Senior Associate, Technology Controls Testing (ES Risk)

Recruiting : VA - McLean, United States of America, McLean, VirginiaSenior Associate, Technology Controls Testing (ES Risk)

As a Senior Associate in Capital One’s Enterprise Services (ES) Core Risk, you will apply your risk management skills to the company’s Technology organization.

You will partner across Enterprise Services, Divisional CIO, and Information Security teams to develop and support best-in-class industry risk solutions in a manner that supports innovation and protects our customers, shareholders and associates.

As a member of the 1st line controls testing team, you will collaborate with other 1st, 2nd, and 3rd line teams to monitor and test processes and control environments, report results, and evaluate compliance with Cyber Security requirements and regulations for the Technology organization.

Your contributions will drive insight into risk and control performance, and organizational change through risk identification, measurement, analysis and reporting to enable better management of technology risks in an open and collaborative environment.

The Technology Controls Testing Team, within Enterprise Services Core Risk Controls Governance and Testing (CGT), is seeking an experienced, highly motivated Technology Controls Testing specialist, with strong interest in process maturity, cybersecurity, identity and access management (IAM), and cloud technologies.

A clear understanding of requirements, controls, and testing methodologies is necessary for this role. The ideal candidate will be able to design / execute test plans, identify process and control gaps, and compose clear and concise findings to document shortcomings.

In addition, the ability to clearly communicate results is imperative in this role. This will be an exciting role in a dynamic and fast-paced environment requiring the ability to multi-task and prioritize assignments appropriately.

In this role, the associate will have the opportunity to learn new technologies, develop relationships with partners across technology divisions, and materially contribute to process enhancements to reduce risk.

Responsibilities :

Perform independent control testing activities and document results

Communicate findings to stakeholders

Project manage assigned engagements to meet defined timelines

Establish and maintain relationships during testing engagements

Execute tasks assigned by manager to deliver on team objectives

Collaborate with team members when necessary

Basic Qualifications :

At least 2 years of experience in project or process management

At least 2 years of experience in IT Risk Management

Experience in testing technical controls in financial institutions

Preferred Qualifications :

Experience in requirements evaluation

Experience in risk mitigation or corrective actions

Experience testing internal controls

Strong communication and presentation skills

Experience with AWS, GCP, or Azure cloud technologies

Security certifications such as CISA, CRISC, or CISSP

Experience with security operations, data loss prevention, and / or access management

AWS, GCP, or Azure certifications

At this time, Capital One will not sponsor a new applicant for employment authorization for this position.

The minimum and maximum full-time annual salaries for this role are listed below, by location. Please note that this salary information is solely for candidates hired to perform work within one of these locations, and refers to the amount Capital One is willing to pay at the time of this posting.

Salaries for part-time roles will be prorated based upon the agreed upon number of hours to be regularly worked.

New York City (Hybrid On-Site) : $114,700 - $130,900 for Sr. Assoc, Cyber Risk & Analysis