Senior Associate testing automated controls within the Enterprise Services Risk organization at Capital One. Collaborating across teams to enhance risk management through automation and innovative solutions.
About the role
- Analyst in Information Risk Management supporting technology and operational risk oversight. Conducting reviews, assessments, and overseeing risk management practices aligned with regulations.
Responsibilities
- Conduct evidence‑based reviews of first line risk assessments, controls, and risk decisions, providing objective challenge where needed.
- Assess completeness and accuracy of first line documentation and support escalation when risk posture misaligns with appetite.
- Support RCSA oversight by collecting evidence, reviewing controls, and identifying potential gaps against standards.
- Assist in third‑party technology risk reviews, validating due diligence evidence and analyzing residual vendor risk.
- Support oversight of technology and operational change initiatives, assessing proposed controls and risk impacts.
- Review incidents, classifications, and root cause analyses, tracking remediation effectiveness and recurring themes.
- Support issue management by challenging risk acceptances, reviewing corrective action plans, and validating closure evidence.
- Contribute to BC/DR and critical operations oversight through analysis of test results, resilience gaps, and control effectiveness.
- Perform data extraction and analysis to identify trends across risk events, issues, and assessments, producing clear risk insights.
- Use automation, Generative AI, and Agentic AI tools to streamline evidence reviews, monitoring, and second line analysis.
Requirements
- 2–4+ years of experience in Information Risk, Technology Risk, Operational Risk, Cybersecurity, Compliance, or related fields.
- Strong ability to adhere to consistent process-oriented requirements for challenge and oversight.
- Foundational understanding of risk management practices (RCSA, issues, incidents, BC/DR, vendor risk, etc.).
- Ability to analyze technical and operational data and summarize findings clearly.
- Experience with or interest in learning automation tooling, Generative AI, and Agentic AI.
- Familiarity with GRC platforms (e.g., Archer, ServiceNow, Fusion) is an asset.
- Knowledge of control frameworks (NIST, ISO, COBIT, CSA, etc.) is beneficial.
- Strong communication, documentation, and analytical skills with the ability to work in a structured, detail-oriented way.
Benefits
- We’ll empower you to learn and grow the career you want.
- We’ll recognize and support you in a flexible environment where well-being and inclusion are more than just words.
Job title
Job type
Experience level
Salary
Not specified
Degree requirement
No Education Requirement
Tech skills
Location requirements
Senior Risk Manager at Capital One, driving strategy and execution of platform modernization projects. Leading complex projects in risk management while collaborating with key stakeholders.
Senior Manager leading Emerging Risk and Strategy at Boeing, developing risk mitigation strategies and collaborating across business units. Ensuring compliance with new legal requirements and regulations.
Senior Manager role in Risk Transformation at BBVA, leading initiatives to enhance capital management and provisions. Collaborating in a multidisciplinary team to innovate within financial services.
Head of Risk managing and enhancing enterprise risk frameworks in corporate environments. Collaborating with leadership to ensure comprehensive governance and compliance across the organisation.
Vice President of Risk and Controls Operations supporting risk management across the enterprise at MUFG. Responsible for coordinating technology risk assessments and operationalizing controls.
Advisory role focusing on risk management and transformation projects at PwC. Collaborating with teams to implement governance, management strategies and lead complex programmes.
Data Governance Engineer shaping mission data governance by leading modernization efforts for national security clients. Collaborating with stakeholders to implement data management strategies.
Senior Data Governance Engineer at Booz Allen leading modernization efforts for mission data governance. Collaborating with stakeholders to implement data strategies supporting national security efforts.
Technology Coordinator at Evertec managing change processes and daily IT application operations. Requires fluency in English and strong governance experience in a hybrid role.