Tech Controls Testing Specialist - Risk & Compliance

Capital One; New York (NY); On-site; USD 121,000 - 138,000; Full time

Job summary

Capital One is expanding its Enterprise Services Risk Operations (ESRO) with a Senior Associate role focused on technology risk controls testing. You will partner with Enterprise Services, Divisional CIO and Information Security to develop and support risk solutions while enabling innovation.

The role sits in the Technology Controls Testing Team, emphasizes process maturity, cybersecurity, IAM, and cloud technologies, and requires the ability to design and execute test plans and clearly

Qualifications

• Bachelor's Degree or military experience.
• Master’s Degree in Information Technology, Cybersecurity, or equivalent.
• 2+ years of Risk Management experience in Cyber or Information Security.

Responsibilities

• Apply expertise on cyber best practices to assess current state, identify gaps, and assess cyber risk, threats, and business impact
• Define mitigation strategies, prioritizes and escalates recommendations
• Perform independent control testing activities and document results
• Communicate findings to stakeholders
• Project manage assigned engagements to meet defined timelines
• Establish and maintain relationships during testing engagements
• Execute tasks assigned by manager to deliver on team objectives
• Collaborate with team members when necessary
• Possesses an understanding of technology systems at an aggregate level, including networks, applications, cloud computing, and data
• Demonstrates a broad understanding of major categories of cyber threats, how those threats can occur in our environment, and the measures required to safeguard the enterprise
• Understands associated reporting metrics and is able to inform on cyber risk
• Leverages tools to analyze data and create charts to support cyber risk management efforts
• Makes recommendations regarding changes to policies, procedures, and control programs to mitigate evolving risks
• Effectively self-challenges cyber control programs as part of first-line duties and escalates risks where appropriate
• Demonstrates sound lifecycle program management to include documenting and communicating action plans, impediments and risks, and stakeholder engagement

Education

Bachelor's Degree or military experience

Master’s Degree in Information Technology, Cybersecurity, or equivalent

2+ years of Risk Management experience in Cyber or Information Security

Job description

Capital One is expanding its Enterprise Services Risk Operations (ESRO) with a Senior Associate role focused on technology risk controls testing. You will partner with Enterprise Services, Divisional CIO and Information Security to develop and support risk solutions while enabling innovation.

The role sits in the Technology Controls Testing Team, emphasizes process maturity, cybersecurity, IAM, and cloud technologies, and requires the ability to design and execute test plans and clearly