Senior Technology Auditor: Cyber Risk & Cloud Controls

Capital One; McLean (VA); Hybrid; USD 111,000 - 127,000; Full time

Job summary

Capital One in McLean, VA seeks a Senior Technology Auditor to join its Global Payment Network team. You will evaluate technology and cybersecurity risks, perform control testing, and collaborate with partners to improve governance and risk management.

The role blends audit rigor with data analytics and cloud security awareness, requiring thoughtful assessment of complex systems, including cloud-based infrastructure and third-party controls. Hybrid work allows in-office three days per week.

Qualifications

• Bachelor's degree or military experience.
• 2+ years in tech auditing, IT operations, security, or risk management.
• At least 1 year of data analysis and testing/coding experience.

Responsibilities

• Execute test procedures of critical technology functions, cloud infrastructure, cybersecurity, risk management, application, and third-party management.
• Perform risk assessments of business activities and communicate issues, risks and recommendations to management.
• Operate independently and ensure work is completed to schedule and high-quality standards.
• Prepare clear, organized and complete documentation to support work performed.
• Develop and maintain strong working relationships with key business partners and the Audit group.
• Leverage data analytics during planning and fieldwork phases of audit delivery.
• Proactively follow-up on audit actions to ensure management delivers commitments on time.
• Pursue learning opportunities to enhance skills and competencies.

Skills

Tech auditing

Information security

Data analysis

Risk assessment

Scripting/Coding basics

Education

Bachelor's Degree or military experience

Tools

AWS

GCP/Azure

CISSP

Job description

Capital One in McLean, VA seeks a Senior Technology Auditor to join its Global Payment Network team. You will evaluate technology and cybersecurity risks, perform control testing, and collaborate with partners to improve governance and risk management.

The role blends audit rigor with data analytics and cloud security awareness, requiring thoughtful assessment of complex systems, including cloud-based infrastructure and third-party controls. Hybrid work allows in-office three days per week.