ecosystem. Your work will drive insight into risk and control performance, as well as organizational change through risk identification, measurement, analysis, and reporting to enable better management of risks in an open and collaborative environment.</p><p><b>
About the Role:</b></p><p>
You will be responsible for Governance activities for our Policies, Control Testing Remediation, Issues, Audit support, Models, Computation Automation and collaborating with our 1st line partners and supporting various other risk reporting activities for the department. You will also support our broader Enterprise Services Risk team in governance requirements, including monthly and quarterly business reporting. Additional responsibilities will include managing our automation track and managing our process documentation.</p><p>
This role involves the understanding of requirements related to our Enterprise Policy Program and a general understanding of Technology and Information Security. The ability to clearly communicate across various levels is imperative in this role. The successful candidate will have a challenging role in a dynamic and fast-paced environment requiring ability to multi-task and prioritize assignments appropriately.</p><p><b>
In this role, you will:</b></p><ul><li>
Build relationships with key stakeholders to ensure delivery of commitments</li><li>
Effectively identify and solve problems independently in a constantly changing environment</li><li>
Govern and monitor of processes owned by Enterprise Services Risk throughout their lifecycle</li><li>
Serve as an advisor to business areas</li><li>
Create process documentation</li><li>
Support monthly and quarterly reporting requirements using Google suite of applications</li><li>
Initiate and execute process improvements</li><li>
Collaborate with our 2nd line partners to ensure understanding of program level changes</li><li>
Manage multiple tasks independently to meet deadlines</li><li>
Coordinate work between multiple areas and working on multiple projects simultaneously; leveraging/influencing business partners to drive results</li></ul><p><b>
Basic Qualifications:</b></p><ul><li>
High School Diploma, GED or Equivalent Certification</li><li>
At least 2 years of experience in Risk Management, Process Management, or Project Management</li></ul><p><b>
Preferred Qualifications</b></p><ul><li>
Bachelor's Degree or Military Experience</li><li>
Risk Certifications (CRISC, CISM, CRCM, CIPP, ABA Risk Mgmt Certification)</li><li>
3+ years of experience in Business Process Management, Project Management, or Risk Management</li><li>
3+ years of experience in IT Risk Management</li><li>
Excellent verbal presentation and written communication skills to confidently interact at all levels of the organization</li></ul><p><b><i>
At this time, Capital One will not sponsor a new applicant for employment authorization for this position.</i></b></p><p>
The minimum and maximum full-time annual salaries for this role are listed below, by location. Please note that this salary information is solely for candidates hired to perform work within one of these locations, and refers to the amount Capital One is willing to pay at the time of this posting. Salaries for part-time roles will be prorated based upon the agreed upon number of hours to be regularly worked.</p>
Richmond, VA: $101,100 - $115,400 for Sr. Assoc, Cyber Risk &amp; Analysis<p></p><p><br>
Candidates hired to work in other locations will be subject to the pay range associated with that location, and the actual annualized salary amount offered to any candidate at the time of hire will be reflected solely in the candidate&rsquo;s offer letter.</p>
This role is also eligible to earn performance based incentive compensation, which may include cash bonus(es) and/or long term incentives (LTI). Incentives could be discretionary or non discretionary depending on the plan.<p>
Capital One offers a comprehensive, competitive, and inclusive set of health, financial and other benefits that support your total well-being. Learn more at the Capital One Careers website. Eligibility varies based on full or part-time status, exempt or non-exempt status, and management level.</p>
This role is expected to accept applications for a minimum of 5 business days.No agencies please. Capital One is an equal opportunity employer (EOE, including disability/vet) committed to non-discrimination in compliance with applicable federal, state, and local laws. Capital One promotes a drug-free workplace. Capital One will consider for employment qualified applicants with a criminal history in a manner consistent with the requirements of applicable laws regarding criminal background inquiries, including, to the extent applicable, Article 23-A of the New York Correction Law; San Francisco, California Police Code Article 49, Sections 4901-4920; New York City&rsquo;s Fair Chance Act; Philadelphia&rsquo;s Fair Criminal Records Screening Act; and other applicable federal, state, and local laws and regulations regarding criminal background inquiries.<p>
If you have visited our website in search of information on employment opportunities or to apply for a position, and you require an accommodation, please contact Capital One Recruiting at 1-800-304-9102 or via email at RecruitingAccommodation@capitalone.com. All information you provide will be kept confidential and will be used only to the extent required to provide needed reasonable accommodations.</p><p>
For technical support or questions about Capital One's recruiting process, please send an email to Careers@capitalone.com</p><p>
Capital One does not provide, endorse nor guarantee and is not liable for third-party products, services, educational tools or other information available through this site.</p><p>
Capital One Financial is made up of several different entities. Please note that any position posted in Canada is for Capital One Canada, any position posted in the United Kingdom is for Capital One Europe and any position posted in the Philippines is for Capital One Philippines Service Corp. (COPSSC).</p></div>
</div><div><p>Salary</p><p>
101,100.00 - 115,400.00 Annual</p>
</div><div></div><div><div><p>Type</p><div><p>
Full-time</p></div></div></div></div>

