Risk Manager

Capital One

. Perform process and technology risk assessments to determine the optimal control mix for products pursuing SOC 2 or ISO27001 attestation .

Posted 10/5/2026full-timeUnited StatesMid-LevelSenior💰 $138,100 - $173,400 per yearWebsite

Core Competencies

Role fit

Core Competencies

Use this summary to align your resume positioning with the role.

Demonstrates expertise in process and technology risk assessments, focusing on SOC 2 and ISO27001 attestation. Proficient in evaluating control design and improvements while effectively communicating with senior leadership and product teams.

Highest-signal resume keywords

Internal ControlsRisk ManagementAuditCloud TechnologiesCISA Certification

ATS Keywords

Tailor your resume

Applicant Tracking System Keywords

Tip: use these terms in your resume and cover letter to boost ATS matches.

Hard Skills

Risk AssessmentControl EvaluationControl DesignEvidence CollectionControl ImprovementIT General ControlsData Movement ControlsSystems Implementation ControlsAttestation FrameworksManagement Response Drafting

Soft Skills

CommunicationCollaborationAdvisory SkillsPresentation Skills

Tools & Technologies

AWSAzureGCP

Certifications & Qualifications

CISACISSPCRISC

Industry Keywords

SOC 2ISO27001Control DeviationsExternal AuditorEvidence Submission

Tech Stack

Tools & technologies

AWSAzureCloudGoogle Cloud Platform

About the role

Key responsibilities & impact

Perform process and technology risk assessments to determine the optimal control mix for products pursuing SOC 2 or ISO27001 attestation
Identify product feature changes and evaluate their impact on required controls
Monitor changes in attestation frameworks and assess their impact on control requirements
Ensure control design addresses emerging technologies
Interpret, communicate, and present control design to senior leadership
Recommend controls and process improvements
Evaluate control deviations and their impact on management’s opinion regarding control design, implementation, and operating effectiveness
Draft management responses for attestation reports
Partner with product teams to answer customer inquiries about attestation report issues
Facilitate external auditor evidence requests
Advise control owners on evidence submissions
Establish evidence collection timelines and deadlines with external auditors

Requirements

What you’ll need

High School Diploma, GED, or equivalent certification
At least 4 years of experience with Internal Controls, Risk Management, or Audit
At least 2 years of experience identifying and assessing IT general, IT application, data movement, and systems implementation controls
Bachelor’s Degree (preferred)
5+ years of experience in Auditing and Control Evaluation (preferred)
1+ years of experience with Cloud technologies (AWS, Azure, or GCP) (preferred)
CISA, CISSP, or CRISC certification (preferred)
Capital One will not sponsor a new applicant for employment authorization or offer immigration-related support

Benefits

Comp & perks

Performance based incentive compensation, which may include cash bonus(es) and/or long term incentives (LTI)
Comprehensive, competitive, and inclusive health, financial and other benefits supporting total well-being
Reasonable accommodations for applicants who require them