Hybrid Principal Auditor – Cyber Risk and Technology Audit

Posted 2 months ago

Apply now

About the role

  • Execute major components of audits, including critical technology functions, cloud-based infrastructure, cybersecurity, risk management, application, and third-party management, and assist in leading components of small to medium size audits
  • Perform risk assessments of business units and technology operations; design and execute audit procedures to verify the effectiveness of existing controls; identify and define issues; review and analyze evidence; and document client processes and procedures
  • Understand the broader context and implications (e.g., financial, legal, reputational, etc.) of the various types of risk affecting the business and critical technology functions
  • Establish and maintain good client relations during engagements and identify expectations of the client to support the client experience
  • Communicate or assist in communicating the results of audit projects to management via written reports and oral presentations
  • Prepare clear, organized and complete documentation to support work performed
  • Self-prioritize and effectively plan work activities managing multiple priorities and tasks across the team to deliver quality results
  • Coordinate with others, proactively take on additional work, and deliver succinct information tailored to the audience
  • Perform various aspects of engagement administration, including hours and budget tracking
  • Provide periodic on-the-job coaching and direct supervision over less experienced associates

Requirements

  • Bachelor’s Degree or military experience
  • At least 4 years of experience in information technology (operations, software delivery, access management, microservices), information security (application security, network security, cyber security, data protection), information systems risk management, information systems auditing, or a combination
  • At least 1 year of experience in cloud computing and controls (design, operation, risk management, or auditing)
  • At least 2 years of experience in managing components of audit engagements, project management or a combination
  • At least 2 years of experience in analyzing data extracts to identify trends, patterns, and anomalies, including 1 year of experience in test scripting or coding (writing, reviewing, assessing)
  • Certifications related to or pursuing certification related to Cloud, Cyber or Technology Operations (e.g., Cloud provider certifications, CISSP, CISM) (preferred)
  • 1 year of experience with payment technologies such as HPE Nonstop, IBM Mainframe, Mobile Payments, Tokenized services, cloud-based and virtualized environments, Windows and Linux operating environments (preferred)
  • Certifications related to or pursuing certification related to Auditing (e.g., CIA, CISA) (preferred)
  • 4+ years of experience with IT control frameworks (preferred)
  • 2+ years of experience in planning and leading audits (preferred)
  • 2+ years of experience auditing cyber or information security (preferred)
  • 1+ years of experience auditing emerging technologies (preferred)
  • 1+ years experience in cloud computing (AWS, GCP, Azure) and controls, or 1+ years of conducting audits of controls in cloud-based environments (preferred)
  • 1+ years of experience in risk and data management (preferred)
  • 1+ years of experience performing data analysis in support of internal auditing (preferred)
  • Ability to travel an average of 10-15% of the time
  • At this time, Capital One will not sponsor a new applicant for employment authorization for this position

Benefits

  • Performance based incentive compensation, which may include cash bonus(es) and/or long term incentives (LTI)
  • Capital One offers a comprehensive, competitive, and inclusive set of health, financial and other benefits that support your total well-being (Eligibility varies based on full or part-time status, exempt or non-exempt status, and management level)
  • Hybrid work arrangement: associates will spend 3 days per week in-person at one of our offices listed on this job posting; Fridays are enterprise-wide virtual work days

Job title

Principal Auditor – Cyber Risk and Technology Audit

Job type

Experience level

Lead

Salary

$115,900 - $158,700 per year

Degree requirement

Bachelor's Degree

Location requirements

Report this job

See something inaccurate? Let us know and we'll update the listing.

Report job