Senior Associate, Cyber Risk and Analysis- Enterprise Services Risk

BlueVoyant

<div><p><b>Position:</b> Business Risk Analyst I</p><p><b>
Location: </b>Remote/Hybrid in Washington DC</p><p><b>
Work Authorization:</b> US Citizenship Required</p><p><b>
Summary:</b><br>
We are a high growth technology company with a focus on protecting critical national security and commercial supply chains. We leverage diverse data sets and collection techniques to proactively illuminate supply chains and identify areas of risk without requiring data input from our clients. Our unique outside-in approach depends on continuous innovation in building, developing, and exploiting a vast data ecosystem. Our Risk Operations team is looking for a new member to help advance the state of the art in our field. The Business Risk Analyst Level I serves as a specialist on semi-complex to complex analytical actions. This position reports to the Senior Business Risk Analyst and works with a team to conduct multi-source analysis and develop multi-source reports on risks to client systems and programs. All 202 supply chain risk management (SCRM) deployments and ongoing supply chain monitoring initiatives involve the Business Analyst who is passionate and knowledgeable about delivering tailored, timely, and highest quality insights at each step of the process. Please note that this position is Hybrid based in Washington, DC or remote.<br>
<br>
<b>Responsibilities:</b></p><ul><li>
Research and analyze client&rsquo;s supply chain, risk vectors and events impacting that supply chain, and event applicability for client-focused Department of War (DoW) programs and systems</li><li>
Categorize, score, and analyze risk events for applicability to each client&rsquo;s unique risk profile</li><li>
Brief 202 Group leadership on research and analysis used to identify insights into risks impacting the client&rsquo;s supply chain</li><li>
Supplier name reconciliation research</li><li>
Research on premium commercial data platforms for which 202 Group has a license</li><li>
Assist 202 analyst team on other tasks associated with Risk Operations</li><li>
Make recommendations on operational matters to Senior Analyst</li></ul><p><b><br>
Qualifications &amp; Experience:</b></p><ul><li>
Bachelor&rsquo;s degree</li><li>
Demonstrated research experience</li><li>
Relevant college work on defense or national security industrial base issues preferred</li><li>
Prior work experience gained in other government agencies or military experience preferred</li><li>
Strong analytic background and experience delivering data-driven insights with impact to senior decision-makers</li><li>
The ability to conduct complex research and analysis with an emphasis on DoW programs and systems</li><li>
Ability to work on complex risk projects in support of customer requirements</li><li>
Knowledge of defense systems and national security industrial policy</li><li>
Ability to learn new topics quickly and apply knowledge</li><li>
Ability to communicate clearly, concisely, and with accuracy, both orally and in writing</li><li>
Experience with Microsoft Office Programs</li><li>
Team player who works in a professional manner</li></ul><p><br>
<b>About BlueVoyant</b><br>
At BlueVoyant, we recognize that effective cyber security requires active prevention and defense across both your organization and supply chain. Our proprietary data, analytics, and technology, coupled with deep expertise, works as a force multiplier to secure your full ecosystem. Accuracy! Actionability! Timeliness! Scalability!<br>
<br>
