Sr. Manager - Cyber Technical - Technology Audit (Hybrid)

About the Role

Capital One’s Audit function is a dedicated group of professionals focused on delivering top-quality assurance services to the organization’s Audit Committee. Audit professionals are experienced, well-trained, and credentialed, operating within a collaborative, agile environment to deliver value-added opinions and recommendations. The team’s vision is to provide high-value, independent, proactive insights, innovate with technology, and serve as a top-notch talent destination, creating a dynamic and challenging atmosphere for personal growth and professional opportunity.

This role focuses on audits of critical technology functions, including cloud-based technology implementations, application and cloud technology controls, and cybersecurity risks, with a specific emphasis on Discover Financial Services technology audits.

Responsibilities

• Proactively monitor the technology control environment for changing risks and necessary updates.
• Lead continuous monitoring activities and updates to risk assessments, audit universe, and audit plan.
• Oversee multiple, concurrent Cybersecurity, IT Operations, and Cloud audits across assigned portfolios.
• Develop engagement planning documentation and audit programs to ensure adequate coverage of risk and sufficient rationale for audit scope.
• Supervise and coordinate work assignments among audit team members.
• Provide timely feedback, on-the-job training, and coaching to audit staff and direct reports.
• Establish and maintain strong relationships with key business and audit partners.
• Leverage specialized knowledge and skills to provide management with insights into areas of technology risk.
• Represent internal audit at management meetings, internal forums, and external organizations.
• Assess the relevance of audit findings, potential exposures, materiality, and trends, demonstrating awareness of broader issues.
• Interpret business priorities, anticipate issues and obstacles, and apply insights to the scope of the role.
• Deliver appropriate, succinct, and organized information, tailoring communication style to the audience.
• Compile relevant, material findings and recommendations into concise audit reports.
• Communicate complex results and implications, incorporating diverse perspectives into deliverables.
• Manage timely and high-quality delivery of multiple tasks, including audits, projects, special assignments, and administrative activities.
• Self-prioritize and independently complete tasks across the team and department.
• Demonstrate the ability to meet deadlines and identify/escalate impediments in a timely manner.

Ideal Candidate Profile

• A critical thinker who seeks to understand the business and its control environment.
• Values insight and objectivity as core elements of providing assurance on governance, risk management, and internal control processes.
• Possesses a relentless focus on quality and timeliness.
• Adapts to change, embraces bold ideas, and is intellectually curious.
• Asks questions, tests assumptions, and challenges conventional thinking.
• Develops influential relationships based on shared risk objectives and trust to deliver business impact.
• Believes a deep understanding of data, innovation, and technology enhances auditing capabilities.
• Leverages data analytics and technical expertise to drive insights.
• A teacher and leader who does the right thing, leads by example, and invests in team development.
• Leads through change with candor and optimism, fostering trust, collaboration, and belonging.

Qualifications

Basic Qualifications

• Bachelor’s Degree or military experience.
• At least 7 years of experience in information technology (operations, software delivery, access management, information security, cloud computing).
• At least 4 years of experience in managing audit engagements, project management, or a combination.
• At least 4 years of experience leading a team to deliver initiatives or a collection of work.
• At least 4 years of experience analyzing data extracts to identify trends, patterns, and anomalies, including test scripting, coding (writing, reviewing, or assessing), or a combination.
• At least 4 years of experience in information security (application security, network security, cyber security, data protection).
• At least 2 years of experience in cloud computing and controls (design, operation, risk management, or auditing).
• At least 2 years of people management experience.

Preferred Qualifications

• 8+ years of experience in information systems auditing, risk management, technology operations, or a combination.
• Certifications or pursuit of certifications related to Cloud, Cyber, or Technology Operations (e.g., Cloud provider certifications, CISSP, CISM).
• Certifications or pursuit of certifications related to Auditing (e.g., CIA, CISA).
• 7+ years of experience with IT control frameworks.
• 4+ years of experience auditing cyber or information security.
• 2+ years of experience auditing emerging technologies.
• 4+ years of experience in cloud computing (notably AWS, GCP, Azure) and controls, or 1+ years of conducting audits of controls in cloud-based environments.
• 4+ years of experience in risk and data management.
• 4+ years of experience performing data analysis in support of internal auditing.

Schedule

• Hybrid role requiring 3 days per week in-person at one of the listed office locations.
• Travel expected: 10-15% of the time.

Pay

Full-time annual salary ranges by location (prorated for part-time roles):

• Charlotte, NC: $209,000 - $238,500
• Chicago, IL: $209,000 - $238,500
• McLean, VA: $229,900 - $262,400
• New York, NY: $250,800 - $286,200
• Plano, TX: $209,000 - $238,500
• Richmond, VA: $209,000 - $238,500
• Riverwoods, IL: $209,000 - $238,500

This role is eligible for performance-based incentive compensation, including cash bonuses and/or long-term incentives (LTI).

Benefits

Capital One offers a comprehensive, competitive, and inclusive set of health, financial, and other benefits to support total well-being. Eligibility varies based on full or part-time status, exempt or non-exempt status, and management level. Learn more.

At this time, Capital One will not sponsor a new applicant for employment authorization for this position.