Drimva

Capital One

Sr. Associate, Tech Risk & Analysis - Technology Audit

$101K–$138K

McLean, VA +3 · Senior · Full-time · Posted Oct 27, 2026

Location
McLean, VA
Richmond, VA
New York, NY
Plano, TX
Experience
At least 2 years in one or more of the listed areas, or a combination. Preferred: 2+ years in banking/financial services/professional services serving large banks; 3+ years auditing or performing cyber or information security; 2+ years in cloud computing and controls, or 1+ years auditing controls in cloud-based environments.
Education
Bachelor’s Degree or military experience.
Visa sponsorship
Capital One will not sponsor a new applicant for employment authorization or offer immigration-related support for this position.

About the job

Conduct technology audits and risk assessments of critical technology functions, including cloud implementations, application controls, cybersecurity, and third-party management.

What you'll do

  • Execute audit tests and risk assessments, and communicate issues, risks, and recommendations to management.
  • Document audit work, use data and analytical tools, and complete work independently to quality and schedule standards.
  • Follow up on audit actions and build effective relationships with business partners and the Audit group.

What they ask for

  • Bachelor’s Degree or military experience.
  • At least 2 years of experience in a listed technology, cybersecurity, auditing, systems risk, resilience, chaos engineering, or site reliability engineering area, or a combination.

Nice to have

  • CIA, CPA, or relevant cloud or cyber certifications, such as AWS certifications or CISSP.
  • Experience in banking, financial services, or professional services serving large banks; auditing cyber or information security; or cloud computing and controls.

Pay

$111,200 - $126,900 USD base salary; $121,300 - $138,400 USD base salary; $101,100 - $115,400 USD base salary; $101,100 - $115,400 USD base salary

Tools

AWS, GCP, Azure

Model-written summary · the original posting is authoritative

First seen Oct 28, 2026 · Last verified Nov 5, 2026 (UTC)