About the Team

Joining Capco means joining an organization that is committed to an inclusive working environment where you are encouraged to #BeYourselfAtWork. Capco Cybersecurity is a multi-faceted team focused on the evaluation, strategy definition, and execution of risk-minded solutions for leading organizations across the Financial Services industry. We provide customized results, adapting enterprise risk management strategies to potential cyber pitfalls. Capco has experience assisting financial institutions’ leadership on top cyber security priorities through a team with expertise in financial business processes, strategic advisory, cyber programs, and security operations.

About the Job

As a Principal Consultant on our Cyber Advisory team, you will be a team leader on consulting engagements responsible for managing, controlling, and mitigating client’s risk management strategies. You will be a part of, and leading, teams working in close collaboration with our clients to define the security strategy. You will work alongside industry leaders to gain insight and experience as the practice continues to expand.

What You’ll Get to Do

Perform reviews of platforms and services to assess cyber risks around security risks such as data leakage and unauthorized access, and design controls to mitigate those risks
Design, develop, and implement security requirements that allow business requirements to be met with appropriate security controls present
Design and develop security policies, standards, and procedures
Independently lead teams and projects of varying sizes
Develop high-quality content such as security automation tools, reference security architectures, and white papers to help our consultants, partners, and customers build on the work you deliver

What You’ll Bring with You

7+ years of experience in cybersecurity
Experience working for a management or technology consulting firm required
In depth knowledge of Cyber frameworks (FFFIEC/NIST/ISO)
Cyber risk assessment experience
The ability to communicate effectively to diverse audiences and properly translate security and risk management terminology into business terms for these stakeholders
Awareness of security engineering concepts and practices across all phases of the system development lifecycle
Ability to lead projects independently
Experience working proposals and putting together solutions
A bachelor’s degree or master’s degree in a cyber or information security related field

Why Capco?

A career at Capco is a chance to help reshape the competitive landscape in financial services. We launch new banks, transform existing ones, and help our clients navigate complex change. As consultants, we work on the front-end business design all the way through to technology implementation.

We are the largest Financial Services focused consultancy in the world, serving everyone from global banks to emerging FinTechs, from strategy through digital transformation, design, business consulting, data and analytics, cyber, cloud, technology architecture, and engineering.

Capco is a young and growing firm. We maintain an entrepreneurial spirit and growth mindset, and have minimal bureaucracy. We have no internal silos that get in the way of your career opportunities or ability to focus on our clients and make a difference to the business. We offer the opportunity for everyone to learn rapidly, take on tough challenges, and get promoted quickly. We take pride in our creative, collaborative, diverse, and inclusive culture, where everyone can #BYAW.

We offer highly competitive benefits, including medical, dental and vision insurance, a 401(k) plan, tuition reimbursement, and a work culture focused on innovation and creation of lasting value for our clients and employees.

Ready to Take the Next Step?

If this sounds like you, we would love to hear from you. This is an opportunity to make a difference and contribute to a highly successful company with a significant growth trajectory.

Apply for this Job

* Required

First Name *

Last Name *

Email *

Phone *

Location (City) *

Resume/CV *

Dropbox Google Drive

(File types: pdf, doc, docx, txt, rtf)

Cover Letter

Dropbox Google Drive

(File types: pdf, doc, docx, txt, rtf)

When autocomplete results are available use up and down arrows to review

+ Add another education

Are you authorized to work in the country in which you're applying? *

Do you now or in the future require any sponsorship? *

Do you know anyone or are you related to anyone who works at Capco? *

Were you referred to this role by a current Capco Employee? If yes, please confirm the employee’s Capco email address. *

Capco employee email address

Capco Job Candidate Privacy Notice Acknowledgement *

Capco Job Candidate Privacy Notice

Purpose and legal basis for processing

Capco’s purpose for processing this information is to assess your suitability for a role at Capco.

Where processing takes place in the UK or EU, or you are a resident of the UK or EU, the legal basis we rely on for processing your personal data is article 6(1)(b) of the European Union General Data Protection Regulation (Regulation (EU) 2016/679) (the “GDPR”) which relates to processing necessary to perform a contract or to take steps at your request, before entering a contract. The legal basis we rely on to process any information you provide as part of your enquiry or application which is special category data, such as health, religious or ethnic information, is article 9(2)(b) of the GDPR, which also relates to our obligations in employment and the safeguarding of your fundamental rights and article 9(2)(h) for assessing your work capacity as an employee.

What will we do with the information you give us?

We’ll use all the information you provide during the recruitment process to progress your application with a view to offering you an employment contract with us, or to fulfil legal or regulatory requirements if necessary.

We’ll use the contact details you give us to contact you to progress your enquiry or application. We’ll use the other information you provide to assess your suitability for the role.

This may include sharing your information with one or more of our clients, whose account you may be assigned to or considered for, including your, CV, details of your qualifications, relevant experience and skills, identification documentation, references and background and criminal record checks (where applicable).

Where applicable, we may also share your information with the data processors detailed below.

We will not share any of the information you provide with any third parties for marketing purposes.

We do not and will not sell your personal data.

What information do we ask for, and why?

