Let’s get started
By clicking ‘Next’, I agree to the Terms of Service
and Privacy Policy
Jobs / Job page
Senior Associate- Cyber, Risk & Analysis Technology Audit (Hybrid) image - Rise Careers
Job details

Senior Associate- Cyber, Risk & Analysis Technology Audit (Hybrid)

Center 1 (19052), United States of America, McLean, VirginiaSenior Associate- Cyber, Risk & Analysis Technology Audit (Hybrid)Capital One's Audit function is a dedicated group of professionals focused on delivering top-quality assurance services to the organization's Audit Committee. Audit professionals are experienced, well-trained and credentialed, and operate within a collaborative, agile environment to deliver value-added opinions and recommendations. Audit's vision to provide high value, independent, proactive insights, to innovate with technology, and to be a top-notch talent destination, creates a dynamic and challenging atmosphere for both personal growth and professional opportunity.Capital One is seeking an energetic, self-motivated Senior Associate with experience evaluating and analyzing technology and cybersecurity risks interested in becoming part of our Tech Audit team. As a member of the Tech Audit team, you will focus on audits of critical technology functions including cloud-based technology implementations, application controls, and cybersecurity risks.Responsibilities:-Execute test procedures of critical technology functions, cloud-based infrastructure, cybersecurity, risk management, application, and third-party management.-Perform risk assessments of business activities and perform relevant testing based on the risks and processes associated with the area being audited. Assist in communicating issues, risks and recommendations to all levels of management.-Operate independently and ensure work is completed to schedule and meets our high-quality standards.-Prepare clear, organized and complete documentation to support work performed.-Develop and maintain strong and effective working relationships with key business partners and the extended Audit group.-Leverage available data and analytical tools during the planning and fieldwork phases of audit delivery.-Proactively follow-up on agreed audit actions to ensure management delivers their commitments within the agreed timescales.-Proactively seek out learning opportunities to enhance skills and competencies related to role.Here's what we're looking for in an ideal teammate:-You are a critical thinker who seeks to understand the business and its control environment.-You believe insight and objectivity are core elements to providing assurance on the effectiveness and efficiency of Capital One's governance, risk management, and internal control processes.-You possess a relentless focus on quality and timeliness.-You adapt to change, embrace bold ideas, and are intellectually curious. You like to ask questions, test assumptions, and challenge conventional thinking.-You develop influential relationships based upon shared risk objectives and trust to deliver outstanding business impact and elevate Audit's value proposition.-You're a firm believer that a rich understanding of data, innovation, and technology will only make you a better auditor. This will require leveraging the power of data analytics and furthering your technical expertise.-You're a teacher. You do the right thing and lead by example. You have a passion for coaching and investing in the betterment of your team. You lead through change with candor and optimism.-You create energy and an environment that fosters trust, collaboration, and belonging, making it easy to attract, hire, and retain top talent.Basic Qualifications:• Bachelor's Degree or military experience• At least 2 years of experience in information technology (operations, software delivery, access management, microservices), information security (application security, network security, cyber security, data protection), information systems risk management, information systems auditing, or a combination• At least 1 year of experience in analyzing data extracts to identify trends, patterns, and anomalies, including experience in testing scripting or coding (writing, reviewing, or assessing)Preferred Qualifications:• Certified Internal Auditor (CIA), Certified Public Accountant (CPA), or relevant cloud and or cyber certifications (such as AWS certifications, CISSP, etc.)• 2+ years of experience in banking, in the financial services industry, in a professional services firm serving clients in large banks, or a combination• 3+ years of experience auditing or performing cyber or information security• 1+ years experience in cloud computing (notably AWS, GCP, Azure) and controls, or 1+ years of conducting audits of controls in cloud-based environments• Exposure to relevant industry frameworks (e.g. NIST cyber security framework, NIST 800 series, FEDRamp, CIS benchmarks, etc)At this time, Capital One will not sponsor a new applicant for employment authorization for this position.This role is hybrid meaning associates typically spend about half their time (2-3 days per week) in-person at one of our offices listed on this job posting. Monday and Fridays are enterprise- wide virtual work days. Tuesday, Wednesday and Thursday are in-person days for associates to spend time together working in our beautifully-designed team areas.Capital One offers a comprehensive, competitive, and inclusive set of health, financial and other benefits that support your total well-being. Learn more at the Capital One Careers website . Eligibility varies based on full or part-time status, exempt or non-exempt status, and management level.This role is expected to accept applications for a minimum of 5 business days.No agencies please. Capital One is an equal opportunity employer committed to diversity and inclusion in the workplace. All qualified applicants will receive consideration for employment without regard to sex (including pregnancy, childbirth or related medical conditions), race, color, age, national origin, religion, disability, genetic information, marital status, sexual orientation, gender identity, gender reassignment, citizenship, immigration status, protected veteran status, or any other basis prohibited under applicable federal, state or local law. Capital One promotes a drug-free workplace. Capital One will consider for employment qualified applicants with a criminal history in a manner consistent with the requirements of applicable laws regarding criminal background inquiries, including, to the extent applicable, Article 23-A of the New York Correction Law; San Francisco, California Police Code Article 49, Sections 4901-4920; New York City's Fair Chance Act; Philadelphia's Fair Criminal Records Screening Act; and other applicable federal, state, and local laws and regulations regarding criminal background inquiries.If you have visited our website in search of information on employment opportunities or to apply for a position, and you require an accommodation, please contact Capital One Recruiting at 1-800-304-9102 or via email at RecruitingAccommodation@capitalone.com . All information you provide will be kept confidential and will be used only to the extent required to provide needed reasonable accommodations.For technical support or questions about Capital One's recruiting process, please send an email to Careers@capitalone.comCapital One does not provide, endorse nor guarantee and is not liable for third-party products, services, educational tools or other information available through this site.Capital One Financial is made up of several different entities. Please note that any position posted in Canada is for Capital One Canada, any position posted in the United Kingdom is for Capital One Europe and any position posted in the Philippines is for Capital One Philippines Service Corp. (COPSSC).
Capital One Glassdoor Company Review
4.2 Glassdoor star iconGlassdoor star iconGlassdoor star iconGlassdoor star icon Glassdoor star icon
Capital One DE&I Review
4.2 Glassdoor star iconGlassdoor star iconGlassdoor star iconGlassdoor star icon Glassdoor star icon
CEO of Capital One
Capital One CEO photo
Richard D. Fairbank
Approve of CEO

