Risk Remediation Assessor at Capital One

Nottingham, England, United Kingdom

Capital One Logo
Not SpecifiedCompensation
Mid-level (3 to 4 years), Senior (5 to 8 years)Experience Level
Full TimeJob Type
UnknownVisa
Financial ServicesIndustries

Requirements

  • Pragmatic and practical understanding of risk and security
  • Willingness to pull in experts and escalate when necessary
  • Ability to challenge and innovate to drive process improvements
  • Experience in Information Security (preferred)
  • Experience in Supply Chain Management (preferred)
  • Experience in a Risk Management role related to Information Security, Business Continuity Management, or Supply Chain Management (preferred)
  • Experience with risk assessments encompassing PCI DSS, NIST Framework, physical security controls, or IT operations management (preferred)
  • Experience communicating and presenting to senior management (preferred)
  • CISSP, CISA, or CRISC certification (preferred)
  • Willingness to travel 10-25%, including off-site locations for multi-day assessments

Responsibilities

  • Support kick-off, planning, and scoping activities for cyber-focused risk assessments, working with cross-functional resources to understand operational and technical aspects of Third Party engagement models
  • Analyse Third Party control environment data against Capital One security expectations, interpreting information security requirements and applying them to specific situations
  • Review and support execution and delivery of reports, including executive summaries and work papers detailing work completed, evidence reviewed, and identified gaps
  • Maintain relationships with Third Party management and Enterprise colleagues to manage expectations of assessments and remediation, including timing and deliverables
  • Ensure compliance to program processes and procedures
  • Maintain a thorough understanding of program controls, intent, and test procedures
  • Support third parties in appropriately managing and remediating risks identified through assessments
  • Perform cyber-focused assessments of Capital One third parties, identifying risks and delivering high-quality reports
  • Provide consultative services related to third party security while applying risk-based judgement to information security issues
  • Drive risk remediation through advice and challenge
  • Ensure risk is appropriately managed and escalated
  • Assist Third Parties, Third Party Managers, or Accountable Executives with understanding risks identified
  • Identify and support initiatives to drive ongoing process improvements

Skills

Risk Assessment
Information Security
Third Party Risk
Cyber Security
Control Analysis
Remediation
Stakeholder Management
Assessment Reporting

Capital One

Offers diverse financial products and services

About Capital One

Capital One provides a variety of financial services aimed at making banking accessible and easy for everyone. The company offers products such as credit cards, savings accounts, car loans, and business checking accounts, catering to both individual consumers and small businesses primarily in the United States. Capital One's approach includes user-friendly banking solutions with no fees or minimums for checking accounts, allowing customers to manage their finances more effectively. They generate revenue through interest on loans, credit card fees, and investment banking services. What sets Capital One apart from its competitors is its strong commitment to financial inclusion and literacy, demonstrated through community partnerships and educational initiatives, such as collaborations with Khan Academy. The company's goal is to create a more inclusive financial system and empower customers with the knowledge and tools they need to make informed financial decisions.

McLean, VirginiaHeadquarters
2014Year Founded
$15.9MTotal Funding
IPOCompany Stage
Fintech, Financial ServicesIndustries
10,001+Employees

Benefits

Medical, Dental, & Vision coverage
Onsite Health Centers
Prescription saving with network of local pharmacies
Stock Purchase Plan
Education Assistance
401(k)
Flexible Spending Accounts
Life and Disability insurance
Generous paid time off + corporate & floating holidays
Registered dieticians on site, cooking classes and free virtual fitness classes
Employee Assistance Program

Risks

Increased competition in subscription management tools may dilute Capital One's advantage.
Over-reliance on partnerships could expose Capital One to technological risks.
Departure of key personnel like Joe Rodriguez may affect risk management continuity.

Differentiation

Capital One offers user-friendly banking with no fees or minimums for checking accounts.
The company partners with Khan Academy to provide financial literacy education.
Capital One is the first major U.S. bank to offer subscription management tools.

Upsides

Capital One's mobile app is a model for secure, user-friendly digital banking.
Data sharing with Worldpay enhances payment security and fraud prevention.
Partnerships with fintechs like Minna Technologies improve customer experience.

Land your dream remote job 3x faster with AI