Finding the best job has never been easier
Share
Responsibilities:
Support the evaluation of and improvement of the control environment for the Financial Services Technology organization
Contribute to the assessment of FS Technology’s control environment by verifying the design and operating effectiveness of existing controls as well as identifying and tracking control gaps/issues to remediation
Lead, design, developing, and managing project plans in a complex dynamic environment, revising needs to meet changing requirements
Lead meetings with the 1st line independent control testing team to provide an overview of the process narrative and measures implemented for control sustainability
Independently perform documentation of processes and process flow diagrams, controls reporting dashboards and controls health monitoring
Analyze data to proactively identify risks and trends and prepare reporting for Executive Leadership
Understand regulatory requirements and anticipate changes to help ensure proper alignment with internal requirements and frameworks
Collaborate with Technology Application Teams, ES Tech Risk, Cyber and other business support functions (e.g., Business Risk Office)
Participate in enterprise Well Managed forums and relevant councils
Understand the broader context and implications (e.g., financial, legal, reputational, etc.) of the various types of risk affecting the technology functions
Basic Qualifications:
High School Diploma, GED, or equivalent certification
At least 3 years of experience in Technology, Operational Risk, or IT Internal or External Audit
At least 2 years of experience performing data analysis in support of internal risk assessments and control reviews
At least 2 years of experience planning and leading IT audits or risk assessments
At least 1 year of experience performing controls testing over AWS cloud-based infrastructure
At least 2 years of experience in risk and data management
Preferred Qualifications:
Bachelor’s Degree
Certified Information Systems Auditor (CISA), Certified in Risk and Information Systems Control (CRISC), Certified Information Systems Security Professional (CISSP), Certified Information Security Manager (CISM), or related certification
5+ years of experience in information systems auditing or information systems risk management
4+ years of experience performing control design and effectiveness testing, and completing assessment against established industry risk frameworks, including: the NIST Cybersecurity Framework, COBIT v5, or COSO
Excellent verbal presentation and written communication skills to confidently interact with application teams and enterprise stakeholders
Excellent problem-solving, analytical and critical thinking skills to effectively respond to shifting priorities, demands and timelines
Consulting experience with a Big 4 firm
Cloud Risk Management experience
Proficient with G Suite/Google Workspace for reports, analysis, and presentations
. Eligibility varies based on full or part-time status, exempt or non-exempt status, and management level.
If you have visited our website in search of information on employment opportunities or to apply for a position, and you require an accommodation, please contact Capital One Recruiting at 1-800-304-9102 or via email at . All information you provide will be kept confidential and will be used only to the extent required to provide needed reasonable accommodations.
These jobs might be a good fit