We do not collect more information than we need to fulfil our stated purposes and will not keep it longer than necessary.

The information we ask for is used to assess your suitability for employment. You don’t have to provide what we ask but it may affect our assessment efforts if you don’t.

Application stage

If you use our online application system, your details will be collected by a data processor on our behalf (please see below).

We ask you for your personal details including name and contact details. We’ll also ask you about your eligibility to work in the country concerned, previous work experience, education, referees and for answers to questions relevant to the role. Our recruitment team and relevant business lead will have access to all this information.

You will also be asked to provide equal opportunities information. This is not mandatory – if you don’t provide it, it won’t affect your application. We won’t make the information available to any staff outside our recruitment team, including business leads, in a way that can identify you. Any information you provide will be used to produce and monitor equal opportunities statistics.

Shortlisting

Our recruiters and business lead shortlist applications for interview. The business leads will not be provided with your equal opportunities information if you have provided it.

Assessments

We may ask you to participate in assessment days; case studies; attend an interview (including by recorded video); or a combination of these. Information will be generated by you and by us. For example, you might complete a written assignment, or we might take interview notes. This information is held by us.

If you are unsuccessful after assessment for the role, we may ask if you would like your details retained in Capco’s own talent pool. If you say yes, we may proactively contact you should any further suitable vacancies arise.

Employment Offer

If we make an offer of employment, we’ll ask you for information so that we can carry out pre-employment checks. You must successfully complete pre-employment checks to progress to employment. We must confirm the identity of our staff and their right to work in the relevant country, and seek assurance as to their trustworthiness, integrity and reliability.

You must therefore provide:

Proof of ID (passport – if no passport, birth certificate and national insurance/social security documents)

Proof of Right to Work in country where job is based

Proof of Address

We may also perform the following, subject to local laws and practices:

Criminal Record check
Electronic ID Verification check
Credit & Bankruptcy checks, including a full 5 year address history
Global Financial Sanctions checks
Compliance checks, including Office of Foreign Assets Control (OFOC)
Directorship & Media Searches
Education & Professional Qualifications checks
Proof of Five Years Employment References check (gaps of over 1 month to be verified)

How long is the information kept for?

This will depend on whether your application is successful or not (unless we state otherwise in our ‘data processor’ section below):

Successful Recruitment Candidate Information (including CV’s applications, interview notes, psychometric test data) will be destroyed 12 months after the end of employment. Except in the United States, where candidate information is retained for 24 months. Eligibility documents (identity, right work in country) and background checks (including personal references) are typically kept for 5 years after the end of employment, or longer to comply with local laws. Please refer to your local Capco Recruitment Team for further information.

Unsuccessful Recruitment Candidate Information (including third party referee details provided by the applicant) will be destroyed 12 months after the last action unless you consent for information to be held for longer. Except in Poland, where candidate information is retained for 6 months and in the United States for 24 months.

How we make decisions about recruitment?

At the initial application stage we may automatically decline your on-line application if you fail to satisfy any relevant legal requirements for employment (e.g. You state you do not have the legal right to work in the country where the role exists).

With your specific agreement we may use on-line behavioural and cognitive assessments to help us understand your personality traits, your general mental ability and capacity for critical thinking. All results are personally analysed by one of our fully trained recruitment team.

Final recruitment decisions are made by members of our recruitment team and business leads. We take account of all the information gathered during the application process.

You can ask about decisions on your application by speaking to your contact in our recruitment team.

Your rights

As an individual, you have certain rights regarding your own personal data.

For more information on your rights, please see the ‘Your Data Protection Rights’ section of the Capco Privacy Notice: https://www.capco.com/Data-privacy-notice

Capco’s Data Protection Officer can be contacted at: ask.capco.dpo@capco.com

Do we use any data processors?

Yes – we use several processors to provide elements of our recruitment service for us as follows:

On-line Candidate Application Management Service

We use Greenhouse’s candidate application management platform. You can access their Privacy Policy here: https://www.greenhouse.io/privacy-policy.

In the US we use DocuSign to provide successful candidates with an electronic offer letter and other paperwork relating to the hiring process. You can access their Privacy Policy here: https://www.docusign.com/company/privacy-policy.

Recruitment Agencies and Talent Pools

We have relationships with a number of recruitment agencies and talent pools and where you have applied for a position with Capco through such agency or registered with a particular talent pool, you should approach them directly for information on their privacy policy and data retention periods.

Talent Optimization Platforms

We use The Predictive Index to support our candidate assessment process. You can access their Privacy Policies here: https://www.predictiveindex.com/privacy/

SMS Communications

We use OnePoint Global Ltd to assist us when we contact you by text message (SMS) to confirm interview details and to request interview feedback. You can access their Privacy Policy here: https://www.onepointglobal.com/privacy-policy/.

Video Interviews

In the UK we use Launchpad Recruits Ltd.’s recorded video interviewing platform for certain roles. You can access their Privacy Policy here: https://www.launchpadrecruits.com/privacy-policy. We instruct Launchpad to delete your personal data, including all video records, after 12 months.

