Sr. Associate, Tech Risk & Analysis - Technology Audit

Capital One • McLean, VA

8d • $101,100 - $138,400 • Hybrid

About The Position

Capital One’s Audit function provides assurance services to the organization’s Audit Committee. The team operates in a collaborative, agile environment and aims to provide high-value, independent, proactive insights while using technology and supporting professional growth.

Capital One is seeking a technology risk and analysis professional with experience evaluating technology and cybersecurity risks to join its Tech Audit team. The role focuses on audits of critical technology functions, including cloud-based technology implementations, application controls, and cybersecurity risks. The position is designated as hybrid, with associates typically working in person at a Capital One office three days per week under the company’s hybrid policy. The role may be eligible for performance-based incentive compensation, including cash bonuses and/or long-term incentives.

The full-time annual salary ranges listed are $111,200–$126,900 in McLean, Virginia; $121,300–$138,400 in New York, New York; and $101,100–$115,400 in Plano, Texas, or Richmond, Virginia. Salary ranges for other locations depend on location. Capital One will not sponsor a new applicant for employment authorization or provide immigration-related support for this position.

Requirements

• Bachelor’s degree or military experience.
• At least 2 years of experience in one or more of the following areas: technology (software delivery, distributed systems, cloud-native architecture, or infrastructure as code); cybersecurity (identity and access management, application security, cloud security, or data protection); technology auditing; systems risk management; technology risk assessments; resilience engineering (operational resilience, business continuity, disaster recovery, or high availability); chaos engineering (fault injection, blast radius mitigation, or automated security validation); or site reliability engineering (SLAs or SLOs, observability, or incident response).
• Able to work in accordance with Capital One’s hybrid policy, including typically spending 3 days per week in person at a designated office.
• Must not require new employment authorization sponsorship or other immigration-related employer support for this position.

Nice To Haves

• Certified Internal Auditor (CIA), Certified Public Accountant (CPA), or relevant cloud or cybersecurity certifications, such as AWS certifications or CISSP.
• At least 2 years of experience in banking, financial services, or a professional services firm serving large-bank clients, or a combination.
• At least 3 years of experience auditing or performing cyber or information security work.
• At least 2 years of experience in cloud computing (AWS, GCP, or Azure) and controls, or at least 1 year conducting audits of controls in cloud-based environments.

Responsibilities

• Execute test procedures for critical technology functions, cloud-based infrastructure, cybersecurity, risk management, applications, and third-party management.
• Assess risks of business activities and perform relevant testing based on the risks and processes of the audited area.
• Assist in communicating issues, risks, and recommendations to all levels of management.
• Work independently, complete work on schedule, and meet quality standards.
• Prepare clear, organized, complete documentation supporting work performed.
• Develop and maintain effective working relationships with business partners and the extended Audit group.
• Use available data and analytical tools during audit planning and fieldwork.
• Follow up on agreed audit actions to ensure management fulfills commitments within agreed timeframes.
• Seek learning opportunities to enhance skills and competencies related to the role.

Benefits

• Comprehensive health, financial, and other benefits supporting total well-being; eligibility varies by employment status and management level.
• Potential performance-based incentive compensation, which may include cash bonuses and/or long-term incentives.

What This Job Offers

• Job Type: Full-time
• Career Level: Senior