Average salary estimate

$100000 / YEARLY (est.)
min
max
$80000K
$120000K

If an employer mentions a salary or salary range on their job, we display it as an "Employer Estimate". If a job has no salary data, Rise displays an estimate if available.

What You Should Know About Senior Associate- Cyber, Risk & Analysis Technology Audit (Hybrid), Capital One

Are you ready to take your career to the next level? Capital One is looking for a passionate and experienced Senior Associate - Cyber, Risk & Analysis Technology Audit to join our dynamic Tech Audit team in Plano, TX! In this hybrid role, you will have the opportunity to work both in the office and remotely, providing you with the flexibility to balance your professional and personal life. As a Senior Associate, you will dive deep into evaluating and analyzing technology and cybersecurity risks while focusing on vital audits of cloud-based technology implementations and application controls. You'll be responsible for executing test procedures across key technology functions, conducting risk assessments, and presenting insightful findings to management. We highly value critical thinkers here at Capital One, so you'll get to showcase your analytical skills and enrich our governance and risk management processes. With a commitment to quality, you'll prepare thorough documentation, foster strong relationships with business partners, and leverage data analytics during audit delivery. To thrive in this role, you'll need at least two years of experience in IT or information security, along with analytical prowess. If you’re a curious and proactive individual who wants to make an impact, we’d love to meet you!

Frequently Asked Questions (FAQs) for Senior Associate- Cyber, Risk & Analysis Technology Audit (Hybrid) Role at Capital One
What are the responsibilities of a Senior Associate - Cyber, Risk & Analysis Technology Audit at Capital One?

As a Senior Associate - Cyber, Risk & Analysis Technology Audit at Capital One, your key responsibilities will include auditing critical technology functions, executing test procedures for cloud-based infrastructures, assessing cybersecurity risks, and communicating findings and recommendations to management. You will also perform risk assessments of business activities and proactively follow up on audit actions.

Join Rise to see the full answer
What qualifications do I need to apply for the Senior Associate - Cyber, Risk & Analysis Technology Audit role at Capital One?

To apply for the Senior Associate - Cyber, Risk & Analysis Technology Audit position at Capital One, you should possess a Bachelor's Degree or equivalent military experience, along with at least two years of experience in information technology or information security. Familiarity with data analysis and certifications like CIA, CPA, or relevant cybersecurity qualifications are preferred.

Join Rise to see the full answer
How does Capital One support the professional growth of their Senior Associate - Cyber, Risk & Analysis Technology Audit employees?

Capital One is dedicated to professional development for its employees. As a Senior Associate - Cyber, Risk & Analysis Technology Audit, you'll have access to learning opportunities that enhance your skills and competencies. The collaborative environment encourages mentoring and knowledge-sharing, allowing you to grow both personally and professionally.

