Senior Associate, Technology Controls Testing – Enterprise Services Risk Operations

Capital One

. Apply cyber best practices to assess current state, identify gaps, and assess cyber risk, threats, and business impact .

Posted 9/18/2026full-timeMcLean • Illinois • United StatesSenior💰 $101,100 - $138,400 per yearWebsite

Core Competencies

Role fit

Core Competencies

Use this summary to align your resume positioning with the role.

Demonstrates expertise in Cybersecurity Risk Assessment, Control Testing, and Technology Systems Analysis, with a strong ability to communicate findings and manage projects effectively. Proficient in using Excel/Google Sheets for data analysis and reporting metrics.

Highest-signal resume keywords

Cybersecurity Risk AssessmentControl Testing MethodologiesData Analysis Using Excel/Google SheetsCloud Computing (AWS, GCP, Azure)Professional Security Certification (CISSP, CISA, CRISC)

ATS Keywords

Tailor your resume

Applicant Tracking System Keywords

Tip: use these terms in your resume and cover letter to boost ATS matches.

Hard Skills

Cyber Risk AssessmentControl TestingTechnology AuditingSystems Risk ManagementTest Plan Design and ExecutionData AnalysisReporting MetricsProcess MaturityIdentity and Access Management (IAM)Cloud Technologies

Soft Skills

Clear CommunicationStakeholder EngagementCollaborationProject ManagementProblem Solving

Tools & Technologies

ExcelGoogle SheetsCloud Computing Platforms

Certifications & Qualifications

CISSPCISACRISCProfessional Security CertificationProfessional Risk Management Certification

Industry Keywords

CybersecurityTechnology Risk AssessmentsResilience EngineeringChaos EngineeringSite Reliability EngineeringFinancial Institution OversightRegulatory Agency Compliance

Tech Stack

Tools & technologies

AWSAzureCloudCyber SecurityGoogle Cloud Platform

About the role

Key responsibilities & impact

Apply cyber best practices to assess current state, identify gaps, and assess cyber risk, threats, and business impact
Define, prioritize, and escalate mitigation recommendations
Perform independent control testing and document results
Communicate findings to stakeholders
Project manage assigned engagements to meet defined timelines
Establish and maintain relationships during testing engagements
Execute manager-assigned tasks to deliver team objectives
Collaborate with team members
Analyze technology systems, including networks, applications, cloud computing, and data
Inform on cyber risk using reporting metrics
Analyze data and create charts using Excel/Google Sheets
Recommend changes to policies, procedures, and control programs to mitigate evolving risks
Challenge cyber control programs as part of first-line duties and escalate risks when appropriate
Document and communicate action plans, impediments, risks, and stakeholder engagement

Requirements

What you’ll need

Bachelor's Degree or military experience
At least 2 years of experience in technology, cybersecurity, technology auditing, systems risk management, technology risk assessments, resilience engineering, chaos engineering, site reliability engineering, or a combination
Strong understanding of requirements, controls, and testing methodologies
Interest in process maturity, cybersecurity, identity and access management (IAM), and cloud technologies
Ability to design and execute test plans
Ability to identify process and control gaps
Ability to compose clear and concise findings
Ability to clearly communicate results
Understanding of technology systems including networks, applications, cloud computing, and data
Broad understanding of major categories of cyber threats and enterprise safeguards
Understanding of associated reporting metrics and cyber risk
Experience using Excel/Google Sheets to analyze data and create charts
Preferred: Master's Degree in Information Technology, Cybersecurity, or equivalent
Preferred: 2+ years of Risk Management experience in Cyber or Information Security practice
Preferred: 2+ years of experience in cloud computing (AWS, GCP, or Azure)
Preferred: 2+ years of experience in a second-line or oversight role at a financial institution or regulatory agency
Preferred: 2+ years of experience testing Technology controls
Preferred: Professional Security Certification or Professional Risk Management Certification
Preferred: CISSP, CISA, or CRISC certification
Capital One will not sponsor a new applicant for employment authorization or provide immigration-related support

Benefits

Comp & perks

Performance-based incentive compensation, which may include cash bonus(es) and/or long-term incentives (LTI)
Comprehensive, competitive, and inclusive health, financial, and other benefits supporting total well-being
Equal opportunity employer committed to non-discrimination
Reasonable accommodations for applicants with disabilities