Tech SOX Risk Lead: Controls & Compliance Strategy

Capital One; McLean (VA); On-site; USD 121,000 - 138,000; Full time

Benefits offered by this job

Health benefits

Incentives & bonuses

Job summary

Capital One seeks a Principal Risk Specialist to join its Technology SOX Governance (TSG) team in McLean, VA. You will ensure Tech controls are compliant and oversee risk activities across the enterprise while driving strategic technology risk solutions for stability and success.

You will lead governance, maintenance, testing readiness, issue management, and strategic delivery efforts to improve efficiency within the technology risk and control domain.

Qualifications

• Bachelor's degree or Military experience.
• 3+ years of Information Systems Risk Management, IT Audit, or IT Compliance Experience.
• 4+ years of Information Systems Risk Management, IT Audit, or IT Compliance Experience.
• 4+ years of Project Management experience leading cross functional projects and programs in Risk.
• 3+ years of experience with SOX regulations.
• Experience working within a Financial Services institution or highly regulated environment.
• 1+ years of cloud experience (AWS, GCP, Azure).
• Certifications such as CISA, CRISC, CISSP, CISM or CPA.

Responsibilities

• Control Governance: Ensure assigned Tech controls are operating effectively and as designed/intended.
• Control Maintenance: Provide consultation and oversight on control design and maintain effective controls.
• Testing Readiness & Support: Perform preassessments of Tech SOX controls.
• Issues Management: Provide consultation and remediation planning for identified issues.
• Strategic Delivery: Contribute to continuous process improvement in technology risk and control.

Skills

Risk management

Project management

Communication

Education

Bachelor's degree or Military experience

Job description

Capital One seeks a Principal Risk Specialist to join its Technology SOX Governance (TSG) team in McLean, VA. You will ensure Tech controls are compliant and oversee risk activities across the enterprise while driving strategic technology risk solutions for stability and success.

You will lead governance, maintenance, testing readiness, issue management, and strategic delivery efforts to improve efficiency within the technology risk and control domain.