Sr. Associate, Tech Risk & Analysis - Technology Audit

Capital One • McLean, VA

1d • $101,100 - $138,400 • Hybrid

About The Position

Capital One’s Audit function is a dedicated group of professionals focused on delivering top-quality assurance services to the organization’s Audit Committee. Audit professionals are experienced, well-trained and credentialed, and operate within a collaborative, agile environment to deliver value-added opinions and recommendations. Its vision is to provide high-value, independent, proactive insights, innovate with technology, and be a top-notch talent destination, creating opportunities for personal growth and professional development.

Capital One is seeking an energetic, self-motivated technology risk and analysis professional with experience evaluating and analyzing technology and cybersecurity risks to join its Tech Audit team. The role focuses on audits of critical technology functions, including cloud-based technology implementations, application controls, and cybersecurity risks. The position is designated as hybrid, with associates typically spending three days per week in person at one of the offices listed in the posting, subject to Capital One’s hybrid policy.

Requirements

• Bachelor’s degree or military experience.
• At least 2 years of experience in technology (including software delivery, distributed systems, cloud-native architecture, or infrastructure as code); cybersecurity (including identity and access management, application security, cloud security, or data protection); technology auditing; systems risk management; technology risk assessments; resilience engineering; chaos engineering; site reliability engineering; or a combination of these areas.

Nice To Haves

• Certified Internal Auditor (CIA), Certified Public Accountant (CPA), or relevant cloud or cybersecurity certifications, such as AWS certifications or CISSP.
• At least 2 years of experience in banking, financial services, a professional services firm serving clients in large banks, or a combination.
• At least 3 years of experience auditing or performing cyber or information security work.
• At least 2 years of experience in cloud computing (AWS, GCP, or Azure) and controls, or at least 1 year conducting audits of controls in cloud-based environments.

Responsibilities

• Execute test procedures for critical technology functions, cloud-based infrastructure, cybersecurity, risk management, applications, and third-party management.
• Perform risk assessments of business activities and conduct relevant testing based on the risks and processes associated with the audited area.
• Assist in communicating issues, risks, and recommendations to all levels of management.
• Work independently, complete work on schedule, and meet quality standards.
• Prepare clear, organized, and complete documentation supporting work performed.
• Develop and maintain effective working relationships with key business partners and the extended Audit group.
• Leverage available data and analytical tools during audit planning and fieldwork.
• Follow up proactively on agreed audit actions to ensure management fulfills commitments within agreed timescales.
• Seek learning opportunities to enhance role-related skills and competencies.

Benefits

• Comprehensive health, financial, and other benefits supporting total well-being; eligibility varies based on full- or part-time status, exempt or non-exempt status, and management level.
• Eligible for performance-based incentive compensation, which may include cash bonuses and/or long-term incentives.

What This Job Offers

• Job Type: Full-time
• Career Level: Mid Level