Technology Risk Strategist — SOX & Controls Lead

Capital One Group; McLean (VA); Hybrid; USD 121,000 - 138,000; Full time

Job summary

Capital One is seeking a Principal Risk Specialist to oversee technology risk and SOX controls within the TSG team. You will ensure controls operate effectively, provide risk consulting, and drive improvements across the enterprise.

The role emphasizes collaboration with control stakeholders, process optimization, and strong project management across multiple lines of business. The position requires a Bachelor's degree or military experience and 3+ years in IS risk management, IT audit, or IT

Qualifications

• Bachelor's Degree or Military experience.
• At least 3 years of Information Systems Risk Management, IT Audit, or IT Compliance experience.
• Preferred: 4+ years in IS Risk Management and IT Compliance.
• Experience in Financial Services or highly regulated environments.
• Certifications such as CISA, CRISC, CISSP, CISM or CPA.
• Sponsorship for employment authorization not offered for this position.

Responsibilities

• Control Governance: Own the operational oversight of tech controls and provide risk consulting for assigned controls portfolio.
• Control Maintenance: Oversight on control design and effective challenges to maintain controls for internal/external testing.
• Testing Readiness & Support: Pre-assessments of Tech SOX controls to determine sufficiency and effectiveness before formal testing.
• Issues Management: Consult and challenge identified issues, assess impact, plan remediation, and close issues.
• Strategic Delivery: Contribute to continuous process improvement in technology risk and control domain.

Skills

Risk Management

IT Audit

IT Compliance

Project Management

SOX Regulations

Cloud Services

Regulatory Compliance

Education

Bachelor's Degree or Military experience

Job description

Capital One is seeking a Principal Risk Specialist to oversee technology risk and SOX controls within the TSG team. You will ensure controls operate effectively, provide risk consulting, and drive improvements across the enterprise.

The role emphasizes collaboration with control stakeholders, process optimization, and strong project management across multiple lines of business. The position requires a Bachelor's degree or military experience and 3+ years in IS risk management, IT audit, or IT