Employment Vetting

Capco use the following range of providers, depending on your location and operational requirements:

First Advantage. You can access their respective Privacy Policies for candidates here: https://fadv.com/privacy-policy/

HireRight. You can access their Privacy Policy here: https://www.hireright.com/emea/legal/privacy-policy/emea-and-apac-candidate-policy

Sterling Talent Solutions. In the US their service also includes I-9 eligibility checks. You can access their Privacy Statement here: https://privacy.sterlingcheck.com/

Vero Screening. You can access their Privacy Policy here: https://veroscreening.com/privacy-policy/

Please contact your local recruitment team contact if you wish to identify the provider relevant to your application.

Notice Version: 01 FEBRUARY 2022

Reasonable Adjustments *

Do you require reasonable accommodations or adjustments?

If you answered yes to the Reasonable Adjustments question, please provide additional details. If not, enter N/A. *

If you answered yes to the previous question, please provide additional details.

How did you hear about this role? *

Please be advised that all employees or other persons who enter or work from Capco’s NYC office or our clients' NYC offices must be fully vaccinated against COVID-19 unless an accommodation for a disability or sincerely-held religious belief has been approved, or as required by New York City law. *

Voluntary Self-Identification

For government reporting purposes, we ask candidates to respond to the below self-identification survey. Completion of the form is entirely voluntary. Whatever your decision, it will not be considered in the hiring process or thereafter. Any information that you do provide will be recorded and maintained in a confidential file.

As set forth in Capco’s Equal Employment Opportunity policy, we do not discriminate on the basis of any protected group status under any applicable law.

Gender

Are you Hispanic/Latino?

Please identify your race

Race & Ethnicity Definitions

If you believe you belong to any of the categories of protected veterans listed below, please indicate by making the appropriate selection. As a government contractor subject to the Vietnam Era Veterans Readjustment Assistance Act (VEVRAA), we request this information in order to measure the effectiveness of the outreach and positive recruitment efforts we undertake pursuant to VEVRAA. Classification of protected categories is as follows:

A "disabled veteran" is one of the following: a veteran of the U.S. military, ground, naval or air service who is entitled to compensation (or who but for the receipt of military retired pay would be entitled to compensation) under laws administered by the Secretary of Veterans Affairs; or a person who was discharged or released from active duty because of a service-connected disability.

A "recently separated veteran" means any veteran during the three-year period beginning on the date of such veteran's discharge or release from active duty in the U.S. military, ground, naval, or air service.

An "active duty wartime or campaign badge veteran" means a veteran who served on active duty in the U.S. military, ground, naval or air service during a war, or in a campaign or expedition for which a campaign badge has been authorized under the laws administered by the Department of Defense.

An "Armed forces service medal veteran" means a veteran who, while serving on active duty in the U.S. military, ground, naval or air service, participated in a United States military operation for which an Armed Forces service medal was awarded pursuant to Executive Order 12985.

Veteran Status

Form CC-305

OMB Control Number 1250-0005

Expires 05/31/2023

Voluntary Self-Identification of Disability

Why are you being asked to complete this form?

We are a federal contractor or subcontractor required by law to provide equal employment opportunity to qualified people with disabilities. We are also required to measure our progress toward having at least 7% of our workforce be individuals with disabilities. To do this, we must ask applicants and employees if they have a disability or have ever had a disability. Because a person may become disabled at any time, we ask all of our employees to update their information at least every five years.

Identifying yourself as an individual with a disability is voluntary, and we hope that you will choose to do so. Your answer will be maintained confidentially and not be seen by selecting officials or anyone else involved in making personnel decisions. Completing the form will not negatively impact you in any way, regardless of whether you have self-identified in the past. For more information about this form or the equal employment obligations of federal contractors under Section 503 of the Rehabilitation Act, visit the U.S. Department of Labor’s Office of Federal Contract Compliance Programs (OFCCP) website at www.dol.gov/ofccp.

How do you know if you have a disability?

You are considered to have a disability if you have a physical or mental impairment or medical condition that substantially limits a major life activity, or if you have a history or record of such an impairment or medical condition.

Disabilities include, but are not limited to:

Autism
Autoimmune disorder, for example, lupus, fibromyalgia, rheumatoid arthritis, or HIV/AIDS
Blind or low vision
Cancer
Cardiovascular or heart disease
Celiac disease
Cerebral palsy
Deaf or hard of hearing
Depression or anxiety
Diabetes
Epilepsy
Gastrointestinal disorders, for example, Crohn's Disease, or irritable bowel syndrome
Intellectual disability
Missing limbs or partially missing limbs
Nervous system condition for example, migraine headaches, Parkinson’s disease, or Multiple sclerosis (MS)
Psychiatric condition, for example, bipolar disorder, schizophrenia, PTSD, or major depression

Disability Status

PUBLIC BURDEN STATEMENT: According to the Paperwork Reduction Act of 1995 no persons are required to respond to a collection of information unless such collection displays a valid OMB control number. This survey should take about 5 minutes to complete.

Please reach out to our support team via our help center.

Cybersecurity Principal Consultant

Apply for this Job

Voluntary Self-Identification

Voluntary Self-Identification of Disability