Capital One
Capital One
Capital One is a financial services and fintech company offering credit cards, auto loans, banking, and savings products. Its work combines financial expertise with technology and digital tools to improve how customers manage money. The company’s careers focus includes building customer-oriented solutions within a diverse and inclusive workforce.

Risk Manager, Technology Controls and Attestations – Capital One (McLean, VA)

Lead technology risk assessments and control design for Capital One products pursuing SOC 2 and ISO 27001 attestations. Work with auditors, product teams, control owners, and senior leaders to manage evidence, findings, and reporting.

Description

  • Assess process and technology risks to determine appropriate controls for products pursuing SOC 2 or ISO 27001 attestation
  • Evaluate product feature changes and their effects on required controls
  • Track updates to attestation frameworks and determine their impact on control requirements
  • Ensure control designs account for emerging technologies
  • Interpret, communicate, and present control designs to senior leadership
  • Recommend control and process improvements
  • Assess control deviations and their potential effect on management’s conclusions about control design, implementation, and operating effectiveness
  • Prepare management responses to attestation reports
  • Work with product teams to address customer questions about attestation report issues
  • Coordinate evidence requests from external auditors
  • Guide control owners on evidence submission requirements
  • Set evidence collection schedules and deadlines with external auditors

Requirements

  • High school diploma, GED, or equivalent certification
  • At least four years of experience in internal controls, risk management, or auditing
  • At least two years of experience identifying and assessing IT general, IT application, data movement, and systems implementation controls
  • Bachelor’s degree preferred
  • Five or more years of experience in auditing and control evaluation preferred
  • At least one year of experience with cloud technologies such as AWS, Azure, or GCP preferred
  • CISA, CISSP, or CRISC certification preferred
  • Capital One will not sponsor new applicants for employment authorization or provide immigration-related support

Benefits

  • Performance-based incentive compensation, which may include cash bonuses and/or long-term incentives
  • Comprehensive, competitive, and inclusive health, financial, and other benefits supporting overall well-being
  • Reasonable accommodations are available for applicants who require them

Related Jobs

ZACO Robot

B2B Sales Setter for Commercial Cleaning Robotics

ZACO Robot

Qualify leads and book sales calls for RV-Tech’s professional cleaning robots, selling remotely to business decision-makers. The role focuses on automation and robotics in a growing commercial market.

Open