Capital One Principal Auditor- Cyber Risk & Analysis Hybrid 

United States, Virginia, Richmond 

270273194

West Creek 7 (12077), United States of America, Richmond, Virginia Principal Auditor- Cyber, Risk & Analysis (Hybrid)

Responsibilities:

-Execute major components of audits, including critical technology functions, cloud-based infrastructure, cybersecurity, risk management, application, and third-party management, as well as lead small to medium size audits.

-Establishes and maintains good client relations during engagements. Communicates or assists in communicating the results of some audit projects to management via written reports and oral presentations.

-Identify expectations of the client and take actions to support the client experience.

-Prepare clear, organized and complete documentation to support work performed.

-Coordinate with others and proactively take on additional work.

-Deliver appropriate, succinct and organized information, tailoring communication style to audience.

-Perform various aspects of engagement administration, including hours and budget tracking.

-Provide periodic on-the-job coaching and direct supervision over less experienced associates.

-You possess a relentless focus on quality and timeliness.

-You’re a firm believer that a rich understanding of data, innovation, and technology will only make you a better auditor. This will require leveraging the power of data analytics and furthering your technical expertise.

Basic Qualifications:

• Bachelor’s Degree or military experience

• At least 4 years of experience in information technology (operations, software delivery, access management, microservices), information security (application security, network security, cyber security, data protection), information systems risk management, information systems auditing, or a combination

• At least 1 year of experience in cloud computing and controls (design, operation, risk management, or auditing)

• At least 2 years of experience in managing audit engagements, project management or a combination

• At least 2 years of experience in analyzing data extracts to identify trends, patterns, and anomalies, including 1 year of experience in test scripting or coding (writing, reviewing, or assessing)

Preferred Qualifications:

• Certifications related to or pursuing certification related to Cloud, Cyber or Technology Operations, such as Cloud provider certifications, Certified Information Systems Security Professional (CISSP), or Certified Information Security Manager (CISM),

• Certifications related to or pursuing certification related to Auditing, such as Certified Internal Auditor (CIA), or Certified Information Systems Auditor (CISA)

• 4+ years of experience with IT control frameworks

• 2+ years of experience in planning and leading audits

• 2+ years of experience auditing cyber or information security

• 1+ years of experience auditing emerging technologies

• 1+ years experience in cloud computing (notably AWS, GCP, Azure) and controls, or 1+ years of conducting audits of controls in cloud-based environments

• 1+ years of experience in risk and data management

• 1+ years of experience performing data analysis in support of internal auditing

. Eligibility varies based on full or part-time status, exempt or non-exempt status, and management level.

If you have visited our website in search of information on employment opportunities or to apply for a position, and you require an accommodation, please contact Capital One Recruiting at 1-800-304-9102 or via email at . All information you provide will be kept confidential and will be used only to the extent required to provide needed reasonable accommodations.