Join Rise to see the full answer
What is the team culture like for the Senior Associate - Cyber, Risk & Analysis Technology Audit position at Capital One?

The team culture at Capital One is one of collaboration and support. As a Senior Associate - Cyber, Risk & Analysis Technology Audit, you will work in a hybrid environment with a focus on teamwork and relationship-building. The emphasis on innovation and trust creates a welcoming atmosphere where every team member can thrive.

Join Rise to see the full answer
Can you explain the hybrid work model for the Senior Associate - Cyber, Risk & Analysis Technology Audit role at Capital One?

At Capital One, the Senior Associate - Cyber, Risk & Analysis Technology Audit role follows a hybrid work model, where associates typically spend about half their time in-person and half remotely. With a structured work week that includes dedicated virtual workdays on Mondays and Fridays, you have the flexibility to enjoy both in-person collaborations and focused remote work.

Join Rise to see the full answer
Common Interview Questions for Senior Associate- Cyber, Risk & Analysis Technology Audit (Hybrid)
What strategies do you use to assess technology risks in your audits?

When assessing technology risks in audits, I adopt a structured approach that includes understanding the business model, identifying key controls, and utilizing data analytics to pinpoint any gaps or vulnerabilities. I ensure that my assessments are thorough and align with industry standards.

Join Rise to see the full answer
How do you prepare for an audit of cloud-based systems?

To prepare for an audit of cloud-based systems, I conduct a comprehensive review of the cloud provider’s security stance, relevant frameworks like NIST, and internal controls. Engaging with stakeholders to grasp the operational context is also crucial, as it informs the audit scope and focus.

Join Rise to see the full answer
Can you give an example of a time when you identified a significant risk during an audit?

In my previous role, I discovered a significant vulnerability in a third-party vendor's application that could potentially expose sensitive data. By implementing targeted testing, I not only highlighted the risk to management but also recommended corrective measures that were executed.

Join Rise to see the full answer
What tools do you utilize for data analysis in audits?

I regularly use tools like Python for scripting and data manipulation, along with advanced Excel functions for trend analysis. Visualization tools help clearly present my findings, enabling stakeholders to easily grasp the insights drawn from data.

Join Rise to see the full answer
How do you communicate audit findings to different levels of management?

I tailor my communication based on the audience. For senior management, I provide high-level summaries with clear implications for the business, while for operational teams, I focus on detailed findings and actionable recommendations, ensuring transparency and engagement throughout.

Join Rise to see the full answer
What experience do you have with cybersecurity frameworks?

I have hands-on experience applying cybersecurity frameworks like NIST and CIS benchmarks in my audits. I leverage these frameworks to guide risk assessments and compliance checks, ensuring our cybersecurity posture meets industry standards.

Join Rise to see the full answer
How do you ensure the quality of your audit work?

To ensure quality in my audit work, I adhere to established audit methodologies, maintaining a meticulous review process. I also seek feedback from peers and mentors to enhance the thoroughness and effectiveness of my audits.

Join Rise to see the full answer
Describe your experience working in a hybrid work environment.

Working in a hybrid environment has taught me to become resourceful and adaptable. I prioritize clear communication to ensure collaboration remains effective across both virtual and in-person interactions, fostering a productive team dynamic.

Join Rise to see the full answer
What motivates you to work in technology audits?

I am driven by the challenge of navigating the evolving technology landscape and ensuring that businesses manage risks effectively. Contributing to organizations' security and success through rigorous audits is immensely rewarding for me.

Join Rise to see the full answer
How do you stay current with industry trends and technologies?

I stay current with industry trends and technologies by engaging in continuous education, participating in webinars, and following relevant publications. Networking with other professionals also enriches my understanding of emerging risks and solutions in our field.

Join Rise to see the full answer
Similar Jobs
Photo of the Rise User
Posted 14 days ago
Photo of the Rise User
Nine Remote 1 Denison St, North Sydney NSW 2060, Australia
Posted 2 days ago
Photo of the Rise User
Posted 12 days ago
Photo of the Rise User
Posted 3 hours ago
Photo of the Rise User
Bitstamp Remote No location specified
Posted 2 days ago

All qualified applicants will receive consideration for employment without regard to race, color, religion, sex, sexual orientation, gender identity, national origin, disability, or status as a protected veteran

805 jobs
MATCH
Calculating your matching score...
FUNDING
SENIORITY LEVEL REQUIREMENT
TEAM SIZE
EMPLOYMENT TYPE
Full-time, hybrid
DATE POSTED
December 10, 2024

Subscribe to Rise newsletter

Risa star 🔮 Hi, I'm Risa! Your AI
Career Copilot
Want to see a list of jobs tailored to
you, just ask me below!