Risk Manager

About the role

The Tech Commercialization Independent Assurance team centrally facilitates Capital One’s commercialized products and services through their Commercialized Attestation goals (SOC 2, ISO27001). The associate in this role will partner across the organization to perform process and technology risk assessments, manage issue resolution, facilitate evidence collection, and support attestation engagements.

Responsibilities

• Perform process and technology risk assessments to determine the optimal control mix for products pursuing a Commercialized Technology Attestation engagement (SOC 2, ISO27001).
• Proactively identify changes in product features and evaluate their impact on the controls needed to achieve Commercialized Technology Attestations.
• Monitor changes in attestation frameworks and assess how they impact the optimal mix of controls required for products pursuing attestation.
• Ensure seamless design of controls around emerging technologies to support Commercialized Technology Attestation engagements.
• Interpret, communicate, and present appropriate control design to senior leadership.
• Influence leadership with recommendations for controls and process improvements on an ongoing basis.
• Evaluate control deviations and their impact on management's opinion over the design, implementation, and operating effectiveness of controls addressing attestation frameworks.
• Draft Management Responses presented within Attestation Reports.
• Partner with product teams to answer customer inquiries on issues listed within an attestation report.
• Facilitate evidence requests made by external auditors to support their independent attestation requirements.
• Provide advisory to control owners on ensuring submitted evidence meets auditor needs.
• Partner with external auditors to establish evidence collection timelines and deadlines.

Requirements

• High School Diploma, GED, or equivalent certification.
• At least 4 years of experience with Internal Controls, Risk Management, or Audit.
• At least 2 years of experience in identifying and assessing IT general, IT application, data movement, and systems implementation controls.

Qualifications

• Bachelor’s Degree.
• 5+ years of experience in Auditing and Control Evaluation.
• 1+ years of experience with Cloud technologies (AWS, Azure, or GCP).
• CISA, CISSP, or CRISC certification.

Skills

• Well organized and able to manage multiple requests.
• Strong ability to analyze information and data and leverage to support recommendations.
• Work in collaboration across multiple teams while maintaining business relationships.
• Develop and communicate quality recommendations to the program.
• Strong subject matter expertise and sound judgment to align appropriate risk level.
• Work with diverse contacts throughout Capital One.
• Communicate technical issues to non-technical people.
• Strong problem-solving and conceptual thinking abilities.
• Capacity to think broadly but go deep into subject matter when needed.

Benefits

Capital One offers a comprehensive, competitive, and inclusive set of health, financial and other benefits that support total well‑being.

Pay

• McLean, VA: $151,900 - $173,400 for Risk Manager.