Led by CEO, Jim Rosenthal, BlueVoyant&rsquo;s highly skilled team includes former government cyber officials with extensive frontline experience in responding to advanced cyber threats on behalf of the National Security Agency, Federal Bureau of Investigation, Unit 8200, and GCHQ, together with private sector experts. BlueVoyant services utilize large real-time datasets with industry leading analytics and technologies.<br>
<br>
Founded in 2017 by Fortune 500 executives, including Executive Chairman, Tom Glocer, and former Government cyber officials, BlueVoyant is headquartered in New York City and has offices in Maryland, Tel Aviv, San Francisco, London, Budapest, and Latin America.<br>
<br>
BlueVoyant uses AI-assisted tools within our applicant tracking system to help identify candidates whose experience and skills best match the requirements of a role. This technology provides hiring teams with additional insights to support fair and efficient hiring decisions. Please note that all applications are reviewed by a member of our hiring team, and final hiring decisions are made by humans, not AI. By submitting your application, you acknowledge that AI tools may assist in the evaluation of your resume as part of the recruitment process. For more information on how we process your personal data, please review our Candidate Privacy Notice available at https://www.bluevoyant.com/candidate-privacy-notice.</p><p>
All employees must be authorized to work in the United States. BlueVoyant provides equal employment opportunities to all employees and applicants for employment without regard to race, color, religion, sex, national origin, age, disability or genetics. In addition to federal law requirements, BlueVoyant complies with applicable state and local laws governing non-discrimination in employment in every location in which the company has facilities.<br>
<br>
Disclaimer: Please note that pursuant to contractual requirements and applicable law, in order for employees to perform work on some of the company&rsquo;s federal contracts, U.S. citizenship is required. Accordingly, an employee&rsquo;s ability to perform work on such contracts is contingent upon the company&rsquo;s verification of the employee&rsquo;s citizenship status. Furthermore, individuals may be subject to additional background checks and fingerprinting.</p><p><b>
BlueVoyant Candidate Privacy Notice</b>
</p><p>To understand how we secure and manage your personal data upon submitting a job application, please see our Candidate Privacy Notice, which can be found here - Candidate Privacy Notice</p><p>
</p><p>tS14ydxa0Q</p></div>

Business Risk Analyst I

Technology Ventures

<div>
 <p>
  We are seeking an Cyber Investigations Analyst to support Insider Threat detection, investigation, and response to activities focused on technical and behavioral insider risk. This role will conduct end-to-end investigations including triage, evidence collection, timeline development, and documentation aligned to investigation standards. The analyst will perform hypothesis-driven threat hunting and analysis using SIEM and enterprise telemetry, with a strong understanding of SOC operations, log analysis, and core networking concepts. (TCP/IP, DNS, HTTP/S) The role requires knowledge of insider threat categories such as IP theft, fraud, sabotage, espionage, and unintentional risk, including accidental disclosure. The analyst will identity behavioral indicators of risk, support cross-functional response workflows, and contribute to governed documentation, metrics, and reporting.
 </p>
 <p>
  <br/>
 </p>
 <p>
  Ideal candidates will have experience working in SAC's. Cybersecurity background is a plus as well as investigative work. 3-5 years of experience. Expected to work in Reston 3 times a week.
 </p>
</div>


Cyber Security Analyst

Search 10000+ Cyber risk analyst jobs near you this April. New roles added regularly across leading industries. Apply today.